Wondering if there is a way to build a data model and pivot with Hunk?
If so, I'm really wondering how this gets implemented with hadoop. How much is carried by hadoop vs. splunk, etc.?
At this time, you cannot use data models or pivoting with Hunk. You can use report acceleration to speed up queries.
In the latest release of Hunk 6.4 there is a support for Data Model Acceleration and all the commands that goes with Data Models
http://docs.splunk.com/Documentation/Hunk/6.4.0/Hunk/Configuredatamodelacceleration
At this time, you cannot use data models or pivoting with Hunk. You can use report acceleration to speed up queries.
are there plans to fix this?
datamodels are becoming quite prevalent on the app field and not supporting them makes using Splunk apps inside Hunk an herculean task