Reporting

Report Acceleration: Does the summarization start from scratch when it is updated?

HeinzWaescher
Motivator

Hi,

Does the summarization start from scratch when it is updated for report acceleration? Or is it just updating "new data" that has not been summarized yet?

Thanks in advance

0 Karma
1 Solution

ChrisG
Splunk Employee
Splunk Employee

The software runs the report on a periodic basis to update the summary and keep it current. See "How the Splunk platform builds report acceleration summaries" in the Knowledge Manager Manual.

View solution in original post

ChrisG
Splunk Employee
Splunk Employee

The software runs the report on a periodic basis to update the summary and keep it current. See "How the Splunk platform builds report acceleration summaries" in the Knowledge Manager Manual.

Get Updates on the Splunk Community!

hadoop vs splunk

hiIn big data can we replace hadoop by splunk ? and why?do splunk do  all hadoop fonctionality

logs are not getting from Linux machine

logs are not getting from Linux machineI am using Splunk cloud trial and in a Linux machine and installed ...

DateParserVerbose issue for Symantec Email Security Add-on for Splunk

Hi All,We are observing high number of parsing issues on sourcetype= symantec:email:cloud:atp. We haven't done ...