Reporting

Splunk App for Web Analytics data model acceleration is not completing

vikas_gopal
Builder

HI Experts,

I am sure someone must have faced this issue with

Web Analytics 2.2.1
Splunk 7.2.5 (SHC, Index Cluster

as I have seen similar posts but no concrete Answer . I am aware that when we install this app we will get Web data model.Because i already have CIM so I have cloned this data model and named it "Web Analytics" . I can see the data as it is properly tagged (tag=web), this gives me the results as expected. I have accelerated this data model for summary range 1 day. Till 99.98% it completed in 30 min but then it stuck for like 48 hours now , as shown below . I tried rebuilding it still same status

MODEL
Datasets
3 Events, 1 Search Event Edit
Permissions
Shared Globally. Owned by nobody.   Edit
ACCELERATION
Rebuild Update  Edit
Status
99.98% Completed
Access Count
0. Last Access: -
Size on Disk
1.91 GB
Summary Range
86400 second(s)
Buckets
1006
Updated
5/10/20 7:04:00.000 PM"

I do not know if because of this dashboards like (Analytics Center,Audience,Acquisition,Behavior Overview) are blank . Couple of other observations
Below query does not produce any results as Web.eventtype=pageview produce no results

| tstats summariesonly=t prestats=t dc(Web.http_session) FROM datamodel=`datamodel` WHERE Web.site="*" Web.eventtype=pageview GROUPBY Web.http_session,Web.ua_mobile
_time span=1d  | timechart span=1d dc(Web.http_session) by Web.ua_mobile  | rename Web.ua_mobile AS "Mobile Device "  | fields - VALUE

I have also checked Document link in the app itself and can see below

Web Server Log Data check (tag=web | head 5)  check completed
Website Configuration check --table is showing results  
Lookup check --(Sessions,Pages) ---check completed
Data Model Acceleration check --98.99%

Any help will be highly appreciated.

| tstats summariesonly=t prestats=t count FROM datamodel=WebAnalytics --> Produce no Result
| tstats count FROM datamodel=WebAnalytics --> Produced results

VG

Labels (2)
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...