Splunk Enterprise Security

ES: DataModel Acceleration Enforcement: Encountered the following error while trying to update: The following required arguments are missing: manual_rebuilds.

maurizioCagliot
Engager

Hi,
when trying to remove the automatic data model acceleration enforcement from Data Inputs --> Data Model Acceleration Enforcement I'm receiving this error and I can't save:
Encountered the following error while trying to update: The following required arguments are missing: manual_rebuilds.

I'm logged as admin.

Any idea?
Thank you

garias_splunk
Splunk Employee
Splunk Employee

That is a known issue in ES 6.0 which is solved in 6.1 onwards. It is a UI problem.

 

There is a workaround for this using the command line rest point. For instance in order to disable the 'Web' DM Acceleration and Enforcement, run this:

curl -ku admin https://yourServerHere:8089/servicesNS/nobody/SplunkEnterpriseSecuritySuite/data/inputs/dm_accel_set... --data "acceleration=false&manual_rebuilds=false&output_mode=json" | python -m json.tool

b_chris21
Communicator

That worked in my case. Thank you very much Gaspar.

0 Karma

martinnepolean
Explorer

Any idea to fix  this issue?

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...