Splunk Search

How accelerate only one root dataset from datamodel with multiple datasets?

kyokkygo
Engager

Hi! I try to accelerate only one dataset in datamodel with multiple datasets. How i can do it through datamodel.conf or in web ui? 

In webui i cant choose acceleration in edit drilldown(

Labels (1)
0 Karma
1 Solution

PickleRick
SplunkTrust
SplunkTrust

You define acceleration (and its parameters) only at datamodel level. You can't accelerate specific dataset(s) or differentiate parameters between different dataset within a single datamodel.

View solution in original post

0 Karma

PickleRick
SplunkTrust
SplunkTrust

You define acceleration (and its parameters) only at datamodel level. You can't accelerate specific dataset(s) or differentiate parameters between different dataset within a single datamodel.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @kyokkygo,

you can do DataModel accelarations by GUI only at root level in [Settings > Data Model]

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...