Splunk Search

Why is the access count of a datamodel is always zero, even though we use the datamodel in searches and dashboards?

Kukkadapu
Path Finder

Hi, I see that the access count of the datamodel is always zero, even though we are using the datamodel in searches and the dashboards?

How do I know if the search is hitting the datamodel?

Thanks.

0 Karma

Lucas_K
Motivator

Are you using a tstats command?

http://docs.splunk.com/Documentation/Splunk/6.5.0/SearchReference/Tstats

Apparently works for pivot command also but i've never seen it.

https://helgeklein.com/blog/2015/11/splunk-accelerated-data-models-part-3/

0 Karma

Kukkadapu
Path Finder

HI Lucas, I'm not using any tstats command, we are only using datamodel command.

| datamodel

Thanks.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...