Splunk Search

data acceleration model

kishan2356
Explorer

I have a accelerated data model where I would like to run multiple searches. Total of four searches running to find data going back four weeks ( eval _time = -7d@d, eval _time = -14d@d , ect)  

Is there a way to run a multisearch using tstats that would run through by accelerated data model or is there a way to do this over the pivot table?

 

Please let me know if I need to provide more context.

Labels (1)
0 Karma

tscroggins
Influencer

Is there a specific reason you need to execute multiple searches concurrently rather than provide an appropriately broad where clause?

0 Karma
Get Updates on the Splunk Community!

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...

AppDynamics is now part of Splunk Ideas

Hello Splunkers, We have exciting news for you! AppDynamics has been added to the Splunk Ideas Portal. Which ...

Advanced Splunk Data Management Strategies

Join us on Wednesday, May 14, 2025, at 11 AM PDT / 2 PM EDT for an exclusive Tech Talk that delves into ...