...etting it to use ReportAcceleration, I went to Manager and do not see "ReportAcceleration" as an option. The upgrade went without error and this is the first problem like this that I've seen. Is t...
Using the new reportacceleration feature, I'm only getting "There are no reportacceleration summaries." message on the summary page where I would manage the reportaccelerations. This page:
h...
For my reportacceleration summaries, I can see some statistics in the Splunk Manager. I've read the manual section on ManageReportAcceleration, so I know about the Summarization Load statistic a...
Splunk "Managereportacceleration" manual specifies the following:
In addition, you can have reports that technically qualify for reportacceleration, but which may not be helped much by it. T...
...million. Looking at some of s3 access logs, it seems like search objects are getting uploaded? Most of these uploads are for "ra" (ReportAcceleration bucket) index=_internal host=<XXX&g...
Hi All,
I have a search like below which is using "ReportAcceleration" (Retention 7days). Even though the ReportAcceleration Summary saying reporting is being accelerated, I am not seeing any v...
...he 4 listed ReportAcceleration Summaries to 1 day but the app is still basically un-usable as it stands.
Any suggestions to troubleshoot / improve this?
Be careful when you set size-based retention limits for your indexes so they do not take up too much disk storage space. By default, reportacceleration summaries can theoretically take up an u...
Our search heads are filling up with tsidx files in the /var/run/splunk/dispatch/tsidxstats directory, but I am not able to find any documentation that explains what these files are. We suspect that...
Hi,
could not find anything on the website. I like to try and maybe use splunk indefinteley on my home lab. Is there such a thing like free license or home license? Enterprise trial is for 60 days ...