...etting it to use ReportAcceleration, I went to Manager and do not see "ReportAcceleration" as an option. The upgrade went without error and this is the first problem like this that I've seen. Is t...
Splunk "Managereportacceleration" manual specifies the following:
In addition, you can have reports that technically qualify for reportacceleration, but which may not be helped much by it. T...
Using the new reportacceleration feature, I'm only getting "There are no reportacceleration summaries." message on the summary page where I would manage the reportaccelerations. This page:
h...
For my reportacceleration summaries, I can see some statistics in the Splunk Manager. I've read the manual section on ManageReportAcceleration, so I know about the Summarization Load statistic a...
I'm sorry it's hard to read because I don't understand English and I'm using a translation app. Currently, I am not able to "Premise follow-up" reports in Splunk. Subsequent processing is started w...
...million. Looking at some of s3 access logs, it seems like search objects are getting uploaded? Most of these uploads are for "ra" (ReportAcceleration bucket) index=_internal host=<XXX&g...
...he 4 listed ReportAcceleration Summaries to 1 day but the app is still basically un-usable as it stands.
Any suggestions to troubleshoot / improve this?
Hi All,
I have a search like below which is using "ReportAcceleration" (Retention 7days). Even though the ReportAcceleration Summary saying reporting is being accelerated, I am not seeing any v...
Be careful when you set size-based retention limits for your indexes so they do not take up too much disk storage space. By default, reportacceleration summaries can theoretically take up an u...
Our search heads are filling up with tsidx files in the /var/run/splunk/dispatch/tsidxstats directory, but I am not able to find any documentation that explains what these files are. We suspect that...