I had been sharing DM summaries successfully between a pair of standalone SHs. However, I started getting the error below for one of the DM summaries being shared. Other DM summaries don't appear t...
To reduce disk usage on the indexers, I heard that Splunk Shared DataModels can help prevent duplication of the datamodel accelerated file by accelerated datamodels. For example, in a s...
...rom the Model which was just passed to it.
Now what i want to try and do is add some custom data to be sent to AppD which contains some information which i need to take from the page after i...
Hi at all, I have an issue on DataModels accelerations: the run times of each accelerations are too high to use DMs in my Correlation Searches: more than 2000 seconds for each run. I have six I...
In a Distributed Environment with a Searchhead Cluster and Indexer Cluster, where do DataModelaccelerationsummaries resides?
In the Searchhead Cluster or in the indexer Cluster? This is a q...
Hi,
We have enabled Application for EUM Browser Monitoring but we are not able to see the data from the Controller UI. We have checked the code snippet for javascript agent that is defined and i...
...to 1.0.6 and this has stopped virtual pages data from being recorded. From what I understand version 1.0 was a big change to the routing.
The company that I work for is using AppDynamics V...
Hi
is it possible to use 2 Splunk Enterprise Security apps on 2 stand alone searchheads with same Indexer cluster? we have a requirement to separate the Enterprise Security using different i...
Hello,
Can you declare a datamodel acceleration on one searchhead and use the accelerated data from another server?
I have 2 searchheads, one used for dashboards/jobs and another one for a...