In a Distributed Environment with a Searchhead Cluster and Indexer Cluster, where do DataModelaccelerationsummaries resides?
In the Searchhead Cluster or in the indexer Cluster? This is a q...
Hi
is it possible to use 2 Splunk Enterprise Security apps on 2 stand alone searchheads with same Indexer cluster? we have a requirement to separate the Enterprise Security using different i...
Hello,
Can you declare a datamodel acceleration on one searchhead and use the accelerated data from another server?
I have 2 searchheads, one used for dashboards/jobs and another one for a...