Hi, I have search head cluster with 3 search heads. I am trying to accelerate a data model. According to data model acceleration document, it is clear that there will be 3 concurrent searches executed during the acceleration process. Now my question is, will these three concurrent searches be distributed across the search head cluster or just end up running on the same search head where the acceleration was enabled. How does the search head cluster captain handle data model acceleration concurrent searches? Any help appreciated. Thanks Veera ... View more

We are seeing a spike in our splunk enterprise node after upgrading to 7.0.4 from 6.4.5 The node performs the following roles Cluster Master License Master The spike is from 40% to 70%. Is this acceptable/expected? Any help is appreciated thanks! ... View more