×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
mahboubi66
Engager
Member since: ‎12-06-2020
‎07-29-2021
Community Statistics
Posts 3
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎12-06-2020
View All

Data model search get slow when results piped to t...

by in Splunk Search
‎12-22-2020 07:19 AM
‎12-22-2020 07:19 AM
Hi I have an accelerated data model, when I run the search like below it returns result in a few seconds. "| datamodel Network_Traffic All_Traffic summariesonly=true search | search All_Traffic.src=x.x.x.0/24 OR All_Traffic.dest=x.x.x.0/24 " But when I pipe it to table command query take more than an hour to complete. "| datamodel Network_Traffic All_Traffic summariesonly=true search | search All_Traffic.src=x.x.x.0/24 OR All_Traffic.dest=x.x.x.0/24 | table All_Traffic.src" I run both of them in last 7 days time range, What's the problem? ... View more
Labels

How can enable kvstore monitoring for seach head c...

by in Knowledge Management
‎12-06-2020 07:00 AM
‎12-06-2020 07:00 AM
Hi We have a search head cluster with three members, as you know all members have same "default host name". When I try to enable KVStore monitoring in monitoring console it says "Duplicate instance name. Ensure each instance has a unique instance (host) name." But because they are member of search head cluster I can't assign unique name to each one. How can I enable KVStore monitoring for search head cluster members? ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎07-29-2021 10:24 AM