Splunk Revolution Award

On the eve of my departure for E2EVC Athens I feel it is time for a laudation. Let me explain why. Athens will be my 22nd E2EVC out of 40 events total. In the past eight years, I attended every single E2EVC event in Europe and the US. There is a reason for that, of course. It is certainly not an overabundance of time on my part or even wanderlust. It is simply the fact that E2EVC’s creator, Alex Cooper, has done the most remarkable thing. He single-handedly established the Citrix community in Europe (and helped along the greater end-user community quite a bit). That is a - very - significant achievement.

This article is based on my Splunk .conf 2015 session and is the second in a mini-series on Splunk data model acceleration. Make sure to read part 1 first. Under the Hood HPAS Population The high-performance analytics store (HPAS) is populated by scheduled searches that run every 5 minutes. The HPAS spans a user-defined time range. Old events are purged automatically by a maintenance process that runs every 30 minutes.