Data models Archives • Helge Klein

Splunk Accelerated Data Models – Part 3

This article is based on my Splunk .conf 2015 session and is the second in a mini-series on Splunk data model acceleration. Make sure to read parts 1 and 2 first. Searching Accelerated Data Models Which Searches are Accelerated? The high-performance analytics store (HPAS) is used only with Pivot (UI and the pivot command) and […]

Splunk Accelerated Data Models – Part 2

This article is based on my Splunk .conf 2015 session and is the second in a mini-series on Splunk data model acceleration. Make sure to read part 1 first. Under the Hood HPAS Population The high-performance analytics store (HPAS) is populated by scheduled searches that run every 5 minutes. The HPAS spans a user-defined time […]

Splunk Accelerated Data Models – Part 1

This article is based on my Splunk .conf 2015 session and is the first in a mini-series on Splunk data model acceleration. Why Accelerate? Have you ever seen this? Splunk is great and very fast with needle in a haystack searches, e.g. find a specific keyword in millions of events. It is not so fast […]

Tag: Data models

Splunk Accelerated Data Models – Part 3

Splunk Accelerated Data Models – Part 2

Splunk Accelerated Data Models – Part 1