https://docs.splunk.com/Documentation/Splunk/9.4.1/Knowledge/Acceleratedatamodels
When you run a tstats search on an accelerated data model where the search has a time range that extends past the summarization time range of the data model, the search will generate results from the summarized data within that time range and from the unsummarized data that falls outside of that time range.
When a data model is accelerated, Splunk precomputes a summary of the data model to improve search performance. This affects how it can be queried:
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
silverm4n
4 weeks, 1 day agojiiieee
1 month ago