Enable Sharing of Datamodel Acceleration Summaries between Search Heads

Introduction If you’re running Splunk Enterprise Security Suite, you are already leveraging accelerated datamodels to power your detections and altering. However, there may be situations where you want to leverage those same datamodels you already have when running searches on your other search heads. You could enable acceleration on all your search heads, but [...]

The post Enable Sharing of Datamodel Acceleration Summaries between Search Heads appeared first on Hurricane Labs.

The post Enable Sharing of Datamodel Acceleration Summaries …

detections enable enterprise enterprise security introduction may power running search searches security security suite sharing splunk splunk enterprise splunk tutorials