Data Model and Data Model Acceleration
The app consists of one data model named "Illumio". The data model used in this application is not accelerated by default. If you want to improve the responsiveness of the dashboards, you should enable data model acceleration with a 1-week period. Accelerated data models help improve the performance of the dashboard, but also increase the disk usage on the indexer node.
To enable acceleration:
On the Splunk menu bar, click Settings > Data models.
From the list of data models, click Edit in the Action column of the row for the Illumio data model.
From the list of actions, select Edit Acceleration.
Check the Accelerate checkbox to enable data model acceleration.
Select the summary range and specify an acceleration period of 1 week.
Click Save.
If you don’t need to use the already indexed accelerated data model, the data model can be configured to rebuild from scratch for the specified acceleration period.
To rebuild the data model:
On the Splunk menu bar, click Settings > Data models.
From the list for Data models, expand the Illumio row by clicking the > arrow in the first column.
From the Acceleration section, click Rebuild.
Monitor the status of the rebuild in the Status field of the Acceleration section. Reload the page to get the latest rebuild status.