Introduction If you’re running Splunk Enterprise Security Suite, you are already leveraging accelerated datamodels to power your detections and altering. However, there may be situations where you want to leverage those same datamodels you already have when running searches on your other search heads. You could enable acceleration on all your search heads, but [...]

The post Enable Sharing of Datamodel Acceleration Summaries between Search Heads appeared first on Hurricane Labs.

The post Enable Sharing of Datamodel Acceleration Summaries between Search Heads appeared first on Security Boulevard.

Tom Kopchak

Source: Security Boulevard
Source Link: https://securityboulevard.com/2024/03/enable-sharing-of-datamodel-acceleration-summaries-between-search-heads/