Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Deployment monitor accelerated searches not working at all?

$
0
0

Hi,

I have a couple of servers that were 4.x and I updated them to 5.0.2. I also installed the latest Deployment Monitor application.

However, now accelerated searches are not working at all. In Manager -> Report Acceleration Summaries they are all listed like this:

c61755ddd7cc1021    
forwarders_summary_10m
dm_license_summary_10m_by_forwarder
    0.0000  0 Last Access: Never    Summarization not started Updated: Never

a7d992d7273cd430    
dm_license_summary_10m_by_sourcetype
    0.0000  0 Last Access: Never    Summarization not started Updated: Never

If I go to a search in Manager -> Searches and reports and select one (for example sourcetypes_summary_10m) I can see that the search is:

`sourcetypes_summary_10m`

And it's accelerated to 3 months summary range. However, when I click on Save I get the following error:

Encountered the following error while trying to update: In handler 'savedsearch': This search cannot be accelerated

Checking the macro it looks ok. Puzzled. :/


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>