![]() ![]() If using the Palo Alto Networks App, you must enable datamodel acceleration to see data in the dashboards. Figure: Downloading the App and Add-on from within Splunk Enterprise. Install the Palo Alto Networks App by downloading it from the App homepage, or by installing it from within Splunk. Dashboards will not display any data until the data model is accelerated. This is no longer allowed by Splunk so since App 5.4.2 you are required to install the App and Add-on individually.ĭata Model acceleration is no longer enabled by default. If you have installed the App on Indexers or Heavy Forwarders, please delete the App so only the Add-on remains on those nodes.Įarlier versions of the App would install the Add-on automatically. Now, it is recommended to install the App only on Search Heads per the table above. However, this can result in duplicate storage of accelerated datamodels. Previous guidance was to install the App and Add-on to all Search Heads, Indexers, and Heavy Forwarders.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |