Data model acceleration configuration file reference
Edit datamodels.conf, located on your search head at: /etc/apps/
The default configurations of the Data Model properties are:
SA-VMW-HierarchyInventory/default/datamodels.conf
[VMwareInventory] acceleration = 1 acceleration.earliest_time = -1mon acceleration.cron_schedule = */5 * * * *
SA-VMW-Performance/default/datamodels.conf
[VMwarePerformance] acceleration = 1 acceleration.earliest_time = -1mon acceleration.cron_schedule = */5 * * * *
Common information model data model acceleration configurations
When you install Splunk_SA_CIM and the Splunk App for VMWare on the same search head, the following data model acceleration configurations for CIM data models are created in /Splunk_TA_vmware/default/inputs.conf
.
[dm_accel_settings] interval = 86400 [dm_accel_settings://Performance] acceleration = true [dm_accel_settings://Change_Analysis] acceleration = true [dm_accel_settings://Authentication] acceleration = true
These stanzas are used to accelerate the CIM data models by default. Using the stanzas listed in inputs.conf of Splunk_TA_vmware, the dm_accel_settings.py file in SA-utils creates the following stanzas in the datamodels.conf of Splunk_SA_CIM/local
.
[Change_Analysis] acceleration = true [Authentication] acceleration = true [Performance] acceleration = true
Data collection configuration file reference |
This documentation applies to the following versions of Splunk® App for VMware (Legacy): 3.3.0
Feedback submitted, thanks!