Data model acceleration configuration file reference

Edit datamodels.conf, located on your search head at: /etc/apps/

The default configurations of the Data Model properties are:

SA-VMW-HierarchyInventory/default/datamodels.conf

[VMwareInventory]
acceleration = 1
acceleration.earliest_time = -1mon
acceleration.cron_schedule = */5 * * * *

SA-VMW-Performance/default/datamodels.conf

[VMwarePerformance]
acceleration = 1
acceleration.earliest_time = -1mon
acceleration.cron_schedule = */5 * * * *

Common information model data model acceleration configurations

When you install Splunk_SA_CIM and the Splunk App for VMWare on the same search head, the following data model acceleration configurations for CIM data models are created in /Splunk_TA_vmware/default/inputs.conf.

[dm_accel_settings]
interval = 86400

[dm_accel_settings://Performance]
acceleration = true

[dm_accel_settings://Change_Analysis]
acceleration = true

[dm_accel_settings://Authentication]
acceleration = true

These stanzas are used to accelerate the CIM data models by default. Using the stanzas listed in inputs.conf of Splunk_TA_vmware, the dm_accel_settings.py file in SA-utils creates the following stanzas in the datamodels.conf of Splunk_SA_CIM/local.

[Change_Analysis]
acceleration = true

[Authentication]
acceleration = true

[Performance]
acceleration = true