Report acceleration availability

Report acceleration should always be on your mind while designing reports. However, not all your reports can be accelerated. You can't accelerate your report in the following cases:

  • It was created via pivot
  • Your permissions do not enable you to accelerate searches (you require the schedule_search and accelerate_search capabilities), or WRITE is not granted to you for the report
  • The underlying search uses the verbose search mode

Get Implementing Splunk 7 - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.