Splunk Operational Intelligence Cookbook - Third Edition

The simplicity of report acceleration

We earlier outlined that the one key difference between report acceleration and summary indexing is in the way in which report acceleration automatically handles the data summarization behind the scenes. Not only is this automatically computed, but Splunk also automatically identifies when searches are run that might benefit from the already accelerated report data and make this data available to the searches; all of this is performed by the click of a button.