Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to add keepevicted=true in the datamodel or the query which uses datamodel (Data model has a transaction)?

$
0
0
Hi, I've created a datamodel which has a TRANSACTION. When I try to use the datamodel query for a longer period of time say 7 days , I'm seeing the following error.> Some transactions have been discarded.> To include them, add keepevicted=true> to your transaction command. Query Used - | datamodel abc abc_Transaction search | search xyz How to add keepevicted=true to the transaction command in the datamodel? Thanks.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>