{"action":"closed","issue":{"url":"https://api.github.com/repos/PaloAltoNetworks-BD/SplunkforPaloAltoNetworks/issues/7","repository_url":"https://api.github.com/repos/PaloAltoNetworks-BD/SplunkforPaloAltoNetworks","labels_url":"https://api.github.com/repos/PaloAltoNetworks-BD/SplunkforPaloAltoNetworks/issues/7/labels{/name}","comments_url":"https://api.github.com/repos/PaloAltoNetworks-BD/SplunkforPaloAltoNetworks/issues/7/comments","events_url":"https://api.github.com/repos/PaloAltoNetworks-BD/SplunkforPaloAltoNetworks/issues/7/events","html_url":"https://github.com/PaloAltoNetworks-BD/SplunkforPaloAltoNetworks/issues/7","id":44028219,"number":7,"title":"Data model  acceleration is very slow","user":{"login":"hkguy80","id":7089684,"avatar_url":"https://avatars.githubusercontent.com/u/7089684?v=3","gravatar_id":"","url":"https://api.github.com/users/hkguy80","html_url":"https://github.com/hkguy80","followers_url":"https://api.github.com/users/hkguy80/followers","following_url":"https://api.github.com/users/hkguy80/following{/other_user}","gists_url":"https://api.github.com/users/hkguy80/gists{/gist_id}","starred_url":"https://api.github.com/users/hkguy80/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hkguy80/subscriptions","organizations_url":"https://api.github.com/users/hkguy80/orgs","repos_url":"https://api.github.com/users/hkguy80/repos","events_url":"https://api.github.com/users/hkguy80/events{/privacy}","received_events_url":"https://api.github.com/users/hkguy80/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2014-09-26T08:42:43Z","updated_at":"2016-03-11T23:08:57Z","closed_at":"2016-03-11T23:08:57Z","body":"I have updated the Splunk to 6.1 and using the latest Palo Alto App(4.1.1).  Although the new App no longer have the unlimited TSIDX issue, it is take very long time to generated the data model.  \r\n\r\nI have already applied the solution from the following link.\r\nhttp://answers.splunk.com/answers/138840/only-the-overview-dashboard-has-data-pan-app-v4-1-1-splunk-v6-1-1.html\r\nBut it still took more than 1 month to accelerated 11% of data model and the total size is 420G. \r\n\r\nRegards,\r\nKevin"}}