We're running a large Splunk cluster with search head clustering. We currently have 30 reports with acceleration turned on. I recently added a new report and turned on acceleration for the past 7 days. The next day, the acceleration was listed as `Summarization not started Updated: Never`. Even after telling Splunk to rebuild the summary, the status didn't change. I've added a new simple report that definitely should summarize, and it too never leaves the `Summarization not Started` status. Any ideas what is going on here?
↧