Promote raw data for search and analysis

Manage Machine Data Lake promotion jobs through the Catalog in Splunk Cloud Platform.

Data stored in Machine Data Lake raw tables is minimally processed and supports limited search functionality. When you promote data from raw tables, you process it to be optimized for structured analysis in an analytics table or optimized for searches in a Splunk index.

In Splunk Cloud Platform deployments with search head clusters, each promoted dataset is available only in the specific search head where the promotion job was created.

Promote data from a raw table:
  1. On the Datasets tab of the Catalog, select a raw table and then select Promote.
  2. Follow the on-screen guidance to create an analytics table or Splunk index that contains a processed subset of data from the raw table.
    For more information, see Promote data in the Land Data in Machine Data Lake manual.
Monitor and review promotion jobs:
  1. Select the Promotion jobs tab in the Catalog to review promotion jobs that you own or have permission to manage.

    For each promotion job listed on the page, the Catalog shows details such as the name of the promoted dataset that the job created, the promotion mode that it used, and the status of the job. You can select a promotion job to access actions that depend on the job status. For example, you can pause a promotion job that's in the Active status, or delete a promotion job that's in the Canceled status.

    For more information, see the following pages in the Land Data in Machine Data Lake manual: