https://community.splunk.com/t5/Splunk-Dev/summary-index-not-working/m-p/344833#M5384 <P>Thank you... forgot completely about savedsearches.conf.... working now ...</P> Tue, 14 Mar 2017 05:21:19 GMT 722624 2017-03-14T05:21:19Z https://community.splunk.com/t5/Splunk-Dev/summary-index-not-working/m-p/344831#M5382 <P>I have created a query<BR /><BR /> index="xxx" source="xxxxxx"|dedup dn|sistats count</P> <P>scheduled this hourly</P> <P>I could not find any data with <BR /> index=summary search_name="my schedule report name"</P> <P>could not understand what went wrong, can anybody please help</P> <P>Thank you<BR /> AB</P> Fri, 10 Mar 2017 06:52:55 GMT https://community.splunk.com/t5/Splunk-Dev/summary-index-not-working/m-p/344831#M5382 722624 2017-03-10T06:52:55Z https://community.splunk.com/t5/Splunk-Dev/summary-index-not-working/m-p/344832#M5383 <P>Can you share the contents of <CODE>savedsearches.conf</CODE> that shows the full configuration for your summary indexing search?</P> Fri, 10 Mar 2017 12:43:00 GMT https://community.splunk.com/t5/Splunk-Dev/summary-index-not-working/m-p/344832#M5383 rjthibod 2017-03-10T12:43:00Z https://community.splunk.com/t5/Splunk-Dev/summary-index-not-working/m-p/344833#M5384 <P>Thank you... forgot completely about savedsearches.conf.... working now ...</P> Tue, 14 Mar 2017 05:21:19 GMT https://community.splunk.com/t5/Splunk-Dev/summary-index-not-working/m-p/344833#M5384 722624 2017-03-14T05:21:19Z https://community.splunk.com/t5/Splunk-Dev/summary-index-not-working/m-p/344834#M5385 <P>changed the value of<BR /> action.summary_index to 1 in savedsearches.conf and then restared SPLUNK</P> <P>it is working now</P> Tue, 14 Mar 2017 05:25:41 GMT https://community.splunk.com/t5/Splunk-Dev/summary-index-not-working/m-p/344834#M5385 722624 2017-03-14T05:25:41Z