<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Federated Search - Metrics index, no data found? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Federated-Search-Metrics-index-no-data-found/m-p/556148#M92079</link>
    <description>&lt;P&gt;Hello Splunkers!&lt;/P&gt;&lt;P&gt;I am very exited about the new federated search feature starting the Splunk 8.2 version!&lt;BR /&gt;I got it to run with a onPrem development machine and a regular index - works as desired and described.&lt;/P&gt;&lt;P&gt;However, if I try the same procedure with a metrics index as a remote data set, my search&lt;BR /&gt;either&lt;BR /&gt;index=federated:my_metrix_index&lt;BR /&gt;or&lt;BR /&gt;|mpreview index=federated:my_metrix_index&lt;BR /&gt;do not return any result and there is no error returned.&lt;/P&gt;&lt;P&gt;Is this currently the intended behaviour? I would assume, that the REST endpoint is not yet completely adjusted.&lt;/P&gt;&lt;P&gt;Looking forward to hear fro&lt;/P&gt;</description>
    <pubDate>Thu, 17 Jun 2021 09:58:56 GMT</pubDate>
    <dc:creator>Stan816</dc:creator>
    <dc:date>2021-06-17T09:58:56Z</dc:date>
    <item>
      <title>Federated Search - Metrics index, no data found?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Federated-Search-Metrics-index-no-data-found/m-p/556148#M92079</link>
      <description>&lt;P&gt;Hello Splunkers!&lt;/P&gt;&lt;P&gt;I am very exited about the new federated search feature starting the Splunk 8.2 version!&lt;BR /&gt;I got it to run with a onPrem development machine and a regular index - works as desired and described.&lt;/P&gt;&lt;P&gt;However, if I try the same procedure with a metrics index as a remote data set, my search&lt;BR /&gt;either&lt;BR /&gt;index=federated:my_metrix_index&lt;BR /&gt;or&lt;BR /&gt;|mpreview index=federated:my_metrix_index&lt;BR /&gt;do not return any result and there is no error returned.&lt;/P&gt;&lt;P&gt;Is this currently the intended behaviour? I would assume, that the REST endpoint is not yet completely adjusted.&lt;/P&gt;&lt;P&gt;Looking forward to hear fro&lt;/P&gt;</description>
      <pubDate>Thu, 17 Jun 2021 09:58:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Federated-Search-Metrics-index-no-data-found/m-p/556148#M92079</guid>
      <dc:creator>Stan816</dc:creator>
      <dc:date>2021-06-17T09:58:56Z</dc:date>
    </item>
    <item>
      <title>Re: Federated Search - Metrics index, no data found?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Federated-Search-Metrics-index-no-data-found/m-p/557640#M92285</link>
      <description>&lt;P&gt;&lt;A href="https://docs.splunk.com/Documentation/Splunk/8.2.0/Search/Defineafederatedindex" target="_blank"&gt;https://docs.splunk.com/Documentation/Splunk/8.2.0/Search/Defineafederatedindex&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;It seem like metrics indexes are not supported&lt;/P&gt;</description>
      <pubDate>Tue, 29 Jun 2021 16:33:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Federated-Search-Metrics-index-no-data-found/m-p/557640#M92285</guid>
      <dc:creator>mljdivemaster</dc:creator>
      <dc:date>2021-06-29T16:33:05Z</dc:date>
    </item>
    <item>
      <title>Re: Federated Search - Metrics index, no data found?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Federated-Search-Metrics-index-no-data-found/m-p/558009#M92335</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/47238"&gt;@mljdivemaster&lt;/a&gt;&amp;nbsp; Thanks - Reading the docs properly helps!&lt;/P&gt;&lt;P&gt;Hopefully this will be added in the future.&lt;/P&gt;&lt;P&gt;Best&lt;/P&gt;&lt;P&gt;Stan&lt;/P&gt;</description>
      <pubDate>Thu, 01 Jul 2021 08:57:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Federated-Search-Metrics-index-no-data-found/m-p/558009#M92335</guid>
      <dc:creator>Stan816</dc:creator>
      <dc:date>2021-07-01T08:57:17Z</dc:date>
    </item>
  </channel>
</rss>

