https://community.splunk.com/t5/Knowledge-Management/Storing-Calculated-Data-for-Later-Use/m-p/127125#M1280 <P>I am trying to essentially gather information of a pretty large query and count it every day, and then display this total count every day in a timechart so that we can track the change overtime. The problem I have is that the calculations are based on a CSV file that are overwritten every day so I am not sure how to go about storing historical data. The best thing I can think of doing is to append to a CSV the time and the calculated count every day but I wasn't sure if there was an easier way to do this.</P> Thu, 16 Jul 2015 20:09:13 GMT jarrex 2015-07-16T20:09:13Z https://community.splunk.com/t5/Knowledge-Management/Storing-Calculated-Data-for-Later-Use/m-p/127125#M1280 <P>I am trying to essentially gather information of a pretty large query and count it every day, and then display this total count every day in a timechart so that we can track the change overtime. The problem I have is that the calculations are based on a CSV file that are overwritten every day so I am not sure how to go about storing historical data. The best thing I can think of doing is to append to a CSV the time and the calculated count every day but I wasn't sure if there was an easier way to do this.</P> Thu, 16 Jul 2015 20:09:13 GMT https://community.splunk.com/t5/Knowledge-Management/Storing-Calculated-Data-for-Later-Use/m-p/127125#M1280 jarrex 2015-07-16T20:09:13Z https://community.splunk.com/t5/Knowledge-Management/Storing-Calculated-Data-for-Later-Use/m-p/127126#M1281 <P>You're looking for summary indexing: <A href="http://docs.splunk.com/Documentation/Splunk/6.2.4/Knowledge/Usesummaryindexing">http://docs.splunk.com/Documentation/Splunk/6.2.4/Knowledge/Usesummaryindexing</A></P> Thu, 16 Jul 2015 21:28:07 GMT https://community.splunk.com/t5/Knowledge-Management/Storing-Calculated-Data-for-Later-Use/m-p/127126#M1281 martin_mueller 2015-07-16T21:28:07Z