https://community.splunk.com/t5/Knowledge-Management/What-do-the-summary-index-fields-stand-for/m-p/24499#M219 <P>You should accept your own answer. So that this question displays as solved. This information was very helpful. </P> Tue, 05 Feb 2019 19:31:50 GMT ryhluc01 2019-02-05T19:31:50Z https://community.splunk.com/t5/Knowledge-Management/What-do-the-summary-index-fields-stand-for/m-p/24497#M217 <P>Summary indexing produces a lot of psrsvd_* fields. What do they stand for? I presume they're acronyms or abbreviations. Here are some examples when averaging the number of bytes returned per client IP, as logged by apache (ie 'sistats avg(bytes) by clientip'):</P> <UL> <LI>psrsvd_ct_bytes</LI> <LI>psrsvd_gc</LI> <LI>psrsvd_nc_bytes</LI> <LI>psrsvd_sm_bytes</LI> <LI>psrsvd_ss_bytes</LI> <LI>psrsvd_v</LI> <LI>psrsvd_vt_bytes</LI> </UL> <P>Here are some more for a count (in my case not literally, but basically 'sichart count by clientip')</P> <UL> <LI>psrsvd_gc</LI> <LI>psrsvd_v</LI> </UL> Tue, 29 Nov 2011 16:03:40 GMT https://community.splunk.com/t5/Knowledge-Management/What-do-the-summary-index-fields-stand-for/m-p/24497#M217 chiangs 2011-11-29T16:03:40Z https://community.splunk.com/t5/Knowledge-Management/What-do-the-summary-index-fields-stand-for/m-p/24498#M218 <P>See <A href="http://stackoverflow.com/questions/8313908/what-do-the-summary-index-psrsvd-fields-stand-for">http://stackoverflow.com/questions/8313908/what-do-the-summary-index-psrsvd-fields-stand-for</A></P> Tue, 29 Nov 2011 21:48:32 GMT https://community.splunk.com/t5/Knowledge-Management/What-do-the-summary-index-fields-stand-for/m-p/24498#M218 chiangs 2011-11-29T21:48:32Z https://community.splunk.com/t5/Knowledge-Management/What-do-the-summary-index-fields-stand-for/m-p/24499#M219 <P>You should accept your own answer. So that this question displays as solved. This information was very helpful. </P> Tue, 05 Feb 2019 19:31:50 GMT https://community.splunk.com/t5/Knowledge-Management/What-do-the-summary-index-fields-stand-for/m-p/24499#M219 ryhluc01 2019-02-05T19:31:50Z https://community.splunk.com/t5/Knowledge-Management/What-do-the-summary-index-fields-stand-for/m-p/24500#M220 <P>Now on Splunk Docs:<BR /> <A href="https://docs.splunk.com/Documentation/Splunk/7.0.3/Knowledge/Usesummaryindexing">https://docs.splunk.com/Documentation/Splunk/7.0.3/Knowledge/Usesummaryindexing</A></P> Tue, 05 Feb 2019 21:34:39 GMT https://community.splunk.com/t5/Knowledge-Management/What-do-the-summary-index-fields-stand-for/m-p/24500#M220 somesoni2 2019-02-05T21:34:39Z