<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Is it possible to populate a specific summary index using sitimechart? in Knowledge Management</title>
    <link>https://community.splunk.com/t5/Knowledge-Management/Is-it-possible-to-populate-a-specific-summary-index-using/m-p/58225#M553</link>
    <description>&lt;P&gt;You actually don't need to use the &lt;CODE&gt;collect&lt;/CODE&gt; command. When you save the search, go to the Manager and edit it.&lt;BR /&gt;
Make sure that the search is scheduled to run the way you want. At the very bottom of the page, there is a dropdown where you can choose the summary index.&lt;/P&gt;</description>
    <pubDate>Sat, 14 Sep 2013 00:53:47 GMT</pubDate>
    <dc:creator>lguinn2</dc:creator>
    <dc:date>2013-09-14T00:53:47Z</dc:date>
    <item>
      <title>Is it possible to populate a specific summary index using sitimechart?</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Is-it-possible-to-populate-a-specific-summary-index-using/m-p/58223#M551</link>
      <description>&lt;P&gt;I've created a new summary index that I'd like to populate with historical data.  I cannot seem to find any documentation that indicates how to specify the name of a summary index when &lt;EM&gt;populating&lt;/EM&gt; the summary index using sitimechart.&lt;/P&gt;</description>
      <pubDate>Mon, 09 Sep 2013 20:32:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Is-it-possible-to-populate-a-specific-summary-index-using/m-p/58223#M551</guid>
      <dc:creator>rmacurak</dc:creator>
      <dc:date>2013-09-09T20:32:47Z</dc:date>
    </item>
    <item>
      <title>Re: Is it possible to populate a specific summary index using sitimechart?</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Is-it-possible-to-populate-a-specific-summary-index-using/m-p/58224#M552</link>
      <description>&lt;P&gt;You need to pipe the "si" commands to a collect command to send to any index. Alternatively, you can make a scheduled search and check the box to enable summary indexing and choose the index.&lt;/P&gt;

&lt;P&gt;E.g. ....|sitimechart count by site |collect index="site_summary"&lt;/P&gt;

&lt;P&gt;Ofcourse, site_summary has to be an existing index.&lt;/P&gt;</description>
      <pubDate>Mon, 09 Sep 2013 20:41:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Is-it-possible-to-populate-a-specific-summary-index-using/m-p/58224#M552</guid>
      <dc:creator>reed_kelly</dc:creator>
      <dc:date>2013-09-09T20:41:50Z</dc:date>
    </item>
    <item>
      <title>Re: Is it possible to populate a specific summary index using sitimechart?</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Is-it-possible-to-populate-a-specific-summary-index-using/m-p/58225#M553</link>
      <description>&lt;P&gt;You actually don't need to use the &lt;CODE&gt;collect&lt;/CODE&gt; command. When you save the search, go to the Manager and edit it.&lt;BR /&gt;
Make sure that the search is scheduled to run the way you want. At the very bottom of the page, there is a dropdown where you can choose the summary index.&lt;/P&gt;</description>
      <pubDate>Sat, 14 Sep 2013 00:53:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Is-it-possible-to-populate-a-specific-summary-index-using/m-p/58225#M553</guid>
      <dc:creator>lguinn2</dc:creator>
      <dc:date>2013-09-14T00:53:47Z</dc:date>
    </item>
  </channel>
</rss>

