<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to capture older data through Summary Index Populating Search? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-capture-older-data-through-Summary-Index-Populating/m-p/13032#M1131</link>
    <description>&lt;P&gt;You can use the backfilling tool:&lt;/P&gt;

&lt;P&gt;&lt;A href="http://www.splunk.com/base/Documentation/latest/Knowledge/Managesummaryindexgapsandoverlaps" rel="nofollow"&gt;http://www.splunk.com/base/Documentation/latest/Knowledge/Managesummaryindexgapsandoverlaps&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;The script will run searches over the appropriate time range and will back fill the summary index.&lt;/P&gt;</description>
    <pubDate>Fri, 07 May 2010 00:41:23 GMT</pubDate>
    <dc:creator>Simeon</dc:creator>
    <dc:date>2010-05-07T00:41:23Z</dc:date>
    <item>
      <title>How to capture older data through Summary Index Populating Search?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-capture-older-data-through-Summary-Index-Populating/m-p/13031#M1130</link>
      <description>&lt;P&gt;Hi  &lt;/P&gt;

&lt;P&gt;If I have a summary-populating-index search that is scheduled to run daily. Is it possible to index data that is older than a day &amp;amp; goes back about a year through this search?  &lt;/P&gt;

&lt;P&gt;Thanks for your help.  &lt;/P&gt;

&lt;P&gt;Ranga&lt;/P&gt;</description>
      <pubDate>Fri, 07 May 2010 00:33:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-capture-older-data-through-Summary-Index-Populating/m-p/13031#M1130</guid>
      <dc:creator>sranga</dc:creator>
      <dc:date>2010-05-07T00:33:13Z</dc:date>
    </item>
    <item>
      <title>Re: How to capture older data through Summary Index Populating Search?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-capture-older-data-through-Summary-Index-Populating/m-p/13032#M1131</link>
      <description>&lt;P&gt;You can use the backfilling tool:&lt;/P&gt;

&lt;P&gt;&lt;A href="http://www.splunk.com/base/Documentation/latest/Knowledge/Managesummaryindexgapsandoverlaps" rel="nofollow"&gt;http://www.splunk.com/base/Documentation/latest/Knowledge/Managesummaryindexgapsandoverlaps&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;The script will run searches over the appropriate time range and will back fill the summary index.&lt;/P&gt;</description>
      <pubDate>Fri, 07 May 2010 00:41:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-capture-older-data-through-Summary-Index-Populating/m-p/13032#M1131</guid>
      <dc:creator>Simeon</dc:creator>
      <dc:date>2010-05-07T00:41:23Z</dc:date>
    </item>
    <item>
      <title>Re: How to capture older data through Summary Index Populating Search?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-capture-older-data-through-Summary-Index-Populating/m-p/13033#M1132</link>
      <description>&lt;P&gt;Splunk ships with a script, &lt;A href="http://www.splunk.com/base/Documentation/latest/Knowledge/Managesummaryindexgapsandoverlaps" rel="nofollow"&gt;fill_summary_index.py&lt;/A&gt;, that does this for you.&lt;/P&gt;</description>
      <pubDate>Fri, 07 May 2010 00:42:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-capture-older-data-through-Summary-Index-Populating/m-p/13033#M1132</guid>
      <dc:creator>the_wolverine</dc:creator>
      <dc:date>2010-05-07T00:42:15Z</dc:date>
    </item>
  </channel>
</rss>

