https://community.splunk.com/t5/Splunk-Search/summary-index-without-using-si-commands/m-p/58475#M14314 <P>Hi Folks,</P> <P>Can i create summary without using sistats, sicharts etc. My search outputs a table as i don't require to use inbuilt functions like avg, first, count etc. Hence I cannot use one of these si commands. I was wondering if i can just use table field1,filed2, field3 | | addinfo | collect index=summary addtime=t marker=info_search_name=somesearchname ?</P> <P>Thanks,<BR /> Amit </P> Mon, 28 Sep 2020 11:51:34 GMT amitsehgal 2020-09-28T11:51:34Z https://community.splunk.com/t5/Splunk-Search/summary-index-without-using-si-commands/m-p/58475#M14314 <P>Hi Folks,</P> <P>Can i create summary without using sistats, sicharts etc. My search outputs a table as i don't require to use inbuilt functions like avg, first, count etc. Hence I cannot use one of these si commands. I was wondering if i can just use table field1,filed2, field3 | | addinfo | collect index=summary addtime=t marker=info_search_name=somesearchname ?</P> <P>Thanks,<BR /> Amit </P> Mon, 28 Sep 2020 11:51:34 GMT https://community.splunk.com/t5/Splunk-Search/summary-index-without-using-si-commands/m-p/58475#M14314 amitsehgal 2020-09-28T11:51:34Z https://community.splunk.com/t5/Splunk-Search/summary-index-without-using-si-commands/m-p/58476#M14315 <P>Yes, you can. But it is not nearly as simple as using the si- commands. I would suggest that you also examine report acceleration in Splunk 5.x - but I don't think that will work for your case. </P> <P>Look here for info: <A href="http://docs.splunk.com/Documentation/Splunk/5.0/Knowledge/Configuresummaryindexes">Configure Summary Indexes</A></P> Wed, 05 Dec 2012 04:30:01 GMT https://community.splunk.com/t5/Splunk-Search/summary-index-without-using-si-commands/m-p/58476#M14315 lguinn2 2012-12-05T04:30:01Z