https://community.splunk.com/t5/Splunk-Search/tstats-summariesonly-t/m-p/335640#M170374 <P>as admin i can see results running a tstats summariesonly=t search. Same search run as a user returns no results. As that same user, if I remove the summariesonly=t option, and just run a tstats...... search that user can return results. The Datamodel has everyone read and admin write permissions.</P> Fri, 13 Apr 2018 14:15:03 GMT coreyf311 2018-04-13T14:15:03Z https://community.splunk.com/t5/Splunk-Search/tstats-summariesonly-t/m-p/335640#M170374 <P>as admin i can see results running a tstats summariesonly=t search. Same search run as a user returns no results. As that same user, if I remove the summariesonly=t option, and just run a tstats...... search that user can return results. The Datamodel has everyone read and admin write permissions.</P> Fri, 13 Apr 2018 14:15:03 GMT https://community.splunk.com/t5/Splunk-Search/tstats-summariesonly-t/m-p/335640#M170374 coreyf311 2018-04-13T14:15:03Z https://community.splunk.com/t5/Splunk-Search/tstats-summariesonly-t/m-p/335641#M170375 <P>Data model is accelerated? Also can you try using <CODE>allow_old_summaries=t</CODE> instead of summariesonly=t.</P> Sat, 14 Apr 2018 09:25:23 GMT https://community.splunk.com/t5/Splunk-Search/tstats-summariesonly-t/m-p/335641#M170375 p_gurav 2018-04-14T09:25:23Z https://community.splunk.com/t5/Splunk-Search/tstats-summariesonly-t/m-p/335642#M170376 <P>I did use allow_old_summaries and it works for the user. Not sure what that does exactly thats different and why summariesonly doesnt work for that user. </P> Tue, 29 Sep 2020 19:05:38 GMT https://community.splunk.com/t5/Splunk-Search/tstats-summariesonly-t/m-p/335642#M170376 coreyf311 2020-09-29T19:05:38Z