https://community.splunk.com/t5/Splunk-Search/Search-head-pooling/m-p/95024#M24546 <P>Not quite, by default the search app summary page only displays results from the main (default) index. Furthermore, your standard user role only searches the main index.</P> <P>Follow the link below to learn about changing the default index you search, you can add your "my_index" to your role to search it by default without specifying index=my_index.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.3/Security/Addandeditroles" target="_blank">http://docs.splunk.com/Documentation/Splunk/5.0.3/Security/Addandeditroles</A></P> Mon, 28 Sep 2020 14:20:37 GMT Drainy 2020-09-28T14:20:37Z https://community.splunk.com/t5/Splunk-Search/Search-head-pooling/m-p/95023#M24545 <P>Hi, the search dashboard on my search head is empty but when I entered index="my_index", I got results back with fields like source, sourcetype and host. Results also returned when I entered index="my_index" sourcetype="my.sourcetype". However, no result is returned if I just entered sourcetype="my.sourcetype".</P> <P>I suspect this has something to do with search head pooling but just wondered if anyone saw this before?</P> <P>Thanks in advance!</P> Mon, 28 Sep 2020 14:20:34 GMT https://community.splunk.com/t5/Splunk-Search/Search-head-pooling/m-p/95023#M24545 shangshin 2020-09-28T14:20:34Z https://community.splunk.com/t5/Splunk-Search/Search-head-pooling/m-p/95024#M24546 <P>Not quite, by default the search app summary page only displays results from the main (default) index. Furthermore, your standard user role only searches the main index.</P> <P>Follow the link below to learn about changing the default index you search, you can add your "my_index" to your role to search it by default without specifying index=my_index.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.3/Security/Addandeditroles" target="_blank">http://docs.splunk.com/Documentation/Splunk/5.0.3/Security/Addandeditroles</A></P> Mon, 28 Sep 2020 14:20:37 GMT https://community.splunk.com/t5/Splunk-Search/Search-head-pooling/m-p/95024#M24546 Drainy 2020-09-28T14:20:37Z