<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Why am I unable to find a summary index in search when using index=summary? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Why-am-I-unable-to-find-a-summary-index-in-search-when-using/m-p/274734#M82870</link>
    <description>&lt;P&gt;I have a saved search in the default summary index and when I use the &lt;CODE&gt;index=summary&lt;/CODE&gt; in my search box, I cannot find the summary index? Not sure why?&lt;/P&gt;</description>
    <pubDate>Mon, 12 Sep 2016 19:38:07 GMT</pubDate>
    <dc:creator>ashishlal82</dc:creator>
    <dc:date>2016-09-12T19:38:07Z</dc:date>
    <item>
      <title>Why am I unable to find a summary index in search when using index=summary?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-am-I-unable-to-find-a-summary-index-in-search-when-using/m-p/274734#M82870</link>
      <description>&lt;P&gt;I have a saved search in the default summary index and when I use the &lt;CODE&gt;index=summary&lt;/CODE&gt; in my search box, I cannot find the summary index? Not sure why?&lt;/P&gt;</description>
      <pubDate>Mon, 12 Sep 2016 19:38:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-am-I-unable-to-find-a-summary-index-in-search-when-using/m-p/274734#M82870</guid>
      <dc:creator>ashishlal82</dc:creator>
      <dc:date>2016-09-12T19:38:07Z</dc:date>
    </item>
    <item>
      <title>Re: Why am I unable to find a summary index in search when using index=summary?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-am-I-unable-to-find-a-summary-index-in-search-when-using/m-p/274735#M82871</link>
      <description>&lt;P&gt;So you have a scheduled search with alert action as summary indexing and it's sending data to index=summary? Is the search scheduled and have results? Did you select appropriate time-range while running your query to see the summary index data?&lt;/P&gt;</description>
      <pubDate>Mon, 12 Sep 2016 21:03:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-am-I-unable-to-find-a-summary-index-in-search-when-using/m-p/274735#M82871</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2016-09-12T21:03:07Z</dc:date>
    </item>
    <item>
      <title>Re: Why am I unable to find a summary index in search when using index=summary?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-am-I-unable-to-find-a-summary-index-in-search-when-using/m-p/274736#M82872</link>
      <description>&lt;P&gt;Your Splunk role must have permissions to access the summary index.&lt;BR /&gt;
Also, similar to @somesoni2 - is there any data in the summary index? How do you know your populating search is working?&lt;/P&gt;</description>
      <pubDate>Fri, 16 Sep 2016 07:33:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-am-I-unable-to-find-a-summary-index-in-search-when-using/m-p/274736#M82872</guid>
      <dc:creator>lguinn2</dc:creator>
      <dc:date>2016-09-16T07:33:26Z</dc:date>
    </item>
  </channel>
</rss>

