Real-time search... on a summary index?

[Jason]

What is the behavior if you set up a dashboard that creates a graph using a realtime search, but is using a summary index, say populated every 15 sec? Would this work as I expect it to (events would appear on the graph as they were added to the summary index by the scheduled search) ?

[Stephen_Sorkin · Accepted solution]

There's no reason that you can't run a real time search on data going into a summary index. That said, since the scheduler runs no more frequently than every minute, you'll see >15s latency.

[Jason]

Ah, yes I had overlooked that even cron notation * * * * * would be run only every minute. Thanks!

[Jason]

Haven't tried it yet, was wondering if someone had an answer.

[araitz]

What happens when you try it?