I upgraded our DMC (Distributed Management Console) to 6.6.0 last week, but everything else in our environment is still 6.5.3.
This search returns different results on the 6.6 DMC than on the 6.5.3 SHC (Search Head Cluster):
index=_* earliest=-2h@h latest=-1h@h
| stats count by index
| sort index
Bah, I'm an idiot.
This all cascaded down from the DMC being on 6.6 and the cluster master being on 6.5. I upgraded the CM and that resolved it.
View solution in original post