Hi All,
We have a summary indexing configured on Splunk search head(one of the search head in cluster which forwards the data to indexer layer). All the summary indexing jobs will work perfectly fine until I restart the search head.
If I restart the Search head cluster (Begin rolling restart from UI) then it will not impact summary indexing jobs. It is impacting only when if I restart splunk search head from the command line. (splunk restart)
As an alternative, I'm refreshing the summary indexing jobs from GUI after the restart. But that is not a good approach to do the stuff manually.
I hope you got my problem statement. Please let me know how to fix this issue permanently.
Thanks,
Ravi
