I want to index the splunk resultset for future use. Do I always have to store it in a file?
Use summary index. But it wont give u streaming, but without storing in file.
Since search is running on already indexed data, splunk license wont be used for re-indexing the result set on new index.
please let me know for any clarifications.
Use summary index. But it wont give u streaming, but without storing in file.
Since search is running on already indexed data, splunk license wont be used for re-indexing the result set on new index.
please let me know for any clarifications.
thanks @jayannah 🙂