Getting Data In

Index file updates inconsistently with "collect" command

nirpari
New Member

Hello Team,

We are using "collect" command by Constructing a search that returns the data that we want to copy/update,
and pipe the results to index file with collect command as below:
| inputlookup XXX.csv | collect index=Index_file.

We are sending it with HTTP post method,
we can see the above mentioned entries in "search" history for validation.
But with collect , the mentioned Index_file is not updating instantly.
It updates abruptly and inconsistently with some hours delayed. Sometimes 1 or 2 days delays.
Any suggestion or valid reason greatly appreciated.

Thanks,

Nirav

 

 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...