Knowledge Management
Highlighted

My hourly sitimechart search has a "status=success" and a "return_count=120", but "success=1" with nothing in the summary index

Motivator

I don't understand why nothing is in the summary index. How can something return rows via sitimechart, but not put those rows in summary?

Here's a log sample:

04-21-2019 11:00:14.786 -0600 INFO SavedSplunker - savedsearchid="XXXX", searchtype="", user="XXXX", app="XXXX", savedsearchname="XXXX", priority=default, status=success, digestmode=1, scheduledtime=1555866000, windowtime=0, dispatchtime=1555866006, runtime=6.735, result_count=120, alertactions="", sid="schedulerbGFycnkuY29sbGljb3R0QHNraWxsc29mdC5jb20c3NfcGVyY2lwaW9fZGV2b3BzRMD5439b9da34a2a9151at155586600038286CCC35F19-6371-4001-A55C-2A0F698DBD5C", suppressed=0, threadid="AlertNotifierWorker-0"

04-21-2019 11:00:14.893 -0600 INFO SavedSplunker - user="XXXX", app="XXXX", savedsearchname="XXXX", status=delegatedremotecompletion, scheduledtime=1555866000, memberguid=CCC35F19-6371-4001-A55C-2A0F698DBD5C, memberlabel="XXXX", memberURI="https://XXXX:8089", sid=schedulerbGFycnkuY29sbGljb3R0QHNraWxsc29mdC5jb20c3NfcGVyY2lwaW9fZGV2b3BzRMD5439b9da34a2a9151at155586600038286_CCC35F19-6371-4001-A55C-2A0F698DBD5C, success=1

0 Karma