Knowledge Management

Summarizing more than 10.000 events

ruisantos
Path Finder

Is there a way to keep more than 10.000 events on a summary index for a schedule search ?

I would like to store events per second for a full day, based on a schedule search executed once a day.

Tags (2)
0 Karma
1 Solution
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...