Knowledge Management

Summary Index Data

cpusneedlove
Engager

How Can I Put Summary Data In for An Old Data?

Tags (1)
1 Solution

ftk
Motivator

I assume you mean you mean "date" and not "data".

You can populate a summary index with historic data by following the backfill procedures described in the documentation at http://www.splunk.com/base/Documentation/4.1.5/Knowledge/Managesummaryindexgapsandoverlaps#Use_the_b...

View solution in original post

ftk
Motivator

I assume you mean you mean "date" and not "data".

You can populate a summary index with historic data by following the backfill procedures described in the documentation at http://www.splunk.com/base/Documentation/4.1.5/Knowledge/Managesummaryindexgapsandoverlaps#Use_the_b...

cpusneedlove
Engager

That Was Fast!!!!

0 Karma
Get Updates on the Splunk Community!

See Splunk Platform & Observability Innovations at Cisco Live EMEA

Hi Splunkers, Learn about what’s next for Splunk Platform at Cisco Live EMEA.  Data silos are a big challenge ...

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...