What do the summary index fields stand for?

[chiangs]

Summary indexing produces a lot of psrsvd_* fields. What do they stand for? I presume they're acronyms or abbreviations. Here are some examples when averaging the number of bytes returned per client IP, as logged by apache (ie 'sistats avg(bytes) by clientip'):

• psrsvd_ct_bytes
• psrsvd_gc
• psrsvd_nc_bytes
• psrsvd_sm_bytes
• psrsvd_ss_bytes
• psrsvd_v
• psrsvd_vt_bytes

Here are some more for a count (in my case not literally, but basically 'sichart count by clientip')

• psrsvd_gc
• psrsvd_v

[chiangs · Accepted solution]

See http://stackoverflow.com/questions/8313908/what-do-the-summary-index-psrsvd-fields-stand-for

[ryhluc01]

You should accept your own answer. So that this question displays as solved. This information was very helpful.

[somesoni2]

Now on Splunk Docs:
https://docs.splunk.com/Documentation/Splunk/7.0.3/Knowledge/Usesummaryindexing