historical data on a new installation

[benstraw]

I just installed splunk and indexed a log file with data that is from earlier this year, The summary dashboard shows the correct number of events but it does not show anything in the list of sources, sourcetypes and hosts.

[benstraw · Accepted solution]

The summary dashboard now shows by default what has been indexed in the past 15 minutes. In order to view all of your sources, sourcetypes and hosts you now have to click the link under all indexed data that says all time, and you will see all of them that have been created over all time.