Events not showing up using summary data

Other Usage

Hi, I have a report that pulls daily transaction counts from a summary index. Running the report for "month to date", I don't get results from every day.
My search is this:

index=summary search_name=Summarization_Daily_Txn App IN ("XXX")) endpoint="ZZZZ"
| bin _time span=1d
| stats sum(Count) AS Txn_Count  by _time
| addcoltotals

Gives me this output:

The Dec 2, 4th and 5th totals are missing. Yes, I have verified that there are counts for those days.

If I run the report so that it spans just Dec 4th and 5th, the counts show up. Just not if I run it using earliest=@mon latest=@d

Any ideas on what I am doing wrong?

Get Updates on the Splunk Community!

Vibe-coding, AI, and Splunkcraft: Highlights from the .conf26 Builder Bar

If you stopped by the Builder Bar at .conf26, thank you! This year, we brought ...

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...