Reporting

How does indexed fields act in summary index when you collect from tstats search?

manikanthkoti
Loves-to-Learn Everything

Hi Everyone,

We have two indexed fields in Index A. We are doing some calculations using  tstats and collecting to another summary index B

Those two fields will act as indexed fileds or not in Summary Index?

 

 

Labels (3)
0 Karma

anilchaithu
Builder

@manikanthkoti 

It is similar to a regular summary index collection. They will act as indexed fields in summary index.

0 Karma
Get Updates on the Splunk Community!

Thanks for the Memories! Splunk University, .conf24, and Community Connections

Thank you to everyone in the Splunk Community who joined us for .conf24 – starting with Splunk University and ...

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...