Reporting

Why can't I get new data in my Data Model Data Set?

chinmayc469
Explorer

I have created a root event dataset, for which constraint is index=abc.

Here whatever there is in "index=abc" are coming into this data set. But, when the index has new data, this new data is not appearing in the data set or data set pivot report.

Why won't the data set won't have real time data or new data? how do I solve this?

Thanks

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...