How do I build a report with total events For SMS?

[noviceinsplunk]

At the end of the day, is it feasible to tally the number of successful events to compare with yesterday’s total without too much performance overhead?

It seems this would run for a long time.

[inventsekar]

Hi,

• Is it feasible to tally number of successful events, at the end of day, to compare with yesterday’s total; without performance overhead?

Answer: Yes, it's not a performance overhead at all, depending on your logs/event volume.

Please provide us the search query for today's logs.. check the volume for one day..
if the size is huge, then you can choose summary indexing..

overall, it "appears" to be a feasible task.

and, SMS meaning?

[noviceinsplunk]

Text or PUSH message too.