Splunk Enterprise Security

How to find summary index search

N92
Path Finder

I have summary indexes but not able to identify search criteria for that. Where I can check?
Sourcetype is stash

0 Karma

chinmoya
Communicator

A summary index is basically a generic term, in actuality, it's like any other index, we just use it to store data that has been summaries by the splunk query.

you should be able to search data index in it by the simple command ie
index=(name of your index)

0 Karma
Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...

Splunk AppDynamics with Cisco Secure Application

Web applications unfortunately present a target rich environment for security vulnerabilities and attacks. ...