Splunk Enterprise Security

How to find summary index search

N92
Path Finder

I have summary indexes but not able to identify search criteria for that. Where I can check?
Sourcetype is stash

0 Karma

chinmoya
Communicator

A summary index is basically a generic term, in actuality, it's like any other index, we just use it to store data that has been summaries by the splunk query.

you should be able to search data index in it by the simple command ie
index=(name of your index)

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...