Splunk Enterprise

Summary index gaps

fabiolabruzzo
Explorer

Can I manage summary index gaps?

my scheduled searches missed and now I need to gap data on my summary index

Labels (1)
0 Karma
1 Solution

aasabatini
Motivator

the best way is use fillsummary index script

https://docs.splunk.com/Documentation/Splunk/8.2.4/Knowledge/Managesummaryindexgapsandoverlaps

“The answer is out there, Neo, and it’s looking for you, and it will find you if you want it to.”

View solution in original post

aasabatini
Motivator

the best way is use fillsummary index script

https://docs.splunk.com/Documentation/Splunk/8.2.4/Knowledge/Managesummaryindexgapsandoverlaps

“The answer is out there, Neo, and it’s looking for you, and it will find you if you want it to.”
Get Updates on the Splunk Community!

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...

UCC Framework: Discover Developer Toolkit for Building Technology Add-ons

The Next-Gen Toolkit for Splunk Technology Add-on Development The Universal Configuration Console (UCC) ...

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...