Splunk Enterprise

Summary index

uagraw01
Motivator

Hello Splunkers !!

I am getting below while executing backfill summary index command in my Splunk machine.  Anyone can suggest me what will be the issue and where I need to correct

Below command I was executed :
splunk cmd python fill_summary_index.py -app commissioning_reports -name "scada_alarms_start_base" -et -7d -lt now -index si_error -showprogress true -j 8 -dedup true -owner admin -auth admin:!Splunk001

Screenshot for the error:

uagraw01_0-1690020295938.png

 

 

 

0 Karma
1 Solution

PickleRick
SplunkTrust
SplunkTrust

The error suggests that you have wrong (missing?) cron schedule for your report.

View solution in original post

0 Karma

PickleRick
SplunkTrust
SplunkTrust

The error suggests that you have wrong (missing?) cron schedule for your report.

0 Karma

uagraw01
Motivator

@PickleRick It is running fine now, once I fix the cron related issue.

 

Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

What does fill_summary_index.py do and how does it do it?

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...