As per the above screenshot I am unable to view the Data summary tab in our Splunk search environment
Hi @PoojaChand02 ,
It seems the screenshots were from different Splunk platforms. The first one is Splunk Enterprise but second one is Splunk Cloud.
Splunk Cloud does not have "Data Summary" button.
You can see similar data summary using below query for host data .(You can use other types like "hosts", "sources" or "sourcetypes". Please do not forget to replace rename command accordingly. You can also see other indexes than main.
| metadata index=main type=hosts
| eval lastSeen = strftime(lastTime, "%x %l:%M:%S %p")
| rename host AS Host, totalCount AS Count, lastSeen AS "Last Update"
| table Host, Count, "Last Update"
The data summary option does not exist in Splunk Cloud