How to combine event and summary indexes into a single search?

[timgren]

Is it possible to setup a dashboard query that uses the main event index for "today", and summary index for all other times while still using the the default time_picker? 

[gcusello]

Hi @timgren,

you can create a search in which there are the time delimiters for each index, something like this:

(index=my_index earliest=@d latest=now) OR (index=my_summary_index)
| ...

Otherwise, you have to use a Data Model.

Ciao.

Giuseppe