Splunk Search

[kajalchopade071]

Can we populate the  primary index logs  to summary index .

How to populate the logs from primary index to summary index. 

[ITWhisperer · Accepted solution]

Create a report and either enable summary indexing or use the collect command to populate the summary index. The summary index must have been created prior to trying to populate it.