@gcusello  Thank you for the answer. I'm managing a multisite indexer cluster which hold many customer projects data and their visualization. I would like to create a snapshot of a particular project for a specific date in the past and it should be kept for future. Why I'm calling it as snapshot means I need the same visualizations along with full data in another index.  So my idea was to create another index and copy the data from the soruce index say demo to destination index say demo_snapshot by collect command. But there I can see some data loss.  So I would like to know is there any suggestions I can get from Splunk community to achieve my target. Thank you, ... View more

import requests data = { 'owner' : '<owner>', 'sharing' : '<app/global/system>', 'perms.read' : '*', 'perms.write' : 'admin,power' } url = 'https://<hostname>:8089/services/apps/local/test_app/acl' response = requests.post(url, data=data, verify=False, auth=('admin', '<password>'))   ... View more

import requests data = { 'owner' : '<owner>', 'sharing' : '<app/global/system>', 'perms.read' : '*', 'perms.write' : '*' } url = 'https://<hostname>:8089/services/apps/local/test_app/acl' response = requests.post(url, data=data, verify=False, auth=('admin', '<password>')) ... View more

@richgalloway Thank you for your input. It seems all my search peers are up and in healthy state. I'll check further on this. ... View more