Hi,
I am trying to schedule 60 saved searches with summery indexing. There are for 5 different searches, each with 4 schedules - 10min, 1h, 1d, 1w. The initial 10min search will summarise, from there I want the 1h search to create an SI from the 10min SI, the 1d to create an SI from the 1h SI, etc.
-What would be the best way to do this in terms of setting schedule windows
-How can I catch up for delayed data, populate the latest period and verify the previous one if possible?
Thanks!
... View more