Hi, I have two source types CardMember_cycle_data (with card member cycle date info) and CardMember_Demographic_data (with card member demographic info). Both files have more than 3-4 million records each. (all dates are in MM/DD/YYYY format) CardMember_cycle_data CM_id   Cycle_Date CM1       05/01/2023 CM1       06/01/2023 CM2       04/03/2023 CM2       05/03/2023 CM2       06/03/2023 -------------------------- CardMember_Demographic_data CM_id Transaction_Dt   Prod_Code CM1     01/02/2020        CR CM1     05/28/2023        XX CM1     06/07/2023        AB CM2     04/14/2023        YY CM2     06/01/2023        CD My need is - For each Card Member present in CardMember_cycle_data I need to get the latest Prod_Code as of LATEST Cycle_Date. Hence the output will be: CardMember     Latest_Cycle_Date     Prod_Code CM1                       06/01/2023                  XX CM2                       06/03/2023                  CD ... View more

Hi, I have $SPLUNK_DB set up in a NAS storage. But the indexer is installed in a VM (say VM1) running on splunk version 6.3.4. Now I want to migrate the indexers to another VM (VM2) with newer splunk version 6.6.12 keeping the same NAS location as $SPLUNK_DB. Is it possible? I have heard that no two indexer will see each other's indexed files. Is that true? In that case what approach I can take to migrate my indexer? ... View more