Thanks, it is simillar and I can get it to work to that extent. Data with "HostA nagios" does correctly go to the hosta_nagios index. The difficulty I am having is applying 2 or more conditions to divide my incomming data to 3 indexes. Currently everything other than "HostA nagios" incorretly goes to the hosta_cisco index. I want to be able to fish out data with just "HostA" (and not "nagios") and put that in the hosta_gen index. ... View more

You have to re-feed the log files. With 4.2 I think there're some new features for re-indexing. But I haven't checked them yet. ... View more

I have the created a summary index, and even set it to the correct "indexes searched by default" for the role the user is part of, but still when they try to edit > edit summary indexing > then select the summary index from the drop down box, it does not appear. I've had my coworkers look at this with me, check all the configs for user authentication and index visibility, yet the user still cannot access it. As an admin, I can see it, along with every other summary Index, so I am pulling my hair out with this! ... View more