Hi yannK, Now we have the same problem about one scheduled report, but the smart mode has no results, the verbose mode must have results. The problem is that the scheduled report is set to verbose mode, which does not take effect. Is there any other solution? Thanks in advance!
... View more
Hello splunkers: Some data associations were included in the schedule report. After running it, it was found that some data could not be associated with it, but it could be associated with it again when manually running the report the next day. It was suspected that the search head task was too heavy when running the scheduled report, which led to the loss. Could you tell me how to troubleshoot it? thanks in advance.
... View more