Hi, Please verify your indexes.conf whether datatype is missed for index "itsi_summary_metrics". Else try to import indexes from your ITSI SearchHead. This need to be taken care when you upgrade from 4.4.x to 4.7.x [itsi_summary_metrics] homePath = $SPLUNK_DB/itsi_summary_metrics/db coldPath = $SPLUNK_DB/cold/itsi_summary_metrics/colddb thawedPath = $SPLUNK_DB/itsi_summary_metrics/thaweddb datatype=metric ... View more