Getting Data In

Federated Search - Metrics index, no data found?

Stan816
Explorer

Hello Splunkers!

I am very exited about the new federated search feature starting the Splunk 8.2 version!
I got it to run with a onPrem development machine and a regular index - works as desired and described.

However, if I try the same procedure with a metrics index as a remote data set, my search
either
index=federated:my_metrix_index
or
|mpreview index=federated:my_metrix_index
do not return any result and there is no error returned.

Is this currently the intended behaviour? I would assume, that the REST endpoint is not yet completely adjusted.

Looking forward to hear fro

Labels (1)
0 Karma
1 Solution

mljdivemaster
Explorer

Stan816
Explorer

@mljdivemaster  Thanks - Reading the docs properly helps!

Hopefully this will be added in the future.

Best

Stan

0 Karma
Get Updates on the Splunk Community!

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Splunk Education Goes to Washington | Splunk GovSummit 2024

If you’re in the Washington, D.C. area, this is your opportunity to take your career and Splunk skills to the ...