I am trying to backfill data into a summary index...
when i run the command using the py script i get an error saying:
*** For saved search 'fw_web_monthly_top_domains' ***
No scheduled times for your time range.
I have turned off the schedule for this search and tried playing around with the et and lt values with no effect...
Make sure to check the few things,
the schedule is set to run at midnight on the first day of every month...
0 0 1 * *
what is the schedule for 'fw_web_monthly_top_domains'?
Hi... here is the complete command...
./splunk cmd python fill_summary_index.py -app noc -index firewall_summary -name fw_web_monthly_top_domain -et -1mon@mon -lt @mon -j 8 -owner admin -showprogress true -auth admin:changeme
please post the complete command