CAN I ADD FEDERATED SEARCH AS ROOT SEARCH IN DATASETS?
I WAS ABOUT TO CREATE A DATAMODEL FOR A DASHBOARD WITH MULTIPLE SPLUNK DEPLOYMENT.
HOWEVER, WHEN I USED FEDERATED INDEXES IN DATASETS. I GET THE SEARCH COUNT. I WAS ABLE TO ADD FIELDS. HOWEVER, I WON'T GET ANY SEARCH RESULTS IN ACTUAL SEARCH USING DATAMODEL
| datamodel test search
no results !
no results!
