Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Collect Results Not Getting Indexed

$
0
0

Hi, I have been populating my SI using the collect command and have been finding many gaps once i come back and check out the data after a 24 hour period. If i run the backfill command all the gaps get corrected.

Last night I setup my Saved Search SI jobs that use the collect command to email me the results that should be getting put into the SI and I do have emails with data from the times from where I am seeing gaps.

Anyone know what this happens? Is using the collect command recommended? I would understand if the search was getting skipped but I have the emails showing me the search ran and produced results.

I am on 4.3.5 Thanks


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>