Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Issue with Summary Indexing, saved searches runs fine but summary index data is not written sometimes

$
0
0

I have a set of 10 saved searches which are doing summary indexing. These searches are running every minute. All the searches run fine and returns data when runs manually. They also return data when running through Saved Searches [as per _internal log (index=_internal sourcetype=scheduler )], but sometimes the data is not written into summary index for some of the searches. This happens very randomly. I have verified the _internal logs and there is result_count > 0 for searches. There is no error or warning reported. What could be the reason for the same and what all troubleshooting steps I can try out for it?


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>