I upgraded our DMC (Distributed Management Console) to 6.6.0 last week, but everything else in our environment is still 6.5.3.
This search returns different results on the 6.6 DMC than on the 6.5.3 SHC (Search Head Cluster):
index=_* earliest=-2h@h latest=-1h@h
| stats count by index
| sort index
6.6.0:
index count
_audit 49747
_internal 16173711
_introspection 67630
6.5.3:
index count
_audit 33771
_internal 7392283
_introspection 47820
Bah, I'm an idiot.
This all cascaded down from the DMC being on 6.6 and the cluster master being on 6.5. I upgraded the CM and that resolved it.
Bah, I'm an idiot.
This all cascaded down from the DMC being on 6.6 and the cluster master being on 6.5. I upgraded the CM and that resolved it.