I saved and scheduled a search by the name index usage. I am trying to use summary indexing but cannot get the results displayed. I have selected the default index as summary.
In in order to test the summary indexing performance, i am using the following search
index=summary search_name="index usage". The screen displayes no matching data.
If this information is useful, I have tried to schedule the search at evry 9:00 a.m.
Your help is highly recommended as I have been working on this issue for the past two weeks and still unable to resolve the issue.
index=summary | stats count by search_name
index=summary search_name="index_usage"
index=* search_name="index*usage"
If you do not find any results :
index=_internal source=*scheduler.log* "index*usage"
Can you post the search that populates the summary index?