Splunk Search
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question

What am I not seeing event fields in the summary index, from the scheduled report feeding the summary index?

Glasses
Builder
‎07-17-2019 02:06 PM

I created a scheduled report and it parses the fields in key-value pairs nicely.
I enabled a summary index and I see the report feeding events into the summary index.
But I don't get all the key-value pairs parsed out like in the report.
Doesn't the summary report natively parse fields?
Or do I have to specifically table fields?

Thanks

0 Karma
Reply
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...