I have a search as follow:
sourcetype="renprodweb" | sistats count by httprespcode
(with the time range is previous month) Using spunk web, I saved the report, enabled Summary Index, scheduled it to run every 15 minutes. I was able to get the data from the search itself. However, when I tried to run a search against the summary index as the following, I received nothing.
index="summary" searchname="summary - stats count" | stats count by httpresp_code
What am I missing here?
Thanks.
... View more