When the Data Volume Index is enabled the index starts to populate. This data does not backfill. A set of messages within the index is created every five minutes.
- When I use Save to Index, metadata fields from the Collector (for example, _collector) will be dropped. Does that mean the data in the index will not have any associated metadata?
- Live Dashboard says "No Data to Display" but running the interactive query returns results
- Discrepancy between Account Usage Details and Log Data Volume Index data
- Is there a way to block or allow specific logs from being ingested?
- Received "You have reached the maximum number of tabs." popup while opening new tab in Sumo Logic UI