Database Reference
In-Depth Information
You will see a number of internal indexes, which are preceded by an underscore. These in-
dexes include the logs and metrics that record Splunk's internal processing. Notice that the
non-internal indexes listed here are history, main, splunklogger, summary, and Twitter.
The main index is often selected as a default index. The history and splunklog-
ger indexes were used for previous versions, but are not generally used now. The sum-
mary index stores events that have been aggregated using a transforming command to set
up searches over long time periods. And the Twitter index is created when you use the
Twitter app, as we will do in Chapter 6 , Using the Twitter App .
Search WWH ::




Custom Search