I'm trying to convert the Health Check queries into a dashboard, I already change neccesary permissions in some macros and lookups in order to do this but two of the searches launch this kind of query:
`dmc_set_index_internal` splunk_server=local search_group=dmc_group_indexer
This search works in Monitoring Console but not in other searches.
As I said the macro is already permitted and working but the Field `search_group` does not exist in other apps.
I've tried to find it in Field aliases, Calculated fields, fields extractions, etc... but not luck.
I don't know where else this could be.
Any idea?
Thanks.
↧