I upgraded our DMC (Distributed Management Console) to 6.6.0 last week, but everything else in our environment is still 6.5.3.
This search returns different results on the 6.6 DMC than on the 6.5.3 SHC (Search Head Cluster):
index=_* earliest=-2h@h latest=-1h@h
| stats count by index
| sort index
6.6.0:
index count
_audit 49747
_internal 16173711
_introspection 67630
6.5.3:
index count
_audit 33771
_internal 7392283
_introspection 47820
↧
