In this chapter, we have explored the use of summary indexes and the commands surrounding them. While summary indexes are not always the answer, they can be very useful for particular problems. We also explored alternative approaches by using CSV files for interim storage.

In our next chapter, we will dive into the configuration files that drive Splunk.