- In the Sumo Logic Web Application, choose Manage > Indexes.
- On the Scheduled Views tab, click Add.
- In the Create an Index dialog box, enter the following:
- Index Type. Select Scheduled View.
- Index Name. Enter a name that you'll use to search the data in a query. It's important to use a name that's descriptive and easy to remember. Names can contain alphanumeric characters; underscores( _ ) are the only special characters allowed.
- Query. Enter the full query that encompasses the data you'd liked indexed in the View. Parse operators and most search operators are supported in Views.
- Start Time. Select the date and time that you'd like to use as the start time of the index. All data from that point forward will be indexed in the Scheduled View. The oldest selectable date represents the end of the retention period of your Sumo Logic account. You must select a start time for the Create button to become active.
- Retention Period. Enter the retention period for this Scheduled View, if you want it to be different from the General Index. Otherwise, select the check box Apply the retention period of the General Index.
- Enable Data Forwarding. Select this check box to forward the data in this Scheduled View to an S3 bucket.
- Click Create.
The View begins to index data as soon as you create it. Allow a few hours for the indexing to complete. If you've chosen to index a large amount of data and/or have chosen a long date range for the view, it could take a bit longer.
Once created, Scheduled Views are executed once per minute.