Summaries go to the default tcpout group defined in outputs.conf on a search head. What if you want to send them to a different place?
Frank Wayne's Blog
Summaries go to the default tcpout group defined in outputs.conf on a search head. What if you want to send them to a different place?