This is not current Splunk documentation.
Splunk 3.4.2 is the latest version. Only use this page with older Splunk 2.0.x.
Splunk 3.4.2 is the latest version. Only use this page with older Splunk 2.0.x.
Splunk User Manual (Splunk v2.0)
Tutorial
Typeahead
Type into the Splunk box and you'll see a drop-down list of typeahead options with the number of matches for each possible completion in the current index. It includes both terms in the index and Splunk modifiers such as source::. You can use the up and down arrows, Tab key, and Enter key to select entries from the typeahead panel.

No comments have been submitted.