![]() ![]() The appendcols command can't be used before a transforming command because it must append to an existing set of table-formatted results, such as those generated by a transforming command. The appendcols command must be placed in a search string after a transforming command such as stats, chart, or timechart. Default: 50000 timeout Syntax: timeout= Description: The maximum time, in units of seconds, to wait for subsearch to fully finish. Default: 60 maxout Syntax: maxout= Description: The maximum number of result rows to output from the subsearch. Subsearch options maxtime Syntax: maxtime= Description: The maximum time, in units of seconds, to spend on the subsearch before automatically finalizing. Default: override=false subsearch-options Syntax: maxtime= | maxout= | timeout= Description: These options control how the subsearch is executed. If override=true, the subsearch result value is used. Optional arguments override Syntax: override= Description: If the override argument is false, and if a field is present in both a subsearch result and the main result, the main result is used. See how subsearches work in the Search Manual. Required arguments subsearch Description: A secondary search added to the main search. For example, the first subsearch result is merged with the first main result, the second subsearch result is merged with the second main result, and so on. All fields of the subsearch are combined into the current results, with the exception of internal fields. Appends the fields of the subsearch results with the input search results. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |