typeahead
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Contents
typeahead
Synopsis
Returns typeahead on a specified prefix.
Syntax
typeahead prefix-opt count-opt [max-time-opt] [index-specifier] [starttimeu] [endtimeu] [collapse-opt]
Arguments
- prefix-opt
- Syntax:
- Description:
- count-opt
- Syntax:
- Description:
- max-time-opt
- Syntax:
- Description:
- index-specifier
- Syntax:
- Description:
- starttimeu
- Syntax:
- Description:
- endtimeu
- Syntax:
- Description:
- collapse-opt
- Syntax:
- Description:
Description
Returns typeahead on a specified prefix. Only returns a max of count results, can be targeted to an index and restricted by time.
Examples
Example 1: Return typeahead information for sources in the "_internal" index.
| typeahead prefix=source count=10 index=_internalThis documentation applies to the following versions of Splunk: 4.0 , 4.0.1 , 4.0.2 , 4.0.3 , 4.0.4 , 4.0.5 , 4.0.6 , 4.0.7 , 4.0.8 , 4.0.9 , 4.0.10 , 4.0.11 View the Article History for its revisions.