history
history
Synopsis
Returns a history of searches formatted as an events list or as a table.
Syntax
history [events=<bool>]
Arguments
- events
- Syntax: events= T | F
- Description: Specify whether to return the search history as an events list (T) or as a table (F). Defaults to F.
Examples
Example 1: Return a table of the search history.
... | historySee also
Answers
Have questions? Visit Splunk Answers and see what questions and answers the Splunk community has using the history command.
This documentation applies to the following versions of Splunk: 4.2 , 4.2.1 , 4.2.2 , 4.2.3 , 4.2.4 , 4.2.5 , 4.3 , 4.3.1 , 4.3.2 , 4.3.3 , 4.3.4 , 4.3.5 , 4.3.6 , 5.0 , 5.0.1 , 5.0.2 , 5.0.3 View the Article History for its revisions.
Comments
hi Supersleepwalker: i suggest you file an enhancement request with the Support team--this will get passed to Product Management for consideration.
I want to know how I can search my history. I'd like to be able to do a reverse search, like in bash.
actually, you should be able to pipe this search to further search parameters, and also use the reverse command ( http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Reverse ) to accomplish some of this.