matching event

noun

When Splunk is running a real-time search, it scans incoming events that contain index-time fields that indicate that they could be a match for the search. Splunk then matches these scanned events against the search criteria. If any of the events among the set of scanned events prove to be an actual match to the search criteria, Splunk identifies them in the UI as matching events.

For more information

In the User Manual:

• Search and report in real time

• Alphabetical
• By Topic