report

noun

The output of a search that uses reporting or transforming commands to produce results in table or chart format. You can use the Report Builder to refine report-creating searches and format the charts that they produce. Reports can display real-time search results.

When you run a search that includes reporting commands in the Search app, you can see it in table format by changing the view in the report results window. To create a chart based on the report, launch the Report Builder by selecting Build report in the job status bar above the timeline.

For more information

In the User Manual:

configuration

configuration file

event processing

character set encoding

segmentation

segment

timestamping

timestamp, timezone offset

default field extraction

host, source, source type, punct


archiving

retention time