thru command syntax details

Syntax

The SPL2 thru command supports different syntaxes in different product contexts.

In searches, the thru command enables you to specify whether to append results to or replace results in the specified dataset.

The required syntax is in bold.

thru

[mode = (append | replace)]

<dataset>

In pipelines, the thru command is used for data routing, and the routed copy of the data is always appended to the destination dataset.

The required syntax is in bold.

thru

[

[<additional-SPL2-commands>]

| into <$destination>

]

The outermost square brackets [ ] are required.

The required arguments are different in each product context.

dataset: Syntax: <dataset>; Description: The name of the dataset to write the search results to.

destination: Syntax: into <$destination>; Description: The name of a parameter, which must be preceded by the into command. The parameter refers to the destination dataset specified in the pipeline settings, and determines which destination dataset the routed copy of data is written to.

mode: Syntax: mode=(append | replace); Description: Specifies whether the search results are appended to the existing data in the dataset or replace the data in the dataset.; Default: append

additional SPL2 commands: Syntax: <additional-SPL2-commands>; Description: One or more SPL2 commands to process the data before it is routed to the <$destination>. See the Pipeline example on the thru command examples topic.