thru command syntax details
Syntax
The required syntax is in bold.
- thru
- [mode = (append | replace)]
- <dataset>
Required arguments
- dataset
- Syntax: <dataset>
- Description: The name of the dataset to write the search results to.
Optional arguments
- mode
- Syntax: mode=(append | replace)
- Description: Specifies whether the search results are appended to the existing data in the dataset or replace the data in the dataset.
- Default: append
See also
- thru command
- thru command overview
- thru command usage
- thru command examples
Last modified on 20 October, 2020
| thru command overview | thru command usage |
This documentation applies to the following versions of Splunk® Cloud Services: current
Download manual
Feedback submitted, thanks!