Splunk® Cloud Services

SPL2 Search Reference

expand command usage

Use with the flatten command

The expand command is often used with the flatten command.

For an example of how these two commands are used together, see expand command overview.
For additional examples, see expand command examples and flatten command examples.

Nested arrays

You can expand nested arrays by using multiple sets of the expand and flatten commands. See expand command examples.

See also

expand command
expand command overview
expand command syntax details
expand command examples
Last modified on 15 July, 2020
expand command syntax details   expand command examples

This documentation applies to the following versions of Splunk® Cloud Services: current


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters