Splunk Enterprise version 7.0 is no longer supported as of October 23, 2019. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk® Enterprise.
For documentation on the most recent version, go to the latest release.
noop
Description
The noop command is an internal command that is used for debugging.
If you are looking for a way to add comments to your search, see Add comments to searches in the Search Manual.
Syntax
noop
Optional arguments
- search_optimization
- Syntax: true | false
- Description: Specifies if search optimization is enabled for the search.
- Default: true
Troubleshooting search optimization
In some very limited situations, the optimization that is built into the search processor might not optimize a search correctly.
To turn off optimization for a specific search, the last command in your search criteria should be
|noop search_optimization=false
Last modified on 15 January, 2020
| mcatalog | runshellscript |
This documentation applies to the following versions of Splunk® Enterprise: 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.13
Download manual
Feedback submitted, thanks!