Returns the last N number of specified results. The events are returned in reverse order, starting at the end of the result set. The last 10 events are returned if no integer is specified
- Syntax: <int>
- Description: The number of results to return.
- Default: 10
Return the last 20 results in reverse order.
... | tail 20
Have questions? Visit Splunk Answers and see what questions and answers the Splunk community has using the tail command.
This documentation applies to the following versions of Splunk Cloud™: 6.6.3, 7.0.0, 7.0.2, 7.0.3, 7.0.5, 7.1.3