Splunk Search

Subsearch - what is the scope of the outer search?

wang
Path Finder

When using subsearch, What is the scope of the outer search? Is the outer search executed against the result set of the inner search?

Tags (1)
0 Karma

ziegfried
Influencer

No, the outer search is executed. The subsearch only appends criteria to the outer search. You can look at the generated criteria by running your subsearch and appending | format

<your subsearch> | format
0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...