Splunk Subsearch

A subsearch is utilised to narrow down the group of activities that you search on. The outcome of that subsearch later employed as an argument to the primary, search or outer. Subsearches are embedded within square brackets inside the main search also are assessed first.

Improve your knowledge in Splunk from scratch using Splunk Online Course.