A Command Reference

Specify commands in your query string to perform specific actions on the search results.

The first and implicit command in a query is the search command. This command consists of a series of keywords, and fieldname-value pairs, which identify the data that needs to be retrieved. More commands can be specified by separating them from the search command by using a pipe character (|).

The following commands are supported:

• Addfields Command

• Addinsights Command

• Bottom Command

• Bucket Command

• Classify Command

• Cluster Command

• Clustercompare Command

• Clusterdetails Command

• Clustersplit Command

• Compare Command

• Createview Command

• Distinct Command

• Eval Command

• Eventstats Command

• Fields Command

• Fieldsummary Command

• Head Command

• Highlightgroups Command

• Highlightrows Command

• Highlight Command

• Link Command

• Lookup Command

• Map Command

• NLP Command

• Regex Command

• Rename Command

• Search Command

• SearchLookup Command

• Sort Command

• Stats Command

• Tail Command

• Timecluster Command

• Timestats Command

• Top Command

• Where Command