QuestionQ12

VerifiedFiltering and Formatting Results

What does Splunk return when it finds fewer than the minimum number of matches for each lookup value?

Explanation

When min_matches is greater than 0 and a lookup produces fewer than that number of matches for an input, Splunk supplies the configured default_match value one or more times until the min_matches threshold is met.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!