QuestionQ25Verified/Filtering and Formatting ResultsCopy linkReport a problemAsk AstroTutorSave questionIn which clause can wildcards be used with the tstats command?ANo wildcards can be used with tstats.BIn the where clause.CIn the from clause.DIn the by clause.Show AnswerAnswerExplanationThe tstats command accepts wildcard characters in indexed field-value search criteria in its WHERE clause, such as sourcetype=splunkd*. Wildcards are not supported in BY clauses or aggregate-function field values.Learn moretstats | Splunk EnterpriseShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion