https://community.splunk.com/t5/Training-Certification/Splunk-Fundamentals-1-Module-9-question/m-p/389356#M588 <P>As you have pointed out and since in documentation, there's nothing about <CODE> showother </CODE>, it migth be an error. <A href="http://docs.splunk.com/Documentation/Splunk/7.1.0/SearchReference/Top">http://docs.splunk.com/Documentation/Splunk/7.1.0/SearchReference/Top</A></P> <HR /> <P><STRONG>Syntax: countfield= | limit= | otherstr= | percentfield= | showcount= | showperc= | useother=<BR /> Description: Options for the top command. See Top options.</STRONG></P> Fri, 11 May 2018 21:32:06 GMT marcolesh 2018-05-11T21:32:06Z https://community.splunk.com/t5/Training-Certification/Splunk-Fundamentals-1-Module-9-question/m-p/389355#M587 <P>I'm going through the Splunk Fundamentals 1 course and I'm currently on module 9 - Transforming commands.</P> <P>During the <CODE>top</CODE> command section, there is a bit about about the <CODE>top</CODE> command clauses:</P> <PRE><CODE>limit = int countfield = string percentfield = string showcount = true/false showperc = true/false showother = true/false </CODE></PRE> <P>I can't find any documentation on <CODE>showother</CODE> - is this an error and supposed to be <CODE>useother</CODE>?</P> Fri, 11 May 2018 20:08:55 GMT https://community.splunk.com/t5/Training-Certification/Splunk-Fundamentals-1-Module-9-question/m-p/389355#M587 bomran 2018-05-11T20:08:55Z https://community.splunk.com/t5/Training-Certification/Splunk-Fundamentals-1-Module-9-question/m-p/389356#M588 <P>As you have pointed out and since in documentation, there's nothing about <CODE> showother </CODE>, it migth be an error. <A href="http://docs.splunk.com/Documentation/Splunk/7.1.0/SearchReference/Top">http://docs.splunk.com/Documentation/Splunk/7.1.0/SearchReference/Top</A></P> <HR /> <P><STRONG>Syntax: countfield= | limit= | otherstr= | percentfield= | showcount= | showperc= | useother=<BR /> Description: Options for the top command. See Top options.</STRONG></P> Fri, 11 May 2018 21:32:06 GMT https://community.splunk.com/t5/Training-Certification/Splunk-Fundamentals-1-Module-9-question/m-p/389356#M588 marcolesh 2018-05-11T21:32:06Z https://community.splunk.com/t5/Training-Certification/Splunk-Fundamentals-1-Module-9-question/m-p/389357#M589 <P>If it existed, it would/should be <EM><A href="http://docs.splunk.com/Documentation/Splunk/7.1.0/SearchReference/Top">here</A></EM>, so I'd agree with your assumption - it actually means useother. </P> Fri, 11 May 2018 21:36:54 GMT https://community.splunk.com/t5/Training-Certification/Splunk-Fundamentals-1-Module-9-question/m-p/389357#M589 xpac 2018-05-11T21:36:54Z