All Apps and Add-ons
Highlighted

Diference between "::" operator and "=" in SPL

Explorer

what does "::" do in splunk searches, I tried using it interchangably with "=" and it returned the same results. So is there any specific funstionality of "::"

0 Karma
Highlighted

Re: Diference between "::" operator and "=" in SPL

Contributor
Highlighted

Re: Diference between "::" operator and "=" in SPL

Hi,

there was already a similar questions. It has to do with the differences between indextime and searchtime field extraction. More inforomation here: https://answers.splunk.com/answers/411019/whats-the-difference-between-hostabc-and-hostabc.html

Greetings

Tom

0 Karma