Does collect command remove data from source index?

[itmonitoring]

Does collect command remove data from source index?

[itmonitoring]

Splunk Doc on collect command is a bit confusing:

source: http://docs.splunk.com/Documentation/Splunk/6.5.2/SearchReference/Collect#Moving_events_to_a_differe...

Moving events to a different index
You can use the collect command to move selected file content from one index to another index. Construct a search that returns the data you want to port, and pipe the results to the collect command. For example:

index=whatever host=whatever source=whatever whatever | collect index=foo

This search ports the data into the foo index. The sourcetype is changed to stash.

You can specify a sourcetype with the collect command. However, specifying a sourcetype counts against your license, as if you indexed the data again.

[DalJeanis]

True. That section is actually describing "copying" the events to another place. It would require an additional step to delete them from the prior index.

[somesoni2]

The collect command write the search results to an index, often called as summary index based on type query result people write using collect command. It doesn't affect any of the source index(ex).