how to put the result of search into a new index - Splunk Community

Getting Data In

hello

I want to use this search index=maillog I transaction qid maxspan=1m maxpause=30s and put the result into a new index how to set it

thank you

Have a look at the collect command:
http://docs.splunk.com/Documentation/Splunk/7.0.3/SearchReference/Collect

Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...