Splunk Search

What is the difference between format and return in subsearch?

neeraja432
New Member

i am new to Splunk.

Please let me know when to use format and return in a Splunk subsearch.

0 Karma

DavidHourani
Super Champion

Hey there,

Here are the details about those commands :
format :
http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/format
Return :
http://docs.splunk.com/Documentation/Splunk/7.2.1/SearchReference/Return

Hope that helps!

Cheers,
David

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...