Closed keroro824 closed 10 years ago
The example omitted search
at the beginning of that query because in the Splunk search UI, it is implied. So if you wanted to use this you would need to put "search" at the beginning. This example doesn't even contain filldown though, so you shouldn't use it as a test of filldown.
Can I merge this one?
Yes. Don't forget to rebase onto the latest version of master and push again before you proceed.
I am pretty confused of the examples given in the docs: 'index=usgs_ source=usgs place=California | rename lat as latitude lon as longitude | table time, place, lat, lon, mag'
It obviously cannot pass the test. Should I delete 'index=usgs_ source=usgs place=California |'?