Skip to main content
Version: 5.3

table

Description

Creates a table from specified fields. Supports wildcards.

Syntax

table <field-list>

Required Arguments

ParameterSyntaxDescription
<field-list><field> [, <field>]A list of fields by which the table is created.

Examples

Example 1

In this example, only the fields event and @timestamp remain in the result table.

... | table event @timestamp

Example 2

In this example, the wildcard @timest* is used to output all fields whose names start with this prefix.

... | table @timest*