Search
Run a query against a repository and display results.
Usage:
shell
humioctl search [flags] <repo> <query>Table: Local flags
| Parameter | Description |
|---|---|
-e, --end string | Query end time. |
-f, --fmt string |
Format string for event list results. Wrap field names in braces to
insert field values, for example {@timestamp}. Width
modifiers control alignment: {field:40} right-aligns and
left-pads to 40 characters; {field:-40} left-aligns and
right-pads. Default: {@timestamp} {@rawstring}.
|
-h, --help | Help for search |
--json-progress | Output search progress in JSON format, suppressing normal progress display and results. Useful for logging search metadata. |
-l, --live | Run a live search and keep outputting until interrupted. |
--no-progress | Do not show progress information. |
-n, --no-wrap | Do not autowrap long strings. |
-s, --start string |
Query start time. Default: 10m.
|
Table: Global flags
| Parameter | Description |
|---|---|
-a,--address string | The HTTP address of the Humio cluster. Overrides the value in your config file. |
--ca-certificate-file string | File path to a file containing the CA certificate in PEM format. Overrides the value in your config file. |
-c, --config string |
Config file (default is
$HOME/.humio/config.yaml)
|
--format string | Change output format of commands, if supported. Valid formats: json |
--insecure | By default, all encrypted connections will verify that the hostname in the TLS certificate matches the name from the URL. Set this to true to ignore hostname validation. |
-u, --profile string | Name of the config profile to use |
--proxy-organization string | Commands are executed in the specified organization. |
-t, --token string | The API token to use when talking to Humio. Overrides the value in your config file. |
--token-file string | File path to a file containing the API token. Overrides the value in your config file and the value of --token. |
--unix-socket-proxy string | Path to a unix socket to use as an HTTP proxy. |