Back to Floor
The Master's Library • Room 2

Append Commands

The **append** command runs a subsearch and appends its results to the end of the existing results.

This is useful when you want to look at two different data sets that don't share a common field.

Note: `append` limits subsearch results to 50,000 rows. Use `appendpipe` to append results of a subpipeline to the main results without hitting the limit in some cases.

Append Example
index=sales sourcetype=eu_sales
| append [ search index=sales sourcetype=us_sales ]

Knowledge Check

Prove your understanding to clear the room (Rewards XP)
❤️❤️❤️
Question 1 of 1
What is the default maximum number of results a subsearch can return when used with append?
A10,000
B50,000
C100,000
DUnlimited