Reference
SPL Cheat Sheet
Beginner-friendly reference for core SPL concepts, commands, and patterns — with copy-ready examples.
View cheat sheetindex=references sourcetype=spl
Choose how you want to work with Splunk Search Processing Language.
index=spl | table tool, purpose
Reference
Beginner-friendly reference for core SPL concepts, commands, and patterns — with copy-ready examples.
View cheat sheetInteractive tool
Paste any SPL query and get a plain-English breakdown of every token — 100% client-side, built for detection engineers.
Open SPLain