index=references sourcetype=spl

SPL Resources

Choose how you want to work with Splunk Search Processing Language.

index=spl | table tool, purpose

Tools

Reference

SPL Cheat Sheet

Beginner-friendly reference for core SPL concepts, commands, and patterns — with copy-ready examples.

View cheat sheet

Interactive tool

SPL Explainer (SPLain)

Paste any SPL query and get a plain-English breakdown of every token — 100% client-side, built for detection engineers.

Open SPLain