Splunk Operational Intelligence Cookbook
上QQ阅读APP看书,第一时间看更新

The Search Processing Language 

Splunk has its own search language known as the Search Processing Language (SPL). This SPL contains hundreds of search commands, most of which also have several functions, arguments, and clauses. While a basic understanding of SPL is required in order to effectively search your data in Splunk, you are not expected to know all of the commands! Even the most seasoned ninjas do not know all the commands and regularly refer to the Splunk manuals, website, or Splunk Answers (https://answers.splunk.com).

To get you on your way to SPL, be sure to check out the Search command cheat sheet and download the handy Splunk Quick Reference Guide available at https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/SplunkEnterpriseQuickReferenceGuide.