Splunk Search

What are the best resources to understand and know about all of the extraction commands in Splunk SPL?

samsingnok
Engager

I want to understand and know about the all of the extraction commands (like rex) in Splunk SPL. Kindly guide me to any links or materials.

Thanks in advance.

0 Karma
1 Solution

somesoni2
Revered Legend

As usual, the best source is Splunk documentation. List of all Inline field extraction commands are listed here. You can refer to Splunk Search Reference to see specification, syntax and examples for each search commands. You can get info on Splunk regular expression here. You can search Splunk Answers for more examples on specific commands.

View solution in original post

inventsekar
SplunkTrust
SplunkTrust

the search reference is the ultimate document for this -
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference

quick reference guide -
http://www.splunk.com/web_assets/pdfs/secure/Splunk_Quick_Reference_Guide.pdf

there is a quick reference -
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/ListOfSearchCommands

Particularly this commands by category -
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/Commandsbycategory

hope this helps...
Best Regards,
Sekar

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

somesoni2
Revered Legend

As usual, the best source is Splunk documentation. List of all Inline field extraction commands are listed here. You can refer to Splunk Search Reference to see specification, syntax and examples for each search commands. You can get info on Splunk regular expression here. You can search Splunk Answers for more examples on specific commands.

Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...
OSZAR »