https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224903#M196018 <P>Ctrl+\ its perfectly working in Windows </P> Fri, 10 Aug 2018 12:32:51 GMT senthilgoa 2018-08-10T12:32:51Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224894#M196009 <P>I saw a feature in Splunk 6.5.0 where you can press a single button in the search bar and it will autoformat the query so it's far easier to read. Does anyone know what this shortcut is?</P> Thu, 29 Sep 2016 00:02:10 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224894#M196009 markdflip 2016-09-29T00:02:10Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224895#M196010 <P>I believe it is Ctrl+\ or Cmd+\</P> Thu, 29 Sep 2016 00:39:47 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224895#M196010 lquinn 2016-09-29T00:39:47Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224896#M196011 <P>Thank you, Ctrl + \ is exactly what I was talking about.</P> Thu, 29 Sep 2016 00:43:48 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224896#M196011 markdflip 2016-09-29T00:43:48Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224897#M196012 <P>Documented in <A href="http://docs.splunk.com/Documentation/Splunk/6.5.0/Search/Parsingsearches">Help reading searches</A> in the <EM>Search Manual</EM>.</P> Thu, 29 Sep 2016 01:17:57 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224897#M196012 ChrisG 2016-09-29T01:17:57Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224898#M196013 <P>I have a spanish keyboard, I don't have the "\" key, is there any shortcut for me?</P> Mon, 20 Feb 2017 12:28:49 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224898#M196013 sebafdez 2017-02-20T12:28:49Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224899#M196014 <P>There are two defects filed about non-English keyboards and the search formatting: SPL-130405 and SPL-135260. In an upcoming release, there will be an enhancement so that you can use Command-shift-f.</P> <P>Can you get a backslash by typing Ctrl + alt + "º ª \" (the first key to the left of " 1 ! | " )?</P> Tue, 21 Feb 2017 17:38:20 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224899#M196014 ChrisG 2017-02-21T17:38:20Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224900#M196015 <P>also be aware (at least on MAC) that browser plugins like 1password etc, may step on the shortcut, so it become <CODE>fn + cmd + \\</CODE></P> Thu, 02 Mar 2017 14:21:24 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224900#M196015 mattymo 2017-03-02T14:21:24Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224901#M196016 <P>Cmd+\ works perfectly on Mac</P> Tue, 25 Jul 2017 04:46:39 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224901#M196016 kkrishnan_splun 2017-07-25T04:46:39Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224902#M196017 <P>Ctrl + \ doesn't work for me.</P> <P>I'm on Windows 10 withe splunk enterprise 7.1.1 and on chrome</P> <P>,ctrl + \ doesnt work on windows for me. I'm on splunk 7.1.1</P> Fri, 29 Jun 2018 12:37:54 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224902#M196017 mdepunti 2018-06-29T12:37:54Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224903#M196018 <P>Ctrl+\ its perfectly working in Windows </P> Fri, 10 Aug 2018 12:32:51 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224903#M196018 senthilgoa 2018-08-10T12:32:51Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224904#M196019 <P>ok... again as an answer...</P> <P>Just checked on Firefox, Windows 10, German keyboard:<BR /> Ctrl (Strg) + Shift + F<BR /> This should work with nearly all keyboard layouts...</P> <P>Have fun <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> Wed, 15 Aug 2018 14:09:31 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224904#M196019 swasserroth 2018-08-15T14:09:31Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224905#M196020 <P>Ctrl + | (Ctrl + pipe) Worked for me on Windows 7, Splunk version 6.x and 7.x,Ctrl + | (Ctrl + pipe) worked for me on Windows 7</P> Tue, 20 Nov 2018 19:37:19 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224905#M196020 oztraik 2018-11-20T19:37:19Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224906#M196021 <P>Windows 10, with Splunk Enterprise Version: 7.1.5 Build: fd4da3d4caf1. Tried with Firefox, Chrome, ctrl + \ does not work for me anymore. Was working on 7.0.3</P> Thu, 10 Jan 2019 14:56:34 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224906#M196021 lim2 2019-01-10T14:56:34Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224907#M196022 <P>On my "new" OSX 10.14.4 Cmd+\ doesn't work anymore. Ideas?!?</P> <P>Marco</P> Wed, 24 Apr 2019 09:14:37 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224907#M196022 marcoscala 2019-04-24T09:14:37Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224908#M196023 <P>what happens? In my case 1password owns the <CODE>cmd + \</CODE> so it moves to <CODE>fn + cmd + \</CODE> . Try that, or turn on auto-format under user prefs. User &gt; prefs &gt; spl editor, as someone mentioned below. </P> Wed, 24 Apr 2019 16:22:23 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224908#M196023 mattymo 2019-04-24T16:22:23Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224909#M196024 <P>Issue resolved for me when I learnt that under Splunk user profile's Preferences &gt; Chose SPL Editor &gt; Enable "Advanced editor". You can also enable "Line numbers" and "Search auto-format"</P> Wed, 24 Apr 2019 16:37:10 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224909#M196024 lim2 2019-04-24T16:37:10Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224910#M196025 <P>The answer that worked for me is kinda buried, so I'll repeat it here. 1password has <CODE>cmd + \</CODE><CODE>so it moved to</CODE>cmd + fn + ``</P> Tue, 20 Aug 2019 17:45:39 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224910#M196025 jbullough 2019-08-20T17:45:39Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224911#M196026 <P>Yep thanks, it does the trick.</P> Tue, 04 Feb 2020 13:30:56 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/224911#M196026 paulito123 2020-02-04T13:30:56Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/524028#M196027 <P>Thank you!</P> Sat, 10 Oct 2020 13:55:31 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/524028#M196027 swebb07g 2020-10-10T13:55:31Z https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/758669#M243311 <P class="lia-align-left">Please add the alternative keyboard shortcuts for non-us keyboards to trigger formatting.</P><P class="lia-align-left">I'm successfully using Shift+cmd+f on MacOs with a Swedish keyboard. I only knew it from a comment here on the forum, it belongs in the manual.</P> Tue, 24 Feb 2026 09:43:10 GMT https://community.splunk.com/t5/Splunk-Search/Search-formatting-in-Splunk-6-5-0-for-easier-readability/m-p/758669#M243311 jonas1 2026-02-24T09:43:10Z