Getting Data In

List all Search commands within Splunk ?

koshyk
Super Champion

Hi guys,

Is there a way to list all search commands && a short description from Splunk engine? (As mentioned in docs). This is to help develop in corporate mode where there is no internet connection.

| rest /services/data/commands | table title

I tried above commands and it provides some of the commands, but not all.
Is there a way to display all "Splunk search" commands in above manner?

Tags (2)
0 Karma

dtburrows3
Builder

Not sure if this all of them, but I think it should cover any command defined in a searchbnf.conf file.

| rest splunk_server=local /servicesNS/-/-/configs/conf-searchbnf
    | fields + title, shortdesc, description, eai:acl.app, eai:acl.sharing, usage
    | search title="*-command"
    | eval
        command=replace(title, "-command$", "")
    | fields + command, shortdesc, description




somesoni2
Revered Legend

The rest command you mentioned lists only the Python commands (not all built-in commands), and I am not sure there is any dynamic way to get that list and/or descriptions. Best way will be to prepare content with all search commands (count~130). It could be an html/pdf/lookup and will be available for offline use.

0 Karma

lguinn2
Legend

You could save some of the documentation as a PDF:

Search Command Cheat Sheet

If you look at the left bar, you will see a red link for downloading the entire manual as a PDF. Notice that there is both a Cheat Sheet and a Quick Reference Guide that can be downloaded as PDFs as well.

0 Karma

koshyk
Super Champion

thanks Lisa. I was actually looking for automated way using "REST"

0 Karma
Get Updates on the Splunk Community!

Uncovering Multi-Account Fraud with Splunk Banking Analytics

Last month, I met with a Senior Fraud Analyst at a nationally recognized bank to discuss their recent success ...

Secure Your Future: A Deep Dive into the Compliance and Security Enhancements for the ...

What has been announced?  In the blog, “Preparing your Splunk Environment for OpensSSL3,”we announced the ...

New This Month in Splunk Observability Cloud - Synthetic Monitoring updates, UI ...

This month, we’re delivering several platform, infrastructure, application and digital experience monitoring ...