Getting Data In

List all Search commands within Splunk ?

koshyk
Super Champion

Hi guys,

Is there a way to list all search commands && a short description from Splunk engine? (As mentioned in docs). This is to help develop in corporate mode where there is no internet connection.

| rest /services/data/commands | table title

I tried above commands and it provides some of the commands, but not all.
Is there a way to display all "Splunk search" commands in above manner?

Tags (2)
0 Karma

dtburrows3
Builder

Not sure if this all of them, but I think it should cover any command defined in a searchbnf.conf file.

| rest splunk_server=local /servicesNS/-/-/configs/conf-searchbnf
    | fields + title, shortdesc, description, eai:acl.app, eai:acl.sharing, usage
    | search title="*-command"
    | eval
        command=replace(title, "-command$", "")
    | fields + command, shortdesc, description




somesoni2
Revered Legend

The rest command you mentioned lists only the Python commands (not all built-in commands), and I am not sure there is any dynamic way to get that list and/or descriptions. Best way will be to prepare content with all search commands (count~130). It could be an html/pdf/lookup and will be available for offline use.

0 Karma

lguinn2
Legend

You could save some of the documentation as a PDF:

Search Command Cheat Sheet

If you look at the left bar, you will see a red link for downloading the entire manual as a PDF. Notice that there is both a Cheat Sheet and a Quick Reference Guide that can be downloaded as PDFs as well.

0 Karma

koshyk
Super Champion

thanks Lisa. I was actually looking for automated way using "REST"

0 Karma
Get Updates on the Splunk Community!

BORE at .conf25

Boss Of Regular Expression (BORE) was an interactive session run again this year at .conf25 by the brilliant ...

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...

UCC Framework: Discover Developer Toolkit for Building Technology Add-ons

The Next-Gen Toolkit for Splunk Technology Add-on Development The Universal Configuration Console (UCC) ...