IT Operations Discussions
All the up-time. All the nines.

Search Help: This could be the answer

Path Finder

Problem 🤔

Throughout my time using Splunk, I have created some crazy long searches! And have spent more than my fair share of time looking for problems when those searches have gone wrong! Increasing my rate of hair loss whilst trying to find that typo in a field name. Which is why I thought I would create an app that would make Splunk do most of the work.

Solution 👍

The app is entitled SPL Rehab and is now free to download on Splunkbase (here). Whilst it was originally designed to work as a debug tool that would let you step through your searches in a similar way a developer steps through breakpoints in code. It has morphed into a tool that will help you make sense of some of the information that appears in the job inspector and will even flag any specific lines within your search that result in 0 results... whilst at the same time retaining that core goal of producing a UI which allows you to step through your search and view the subsequent results.

Theme: DarkTheme: Dark


And as a bonus feature, the dashboards now include custom theming, allowing individual users to select one of 5 coloured themes which will then be saved as a preference against their account for future visits! 49ers fans in particular may wish to take a peak at this!

Theme: 49ersTheme: 49ers



If you would like more information, I will be running a live demo of the app at this months upcoming Yorkshire Splunk User Group virtual session (Sign up here!). There's also a recorded conf session from 2019 (here)


If you have used the app and have some suggestions that would make it even more useful for you. Please leave a comment below, or get in touch via the contact developer section in Splunkbase!

Theme: MintTheme: Mint


Westy 👋

Labels (3)
Tags (4)
Get Updates on the Splunk Community!

Splunk Community Platform Survey

Hey Splunk Community, Starting today, the community platform may prompt you to participate in a survey. The ...

Observability Highlights | November 2022 Newsletter

 November 2022Observability CloudEnd Of Support Extension for SignalFx Smart AgentSplunk is extending the End ...

Avoid Certificate Expiry Issues in Splunk Enterprise with Certificate Assist

This blog post is part 2 of 4 of a series on Splunk Assist. Click the links below to see the other ...