Notepad++ highlighters for the Splunk Search Processing Language (SPL)

[mcessna]

If you are a Notepad++ user and desire syntax highlighting for the Splunk Search Processing Language (SPL),  two Notepad++ User Defined Languages (UDLs) became recently available for Splunk. Below is an example of the Splunk SPL (Light Mode)  UDL in use:

Highlighting Example.png

There's also a Splunk SPL (Dark Mode)  UDL. Both UDLs can be downloaded from within Notepad++ by using the CollectionInterface plugin. Once that plugin is installed via "Plugins --> Plugins Admin..." you go to: "Plugins --> CollectionInterface --> Collection Interface: Download" and you'll see the "Collection Interface: Download" dialog:
Collection Interface - Download.png
Select the UDLs you want and check the AutoCompletion option if desired. The UDLs will be downloaded to the Notepad++ userDefineLangs folder. Windows users will find the folder here:

• %APPDATA%\Notepad++\userDefineLangs

The file names for the two UDLs are:

• Splunk_SPL_Light_Mode.xml
• Splunk_SPL_Dark_Mode.xml

These can be imported into Notepad++ via the "Language --> User Defined Language --> Define your language..." menu item.

Thanks

Mike