Searched a bit, but could find anything. Does anyone already have a Formatter for Splunk search text or Splunk dashboard XMLs (that include prettying the embedded search elements). Ideal if it is pluggable with Notepad++ or Eclipse.
Even though I write the searchTemplate and searchPostProcesses with proper indentation and line breaks on the dashboard XML, when I explore the search via the panel, the search indentations get lost. Indentations also get lost if dashboard.xml gets overwritten as a result of panel edits. Without indentation and formatting, it is very difficult to understand complicated queries.
A formatter that does indentation and line-breaks based on “|” and “[“ and “]” would be great. I know it is possible to define User Defined Language formatter in notepad++ and Eclipse. I wanted to know if someone already has it or if there is a Splunk Formatted App.. IMO native search text formatting should be a feature request for Splunk (both in dashboard XMLs and in search box)
