Splunk Search

How can we define -- to be a comment?

danielbb
Motivator

We would like to set -- to be a comment in SPL. Can we do that and if so what's needed. We are on 7.3.

Tags (1)
0 Karma

mayurr98
Super Champion

Hey,

Yes, you can definitely do that usingcomment("comment text")

Have a look at this :
https://docs.splunk.com/Documentation/Splunk/7.3.0/Search/Addcommentstosearches

jpolvino
Builder

We use this a lot, and it is "ok" as far as adding some information to searches. I can fully understand the desire to have more robust commenting.

0 Karma

danielbb
Motivator

But, is there a way to define, let's say, -- as a comment line?

0 Karma

mayurr98
Super Champion

I don’t think so, as of now there is only this way to comment text

0 Karma

danielbb
Motivator

Really - too sad.

0 Karma
Get Updates on the Splunk Community!

Celebrating Fast Lane: 2025 Authorized Learning Partner of the Year

At .conf25, Splunk proudly recognized Fast Lane as the 2025 Authorized Learning Partner of the Year. This ...

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...