Splunk Search

How can we define -- to be a comment?

danielbb
Motivator

We would like to set -- to be a comment in SPL. Can we do that and if so what's needed. We are on 7.3.

Tags (1)
0 Karma

mayurr98
Super Champion

Hey,

Yes, you can definitely do that usingcomment("comment text")

Have a look at this :
https://docs.splunk.com/Documentation/Splunk/7.3.0/Search/Addcommentstosearches

jpolvino
Builder

We use this a lot, and it is "ok" as far as adding some information to searches. I can fully understand the desire to have more robust commenting.

0 Karma

danielbb
Motivator

But, is there a way to define, let's say, -- as a comment line?

0 Karma

mayurr98
Super Champion

I don’t think so, as of now there is only this way to comment text

0 Karma

danielbb
Motivator

Really - too sad.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...