Splunk Search

How can we define -- to be a comment?

danielbb
Motivator

We would like to set -- to be a comment in SPL. Can we do that and if so what's needed. We are on 7.3.

Tags (1)
0 Karma

mayurr98
Super Champion

Hey,

Yes, you can definitely do that usingcomment("comment text")

Have a look at this :
https://docs.splunk.com/Documentation/Splunk/7.3.0/Search/Addcommentstosearches

jpolvino
Builder

We use this a lot, and it is "ok" as far as adding some information to searches. I can fully understand the desire to have more robust commenting.

0 Karma

danielbb
Motivator

But, is there a way to define, let's say, -- as a comment line?

0 Karma

mayurr98
Super Champion

I don’t think so, as of now there is only this way to comment text

0 Karma

danielbb
Motivator

Really - too sad.

0 Karma
Get Updates on the Splunk Community!

Accelerate Service Onboarding, Decomposition, Troubleshooting - and more with ITSI’s ...

Accelerate Service Onboarding, Decomposition, Troubleshooting - and more! Faster Time to ValueManaging and ...

New Release | Splunk Enterprise 9.3

Admins and Analyst can benefit from:  Seamlessly route data to your local file system to save on storage ...

2024 Splunk Career Impact Survey | Earn a $20 gift card for participating!

Hear ye, hear ye! The time has come again for Splunk's annual Career Impact Survey!  We need your help by ...