Splunk Search

What are the best resources to understand and know about all of the extraction commands in Splunk SPL?

samsingnok
Engager

I want to understand and know about the all of the extraction commands (like rex) in Splunk SPL. Kindly guide me to any links or materials.

Thanks in advance.

0 Karma
1 Solution

somesoni2
Revered Legend

As usual, the best source is Splunk documentation. List of all Inline field extraction commands are listed here. You can refer to Splunk Search Reference to see specification, syntax and examples for each search commands. You can get info on Splunk regular expression here. You can search Splunk Answers for more examples on specific commands.

View solution in original post

inventsekar
SplunkTrust
SplunkTrust

the search reference is the ultimate document for this -
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference

quick reference guide -
http://www.splunk.com/web_assets/pdfs/secure/Splunk_Quick_Reference_Guide.pdf

there is a quick reference -
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/ListOfSearchCommands

Particularly this commands by category -
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/Commandsbycategory

hope this helps...
Best Regards,
Sekar

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

somesoni2
Revered Legend

As usual, the best source is Splunk documentation. List of all Inline field extraction commands are listed here. You can refer to Splunk Search Reference to see specification, syntax and examples for each search commands. You can get info on Splunk regular expression here. You can search Splunk Answers for more examples on specific commands.

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...