Splunk Search

What are the best resources to understand and know about all of the extraction commands in Splunk SPL?

samsingnok
Engager

I want to understand and know about the all of the extraction commands (like rex) in Splunk SPL. Kindly guide me to any links or materials.

Thanks in advance.

0 Karma
1 Solution

somesoni2
Revered Legend

As usual, the best source is Splunk documentation. List of all Inline field extraction commands are listed here. You can refer to Splunk Search Reference to see specification, syntax and examples for each search commands. You can get info on Splunk regular expression here. You can search Splunk Answers for more examples on specific commands.

View solution in original post

inventsekar
SplunkTrust
SplunkTrust

the search reference is the ultimate document for this -
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference

quick reference guide -
http://www.splunk.com/web_assets/pdfs/secure/Splunk_Quick_Reference_Guide.pdf

there is a quick reference -
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/ListOfSearchCommands

Particularly this commands by category -
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/Commandsbycategory

hope this helps...
Best Regards,
Sekar

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

somesoni2
Revered Legend

As usual, the best source is Splunk documentation. List of all Inline field extraction commands are listed here. You can refer to Splunk Search Reference to see specification, syntax and examples for each search commands. You can get info on Splunk regular expression here. You can search Splunk Answers for more examples on specific commands.

Get Updates on the Splunk Community!

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...

Explore the Latest Educational Offerings from Splunk [January 2025 Updates]

At Splunk Education, we are committed to providing a robust learning experience for all users, regardless of ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...