Splunk Search

What are the best resources to understand and know about all of the extraction commands in Splunk SPL?

samsingnok
Engager

I want to understand and know about the all of the extraction commands (like rex) in Splunk SPL. Kindly guide me to any links or materials.

Thanks in advance.

0 Karma
1 Solution

somesoni2
Revered Legend

As usual, the best source is Splunk documentation. List of all Inline field extraction commands are listed here. You can refer to Splunk Search Reference to see specification, syntax and examples for each search commands. You can get info on Splunk regular expression here. You can search Splunk Answers for more examples on specific commands.

View solution in original post

inventsekar
SplunkTrust
SplunkTrust

the search reference is the ultimate document for this -
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference

quick reference guide -
http://www.splunk.com/web_assets/pdfs/secure/Splunk_Quick_Reference_Guide.pdf

there is a quick reference -
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/ListOfSearchCommands

Particularly this commands by category -
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/Commandsbycategory

hope this helps...
Best Regards,
Sekar

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

somesoni2
Revered Legend

As usual, the best source is Splunk documentation. List of all Inline field extraction commands are listed here. You can refer to Splunk Search Reference to see specification, syntax and examples for each search commands. You can get info on Splunk regular expression here. You can search Splunk Answers for more examples on specific commands.

Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...