Splunk Search

What are the best resources to understand and know about all of the extraction commands in Splunk SPL?

samsingnok
Engager

I want to understand and know about the all of the extraction commands (like rex) in Splunk SPL. Kindly guide me to any links or materials.

Thanks in advance.

0 Karma
1 Solution

somesoni2
Revered Legend

As usual, the best source is Splunk documentation. List of all Inline field extraction commands are listed here. You can refer to Splunk Search Reference to see specification, syntax and examples for each search commands. You can get info on Splunk regular expression here. You can search Splunk Answers for more examples on specific commands.

View solution in original post

inventsekar
SplunkTrust
SplunkTrust

the search reference is the ultimate document for this -
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference

quick reference guide -
http://www.splunk.com/web_assets/pdfs/secure/Splunk_Quick_Reference_Guide.pdf

there is a quick reference -
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/ListOfSearchCommands

Particularly this commands by category -
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/Commandsbycategory

hope this helps...
Best Regards,
Sekar

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

somesoni2
Revered Legend

As usual, the best source is Splunk documentation. List of all Inline field extraction commands are listed here. You can refer to Splunk Search Reference to see specification, syntax and examples for each search commands. You can get info on Splunk regular expression here. You can search Splunk Answers for more examples on specific commands.

Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...