Splunk Search

Windows text editor with syntax highlighting for Splunk

msachdeva3
Explorer

I need to install syntax higlighting feature on any IDE availablae notepad++,Sublime for Splunk queries.
Any help is appreciated.

rafrey
Explorer

A quick google search turned up these sublime packages in case they have been overlooked by anyone, I personally haven't used them. I am on the hunt for something similar in atom.io as well though.

https://packagecontrol.io/packages/Splunk%20Syntax

https://packagecontrol.io/packages/Splunk%20Conf%20File%20Syntax%20Highlighting

woodcock
Esteemed Legend

This is the one that I use for vim:

https://github.com/yorokobi/vim-splunk

0 Karma

ChrisG
Splunk Employee
Splunk Employee

You might try httpstergeek's Notepad++ defined language file.

Note that Splunk Enterprise 6.5 includes syntax highlighting for searches, see Help reading searches in the Search Manual.

Related (putting it here in case someone finds this answer looking for .conf file syntax highlighting): Yorokobi's vim extension.

0 Karma

msachdeva3
Explorer

unable to install in Notepad++
saw a similar note on stackflow
I'm aware of 6.5 highlighting scheme, thats what I'm trying to emulate in Notepad++

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Catalog Is Now Generally Available on Splunk Cloud Platform

A Unified View of Your Data  Security logs, application events, business data, and historical telemetry often ...

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner   Watch on demand us for a demo-driven ...