Splunk Search

Windows text editor with syntax highlighting for Splunk

msachdeva3
Explorer

I need to install syntax higlighting feature on any IDE availablae notepad++,Sublime for Splunk queries.
Any help is appreciated.

rafrey
Explorer

A quick google search turned up these sublime packages in case they have been overlooked by anyone, I personally haven't used them. I am on the hunt for something similar in atom.io as well though.

https://packagecontrol.io/packages/Splunk%20Syntax

https://packagecontrol.io/packages/Splunk%20Conf%20File%20Syntax%20Highlighting

woodcock
Esteemed Legend

This is the one that I use for vim:

https://github.com/yorokobi/vim-splunk

0 Karma

ChrisG
Splunk Employee
Splunk Employee

You might try httpstergeek's Notepad++ defined language file.

Note that Splunk Enterprise 6.5 includes syntax highlighting for searches, see Help reading searches in the Search Manual.

Related (putting it here in case someone finds this answer looking for .conf file syntax highlighting): Yorokobi's vim extension.

0 Karma

msachdeva3
Explorer

unable to install in Notepad++
saw a similar note on stackflow
I'm aware of 6.5 highlighting scheme, thats what I'm trying to emulate in Notepad++

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Introducing the 2026 - 2027 SplunkTrust cohort!

The goal of the SplunkTrust™ membership has historically been to acknowledge and recognize those who go above ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...