Browse core SPL commands: syntax, examples, common mistakes and performance notes.

Common regex patterns for use with rex, regex, and erex — with Splunk usage examples and a live tester.

Operational shell/CLI commands that use the splunk binary directly (not SPL run in the search bar) — for ingestion, administration, and diagnostics from the command line. Always review a command and its prerequisites/warnings before running it against a real instance.

Assemble a starting search step by step. This does not connect to Splunk — always review and test generated SPL before use.

Paste a search and see each pipeline stage's command type — Generating, Distributable Streaming, Centralized Streaming, Transforming, Orchestrating or Dataset Processing — the same taxonomy Splunk uses to decide what runs on the indexers versus the search head. Nothing here connects to Splunk; this is local, offline analysis only.

Group favourite or related searches into named, exportable collections.

Everything you need to use the SPL Library offline.

Preferences, local storage and data management. Everything here stays on this device.