Splunk.com | SplunkBase | Support

Documentation: 3.2

Contents

About this manual
- What's in this guide?
About Splunk
- About Splunk
Tutorial
Use the Splunk Command Line Interface (CLI)
- About Splunk's CLI
- Search in the CLI
Use form search
- Form search
  - Run a form search
Use Live Tail
- Live tail
Use transaction search
- Transactions
Search reference
Field reference
- About fields
- List of default fields
  - _index
  - _raw
  - _time
  - date_hour
  - date_mday
  - date_minute
  - date_month
  - date_second
  - date_wday
  - date_year
  - date_zone
  - eventtype
  - host
  - linecount
  - punct
  - source
  - sourcetype
  - timestamp
Modifier reference
Search command reference
- Search commands
- Data-generating commands
  - file
  - savedsearch
  - search
- Saving commands
- Filter and re-order
  - dedup
  - head
  - localize
  - regex
  - reverse
  - set
  - sort
  - tail
  - where
- Transforming and reporting commands
  - associate
  - chart
  - cluster
  - contingency
  - correlate
  - diff
  - format
  - highlight
  - rare
  - stats
  - strcat
  - timechart
  - top
  - transaction
  - typelearner
  - xmlunescape
- Evaluate
  - abstract
  - addtotals
  - anomalousvalue
  - bucket
  - convert
  - eval
  - fields
  - fillnull
  - kmeans
  - outlier
  - rename
  - replace
- Extracting commands
  - extract
  - iplocation
  - multikv
  - rex
  - typer
  - xmlkv
- Administrative commands
  - admin
  - audit
  - run

User Manual