Splunk.com | SplunkBase | Support

Documentation: 3.3.1

| Print Version Contents

About this manual
- What's in this guide?
About Splunk
- About Splunk
- About Splunk licenses
Use Splunk Web
Tutorial
Add inputs
Index
Search
Tag
Report
Save, Schedule, and Alert
- Save, schedule, and set alerts
- Find and manage saved searches
  - Delete or modify saved searches
  - Display saved searches on dashboard
Use the Splunk Command Line Interface (CLI)
Search reference
Field reference
- About fields
- List of default fields
  - _index
  - _raw
  - _time
  - date_hour
  - date_mday
  - date_minute
  - date_month
  - date_second
  - date_wday
  - date_year
  - date_zone
  - eventtype
  - host
  - linecount
  - punct
  - source
  - sourcetype
  - timestamp
Modifier reference
Search command reference
- Search commands
- Generate data
  - crawl
  - file
  - savedsearch
  - search
- Filter and re-order
  - dedup
  - head
  - localize
  - regex
  - reverse
  - set
  - sort
  - tail
  - where
- Transform and report
  - associate
  - chart
  - cluster
  - contingency
  - collect
  - correlate
  - diff
  - eventstats
  - format
  - highlight
  - makemv
  - mvcombine
  - mvexpand
  - nomv
  - overlap
  - rare
  - stats
  - strcat
  - timechart
  - top
  - transaction
  - typelearner
  - xmlunescape
- Evaluate
  - abstract
  - addtotals
  - anomalousvalue
  - bucket
  - convert
  - eval
  - fields
  - fillnull
  - kmeans
  - outlier
  - rename
  - replace
- Extract
  - addinfo
  - extract (kv)
  - iplocation
  - multikv
  - rex
  - typer
  - xmlkv
- Administrative commands
  - admin
  - audit
  - run
- Unsupported search commands
  - createrss
  - dispatch
  - folderize
  - gentimes
  - idxprobe
  - inputcsv
  - load
  - map
  - outputatom
  - outputcsv
  - outputraw
  - outputtext
  - outputxml
  - page
  - rawstats
  - save
  - sendemail
  - tagcreate
  - tagdelete
  - tags
  - tagset
  - translate
- Deprecated search commands
  - nopartial
  - remote
  - searchps
  - select
  - streamedcsv
  - summary
  - timeline
  - uniq

This page last updated: 06/30/08 08:06am

About Splunk

Splunk is an IT search engine.

You can use Splunk to search and navigate IT data from applications, servers, and network devices in real-time.

Data sources include logs, configurations, messages, alerts, scripts, code, metrics, etc.

Splunk lets you search, navigate, alert, and report on all your IT data in real-time using Splunk Web.

Previous: What's in this guide? | Next: About Splunk licenses

Comments

No comments have been submitted.

Log in to comment.