Search Reference



Welcome to the Search Reference

Welcome to the Search Reference

In this manual, you'll find a reference guide for the Splunk user who is looking for a catalog of the search commands with complete syntax, descriptions, and examples for usage.

If you're looking for an introduction to searching in Splunk, refer to the Search Tutorial to get you started. For more information about Splunk search, refer to the Search Manual.

See the "List of search commands" in the Search Commands and Functions chapter for a catalog of the search commands, with a short description of what they do and related search commands. Each search command links you to its reference page in the Search Command Reference chapter of this manual. If you want to just jump right in and start searching, the Search command cheat sheet is a quick reference complete with descriptions and examples.

Before you continue, read "How to use this manual" for the conventions and rules used in this manual.

Make a PDF

If you'd like a PDF version of this manual, click the red Download the Search Reference as PDF link below the table of contents on the left side of this page. A PDF version of the manual is generated on the fly for you, and you can save it or print it out to read later.

This documentation applies to the following versions of Splunk: 6.0 , 6.0.1 , 6.0.2 , 6.0.3 , 6.0.4 , 6.0.5 , 6.0.6 , 6.0.7 , 6.0.8 , 6.0.9 , 6.1 , 6.1.1 , 6.1.2 , 6.1.3 , 6.1.4 , 6.1.5 , 6.1.6 , 6.1.7 , 6.1.8 , 6.2.0 , 6.2.1 , 6.2.2 , 6.2.3 View the Article History for its revisions.

You must be logged into in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.

Feedback submitted, thanks!