Splunk® Cloud Services

SPL2 Search Reference

SPL2 compatibility profiles

The Search Processing Language, version 2 (SPL2) is a product-agnostic language that supports both SPL and SQL syntax patterns. SPL2 is designed to serve as the single entry point to the Splunk portfolio.

Each product that implements SPL2 might include a subset of the commands and functions that are available in the language, based on what the product is designed to do. When a product uses an SPL2 command or function, the SPL2 syntax is used. The syntax does not change for that product.

An SPL2 profile maps to a set of SPL2 commands and functions that are used by a given product.

Current SPL2 profiles

The following table lists the Splunk products and the associated SPL2 profiles:

Splunk product or feature Profile name Related information
Splunk Edge Processor edgeProcessor
Splunk Ingest Processor ingestProcessor
Splunk Edge Processor (Search tab only) splunkd
Splunk platform SPL2-based app development splunkd
  • Create a SPL2-based app in the Developer Guide for Splunk Cloud Platform and Splunk Enterprise on the Splunk Developer Portal.

See also

Compatibility Quick Reference for SPL2 commands
Compatibility Quick Reference for SPL2 evaluation functions
Last modified on 01 December, 2024
New features in SPL2   Compatibility Quick Reference for SPL2 commands

This documentation applies to the following versions of Splunk® Cloud Services: current


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters