Welcome to the Search Reference manual
In this manual, you'll find a reference guide for the Splunk user who is looking for a catalog of the search commands with complete syntax, descriptions, and examples for usage.
If you're looking for an introduction to searching in Splunk, check out the User Manual's topics about search to get you started.
See the "List of search commands" in the Search Overview chapter for a catalog of the search commands, with a short description of what they do and related search commands. Each search command links you to its reference page in the Search Command chapter of this manual. If you want to just jump right in and start searching, the Search command cheat sheet is a quick reference complete with descriptions and examples.
Before you continue, read "How to use this manual" for the conventions and rules used in this manual.
Make a PDF
If you'd like a PDF version of this manual, click the red Download the Search Reference as PDF link below the table of contents on the left side of this page. A PDF version of the manual is generated on the fly for you, and you can save it or print it out to read later.
Understanding SPL syntax
This documentation applies to the following versions of Splunk® Enterprise: 4.3, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7