About writing custom search commands

This documentation has moved and been updated. See Create custom search commands for apps in Splunk Cloud or Splunk Enterprise in the Developer Guide on the Developer Portal.

The Splunk Search Processing Language (SPL) includes a wide variety of commands that you can use to get what you want out of your data and to display the results. You can use commands to correlate events and calculate statistics on your results, evaluate fields and reorder results, reformat and enrich your data, build charts, and more.

You can also expand the Splunk SPL to customize these commands to better meet your needs, or to write your own search commands for custom processing or calculations.

Use the Splunk SDK for Python, which includes several templates, to build custom search commands. See How to create custom search commands on the Splunk Dev Portal.