get_spl_reference
Retrieve detailed documentation for Splunk SPL commands including syntax, examples, and usage patterns to enhance search query development and troubleshooting.
Instructions
Get detailed reference documentation for specific SPL (Search Processing Language) commands. Returns comprehensive documentation with syntax, examples, and usage patterns as an embedded resource.
Args: command (str): SPL command name. Use list_spl_commands() to see common commands. Examples: - 'stats' - Statistical aggregation command - 'eval' - Field calculation and manipulation - 'search' - Search filtering command - 'timechart' - Time-based charting - 'rex' - Regular expression field extraction - 'lookup' - Data enrichment from lookups version (str, optional): Splunk version for documentation. Examples: - '9.4' - Splunk 9.4 documentation - '9.3' - Splunk 9.3 documentation - 'latest' - Latest version (default) auto_detect_version (bool, optional): Whether to auto-detect Splunk version from connected instance. Defaults to True.
Returns embedded resource with detailed SPL command documentation.
💡 Tip: Use list_spl_commands() to see common commands, but this tool supports many more SPL commands beyond the common ones listed.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| command | Yes | ||
| version | No | latest | |
| auto_detect_version | No |