Name a few important Splunk search commands

1.	Name a few important Splunk search commands
Answer» Splunk provides the FOLLOWING search commands: Abstract: It provides a brief summary of the text of the search results. It replaces the original text with the summary. Addtotals: It sums up all the numerical fields for each result. You can see the results under the Statistics tab. Rather than calculating every numeric field, you can SPECIFY a list of fields whose SUM you want to compute. Accum: It calculates a running total of a numeric field. This accumulated sum can be returned to the same field, or to a NEW field specified by you. Filldown: It will generally replace NULL values with the last non-NULL value for the field or set of fields. Filldown will be applied to all fields if there is no list of fields given. Typer: It basically calculates the eventtype field for search results matching a specific/known EVENT type. Rename: It renames the specified field. Multiple fields can be specified using wildcards. Anomalies: It computes the "unexpectedness" score for a given event. The anomalies command can be used to identify events or field values that are unusual or unexpected.

Answer»

Splunk provides the FOLLOWING search commands:

Abstract: It provides a brief summary of the text of the search results. It replaces the original text with the summary.
Addtotals: It sums up all the numerical fields for each result. You can see the results under the Statistics tab. Rather than calculating every numeric field, you can SPECIFY a list of fields whose SUM you want to compute.
Accum: It calculates a running total of a numeric field. This accumulated sum can be returned to the same field, or to a NEW field specified by you.
Filldown: It will generally replace NULL values with the last non-NULL value for the field or set of fields. Filldown will be applied to all fields if there is no list of fields given.
Typer: It basically calculates the eventtype field for search results matching a specific/known EVENT type.
Rename: It renames the specified field. Multiple fields can be specified using wildcards.
Anomalies: It computes the "unexpectedness" score for a given event. The anomalies command can be used to identify events or field values that are unusual or unexpected.

Discussion