Follow this quick start guide to learn how to write a basic SPL2 search that retrieves, processes, an curates data from a Splunk platform index.

This quick start is for users who are learning how to write searches using SPL2. Complete the following steps to create a basic search that retrieves a subset of relevant data from an index, processes the search results, and curates the returned event fields.

1. Start searching data using SPL2

2. Refine your search with filters

3. Process your search results

4. Modifying the fields in your search results