Database Reference
In-Depth Information
Types of SPL commands
SPL commands can be organized into groups as shown in the following table. We will now
go through each of these groups:
Purpose of
Command
Actual Com-
mands
What it Does
search
where
Filter
Reduces results to a smaller set.
dedup
head
tail
Sort
Orders the results and can also be used to limit the number of results.
sort
Group
Puts those results like members together in groups to better see patterns in the data.
transaction
top / rare
stats
Report
Takes results of a search and summarizes them for a report.
chart
timechart
fields
replace
Included in this group are those that allow you to filter out fields, modify fields, or
add fields to your results.
Other
eval
rex
lookup
In the following tables, we discuss each type of command, what it does, and give examples
of how it is used.
