Programming Loops in Splunk (It CAN Be Done)!

New York City Splunk User Group

January 28, 2021, 10:30 PM UTC – January 29, 2021, 2:00 AM UTC


About this event

Is it possible to build programming loops in core Splunk? What would it look like? How would it work? Come see how a combination of key undocumented tricks have allowed us to do exactly that!

See how to use SPL commands with a sprinkling of hacks to loop:

Over rows

Over columns

Over values in multi-value fields

Over arbitrary counter that doesn't exist (true program looping)

link for Zoom meeting: 



January 28 – 29, 2021
10:30 PM – 2:00 AM UTC


10:30 PMGathering
10:45 PMPrograming Loops in Splunk - Gregg Woodcock