Speaker: Tom West, SplunkTrust member

SPL Rehab: Helping to debug your searches for you!

Ever written a search and received an error, or worse… the dreaded “0 results found”? Faced with the prospect of painfully picking the search apart to find where things went wrong! This is where SPL Rehab comes in. An app on Splunkbase that not only will tell you which line is responsible, but also allows you to step through your search in a controlled manner, viewing not only your results but your performance data associated with the search (so long job inspector!). We will show you how you can take advantage of this app to save you time, as well as give you an understanding as to how this works under the covers. We will also show you some new and interesting search techniques using some of our favourite commands, as well as how you can take advantage of some simple CSS applications to completely change the look and feel of your dashboards.