Commands

Commands can be accessed via the Command palette. Some commands are also available in the Splunk view container in the action bar.

Commands

• splunk.search.adhoc - run an ad-hoc search. Results render in Splunk channel in the OUTPUT view tab.
• splunk.savedSearch.run - runs a Splunk saved search. Results render in Splunk channel in the OUTPUT view tab.
• splunk.savedSearches.refresh - requests Saved searches from the configured Splunk instance
• splunk.new.modviz - creates scaffolding for a Splunk custom visualization
• splunk.new.command - creates scaffolding for a Splunk custom search command
• splunk.embeddedReport.show - shows a Splunk embedded report in a Visual Studio Code panel

Running a Saved Search via the Command Palette

Prerequisites

• Configure the Splunk REST URL setting in Visual Studio Code
• Configure the Token setting in Visual Studio Code

For more information, refer the the extension settings page.

Procedure

• Open the Command Palette by pressing Ctrl + P (Windows) or ⌘ + P (Mac)
• >Splunk: Run Saved Search + Enter
• Choose a saved search from the dropdown menu
• Results will be written to the OUTPUT console