Splunk> SPL Cheat Sheets

Welcome to my set of cheat sheets for Splunk> SPL. In these sheets, you will find commonly used SPL queries and syntax.

common-spl.md - This file contains commonly used SPL Syntax and Commands.
web-security-spl.md - This file contains commonly used SPL for incident detection and response of the OWASP Top 10 Web Application Attacks.

How to fetch only top 10 records and stops query execution as soon as we get 10 records

index="xyz" | streamstats count as total | search total<=10 | head 10

Name		Name	Last commit message	Last commit date
Latest commit History 9 Commits
LICENSE		LICENSE
README.md		README.md
common-spl.md		common-spl.md
web-security-spl.md		web-security-spl.md