Shortcut keys available in the search bar

release date
2019-08-29
last updated
2024-03-04
version
Splunk Enterprise 9.1.2
Overview
The search bar on Splunk Web offers several keyboard shortcuts.
You can use shortcut keys to edit search statements and perform other operations.
Reference information
content

Edit search statement

# shortcut key function
1 Ctrl + \ search statement formatting
(line breaks with pipe delimiters, and subsearches are indented)
2 Ctrl + Z Undo last search statement edit operation
3 Ctrl+Y or
Ctrl + Shift + Z
Redo the search statement editing operation that was undone with "Ctrl + Z"
4 Shift + Enter Add blank line below cursor line
5 Alt+Shift+Up Arrow Copy cursor line up one line
6 Alt+Shift+Down Arrow copy cursor line down
7 Alt + Up Arrow Move cursor up one line
8 Alt + Down Arrow Move cursor down one line
9 Ctrl-D Delete cursor line
(If the cursor line spans multiple lines without a line break, the entire multiple lines are deleted.)
10 Alt+Delete Delete from the cursor position on the cursor line to the end of the line
11 Alt + Backspace Delete from cursor position to beginning of line
12 Ctrl + Delete Delete word or space to right of cursor position
13 Ctrl + Backspace Delete word or space to left of cursor position

Other operations

# shortcut key function
1 Ctrl + Shift + E Expanding the contents of search macros and saved searches
2 Ctrl-F Show search window
(Available when the search statement spans multiple lines)
3 Ctrl + H Show find/replace window
4 Ctrl+Space Display of search assistant window (input assistance function)
5 ALT+P Display the previous search from the search history
6 Alt+N Display the next search from your search history

that's all