SPL Library

The SPL Library provides a modern interface for storing, searching, and managing Splunk queries within the Splunk environment. The application features a dark card-based user interface that displays saved queries in an organized, searchable format. Users can perform full-text searches across query titles, descriptions, tags, and SPL content, and apply category filters to narrow results by Security, Network, Application, Database, Performance, or Other classifications. Each query card can be expanded to view the complete SPL code, copied to the clipboard with one click, or executed directly in the Splunk Search app. The application stores all queries in the Splunk KV Store, ensuring compatibility with Splunk Cloud deployments. Query management capabilities include adding, editing, and deleting entries through a modal form interface with tag assignment functionality. The application automatically seeds four example queries on initial deployment and records metadata including author information and creation/modification timestamps for each stored query. The architecture avoids custom REST handlers, external dependencies, and inline JavaScript, relying exclusively on Splunk-provided libraries and standard KV Store mechanisms for data persistence.