Splunk SPL Zed Extension

Language support for Splunk Search Processing Language (SPL) files.

Features

• File types: .spl, .splunk, .splunk-spl
• Tree-sitter grammar supplied by the sibling tree-sitter-splunk project
• Highlight queries for commands, functions, fields, literals, operators, macros, and structural clauses
• Bracket matching, indentation, outline, syntax scopes, and Vim text objects

Local Installation

In Zed, run zed: install dev extension and select this repository. After changes, reinstall the dev extension. Inspect Zed.log with zed: open log, or launch zed --foreground for verbose diagnostics.

The grammar currently uses ../tree-sitter-splunk through a local file:// URL. Zed resolves the configured Git revision, so create the initial grammar commit before installing the dev extension; uncommitted grammar changes are not loaded through rev = "main".

Development

Validate grammar changes in the sibling project:

cd ../tree-sitter-splunk
bun install
bun run check

Validate Zed query and editor behavior by reinstalling this repository as a dev extension. When publishing, replace the local grammar URL with the public HTTPS grammar repository and pin [grammars.splunk].rev to a tested commit SHA.

References

• https://zed.dev/docs/extensions/languages
• https://zed.dev/docs/extensions/developing-extensions
• https://help.splunk.com/en/splunk-enterprise/search/spl-search-reference