Spl To Apl

If you're migrating from Splunk or translating existing SPL queries to Axiom's APL, this handles the syntax conversion and conceptual shifts. It maps common commands like stats to summarize and eval to extend, covers the critical differences (time ranges are explicit in APL, cidrmatch args are reversed, type casting matters for numeric comparisons), and includes real patterns for error rates, joins, and subsearches. The translation isn't always one to one, especially for transaction commands which need reconstruction with summarize, but the reference tables are thorough. Saves you from constantly context switching between documentation when you already know what you want in SPL.

Install to Claude Code

npx -y skills add axiomhq/skills --skill spl-to-apl --agent claude-code