SPL to APL Translator
Converts Splunk SPL queries into Axiom APL equivalents with mappings and syntax fixes
- Repository
- openclaw/clawhub
- Stars
- 9,546
- Licence
- MIT
- Files
- 11 files
What it does
Once installed, the agent knows how Splunk's search language (SPL) maps onto Axiom's query language (APL). When you ask it to convert a Splunk search, it uses command, function and syntax mappings to produce an APL query, and it points out differences such as explicit time ranges, reversed cidrmatch arguments and the need to cast string fields before numeric comparisons. It is a reference-driven translator; it does not itself connect to Splunk or Axiom.
Great for
- Engineers migrating dashboards or alerts from Splunk to Axiom
- Analysts who know SPL and need APL equivalents quickly
- Teams learning APL patterns through side-by-side examples
Skip it if
- Translating into or from query languages other than SPL and APL, since the mappings cover only these two
- Production migrations without review: the bundled tests were validated against sample data, and some SPL constructs such as transaction have no direct equivalent and need manual rework
Try asking
- “Convert this Splunk search to APL: index=logs status>=500 | stats count by host”
- “How do I write the SPL timechart span=5m count by status in Axiom?”
- “Translate my rex extraction for user=(?<username>\w+) into APL parse syntax”
- “What is the APL equivalent of SPL transaction session_id maxspan=30m?”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 11 original files, the MIT licence and an attribution note.
spl-to-apl.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip spl-to-apl.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip spl-to-apl.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Always state the time range you want, because SPL time pickers do not carry over to APL and the skill adds an explicit where clause.
- Check the translated query against your real dataset, since field types (for example string status values) can change results.
- For complex searches, ask the agent to explain each mapping so you can verify the join and summarize logic.
What's inside
- .meta/2026-01-28-schema-read-findings.md
- .meta/cases.ts
- .meta/DESIGN-NOTES.md
- .meta/spl-to-apl.eval.ts
- README.md
- reference/command-mapping.md
- reference/dataset-schemas.md
- reference/examples.md
- reference/function-mapping.md
- SKILL.md
- tests/test-queries.md
Redistributed unmodified from openclaw/clawhub under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.