SPQL

https://splunk.box.com/s/9k6jdfck5s86oq0kwcyhiagh2ue9ezws

SHOW schemas 
FROM splunk

SELECT * 
FROM splunk.saved_search."top five sourcetypes"

SELECT *
FROM splunk.search."search index=_internal sourcetype=splunkd_ui_access | head 100 | fields method, spent, status" 
ORDER BY spent DESC

SELECT * FROM splunk.saved_search."top five sourcetypes"
CROSS JOIN mongo.test.restaurants 
CROSS JOIN jmx.current."java.lang:type=runtime"
LIMIT 100

SELECT * 
FROM splunk.search."search index=_internal sourcetype=splunkd_ui_access | head 100 | fields method, spent, status" 


==========================================

#SHOW tables 
#FROM splunk."data_model:internal_server"

#SELECT result_count, search, _time 
#FROM splunk.search."| history | head 123" 
#SHOW columns 
#FROM splunk."data_model:internal_server".quota