DomainTools App for Splunk v5.7: IrisQL search support

← All updates · July 31, 2026

Added

• IrisQL searches: The DomainTools App for Splunk now supports IrisQL, the text-based query language for Iris Investigate, through the dtirisinvestigate custom search command. Start each query with # IrisQL-1.0, use it in standard Splunk Search Processing Language (SPL), then pipe the results to later commands.

Documentation

• IrisQL queries in Splunk
• IrisQL field and operator reference
• Splunk integration release notes

Categories: Integrations, Splunk