# Basic Searching

Splunk uses its **Search Processing Language (SPL)** to query data stored in indexes. A basic search allows you to:

* Retrieve events from specific indexes.
* Filter results based on keywords or fields.
* Analyze data using commands and visualizations.

### Some important indexes for trouble shooting

#### Internal access index

```
index=_internal

```

Search Internal Logs by Component

* `source` or `sourcetype`

`Here we can define the source of the logs.`

**Search Logs**:

```
index=_internal source=*scheduler.log

```

**Indexer Logs**:

```
index=_internal source=*splunkd.log

```

<figure><img src="https://3155059101-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Ftpxp8dhlubc3j58Iygn5%2Fuploads%2Ffis6J4ZwfS3mQDjDco0g%2Fimage.png?alt=media&#x26;token=a01344e0-5c6d-429e-abce-51bd64cf6efb" alt=""><figcaption></figcaption></figure>

**We can also define the search on our ondemanded time basis as well as realtime too.**

<figure><img src="https://3155059101-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Ftpxp8dhlubc3j58Iygn5%2Fuploads%2F3tqStK3tp47Zd9Kd5UKJ%2Fimage.png?alt=media&#x26;token=780b2757-7e95-497b-9ce0-9111b54d413d" alt=""><figcaption></figcaption></figure>
