The Splunk Gallery

The community supported collection of Splunk Artifacts, Media, and Stories

This website is not operated by or affiliated with Splunk, Inc.


| windbag is an undocumented generating command in your Splunk instance.

This command, created by Johnvey Hwang, came about to help ensure that engineering teams had completed their internationalization projects correctly. If you run the command you will see it create 100 events spanning the last 30 or so hours, most of them with a rough translation of the phrase “I can eat glass, it does not hurt me”. While today, this is a harmless command, showing some interesting edge cases being handled in Splunk for host=HAL_9000 source=SpaceOdyssey, during the i18n project it often caused crashes in development builds and in doing so helped find a number of places where UTF-8 wasn’t finished being implemented.

Today this command can sometimes still be useful since unlike | makeresults, windbag actually generates events as opposed to results, so can help with certain mockups and tests requiring the same.


24 February 2019
Last Modified:
24 February 2019

Do you have more information, corrections, and/or media related to this or other Splunk stories? Help us build the Splunk Gallery!