Querymason
SPL Query Builder for Splunk
Free · In‑App Purchases
New in Pro: learning mode explains your query pipe by pipe. Build production-ready SPL for Splunk across 20+ data sources in seconds, free.
Querymason is the SPL query builder for Splunk professionals who need to work fast. Whether you're in the middle of an incident response, running threat hunts, or just tired of rewriting the same queries from scratch — Querymason puts every search pattern one tap away.
BUILD QUERIES INSTANTLY
Choose a data source, select a query type, fill in your parameters, and get a complete, production-ready SPL query — syntax-highlighted and ready to paste into Splunk.
20+ DATA SOURCE PROFILES
• Network: Router and switch syslog, network access control, next-generation firewalls, SolarWinds, Generic Firewall
• Server: Linux Syslog, Windows WEC, Windows Sysmon, CrowdStrike
• Data Center: VMware ESXi, VMware vCenter, NetApp, Pure Storage
• Applications: Apache HTTP, Microsoft IIS, Nginx, Okta, Microsoft 365
QUERY LIBRARY
40 pre-built, production-tested SPL templates covering the most common SOC and IT operations use cases. Browse, filter, and copy in one tap. The free SOC Starter pack adds 12 more, ready to install from Packs.
SHARE WITH YOUR TEAM
Export your custom templates to share with teammates and import theirs. Templates you already have are skipped.
QUERY HISTORY & PRESETS
Never rewrite the same query twice. Querymason keeps your last 75 searches and lets you save unlimited named presets for one-tap recall.
SPL ADVISOR
A built-in advisor reviews your query and suggests performance improvements and command explanations. It works offline, and nothing leaves your device.
PRO — ONE-TIME PURCHASE
Everything above is free. One optional in-app purchase unlocks Pro:
• Learning mode: an Explain switch on the query result walks through each pipe of your query in plain language, with short practice questions to test yourself
• Sector packs built into the app: Threat Hunting (25 queries), Cloud Audit (18) and IT Ops Health (15)
• Future Pro features at no extra cost
Pay once. No subscription, no account. Restore Purchase is in the Pro screen.
DESIGNED FOR THE FIELD
A distraction-free dark interface built for long shifts. Syntax highlighting, copy-to-clipboard, and a clean 4-step wizard mean fewer mistakes under pressure.
PRIVACY FIRST
Querymason works entirely on-device. No telemetry, no accounts, no network calls. Purchases are handled entirely by Apple. Your queries never leave your device.
Querymason is an independent product. It is not affiliated with, endorsed by or sponsored by Splunk Inc. Splunk® is a registered trademark of Splunk Inc.
Ratings & Reviews
- This app hasn’t received enough ratings or reviews to display an overview.
Splunk Query Studio is now Querymason. Same app with a new name: your history, presets and templates stay as they are.
• New Pro upgrade, a one-time purchase: learning mode explains each part of your query in plain language, with practice questions
• Pro sector packs: Threat Hunting, Cloud Audit and IT Ops Health
• New free SOC Starter pack with 12 ready-to-use queries
• Export your custom query templates to share with your team
• Importing a template file now skips duplicates you already have
• Clear messages when an imported file is too large (10 MB max) or can't be read
• More reliable copy-to-clipboard in the SPL Advisor
• Everything that was free is still free
The developer, Souriya Vongchanh, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .
Data Not Collected
The developer does not collect any data from this app.
Accessibility
The developer has not yet indicated which accessibility features this app supports. Learn More
Information
- Seller
- Souriya Vongchanh
- Size
- 3.2 MB
- Category
- Productivity
- Compatibility
Requires iOS 16.0 or later.
- iPhone
Requires iOS 16.0 or later. - iPad
Requires iPadOS 16.0 or later. - Mac
Requires macOS 10.15 or later. - Apple Vision
Requires visionOS 1.0 or later.
- iPhone
- Languages
- English
- Age Rating
4+
- 4+
- In-App Purchases
Yes
- Querymason Pro $4.99
- Copyright
- © 2026 Souri Apps LLC