# Querymason — SPL Query Builder for Splunk > SPL Query Builder for Splunk (iPhone/iPad app by Souriya Vongchanh.) - Source: https://appshunter.io/ios/app/querymason/id6759875120 (this page in markdown: same URL + `.md`) - Developer: [Souriya Vongchanh](https://appshunter.io/developer/1870362486) - Category: Productivity, Utilities - Price: Free with in-app purchases - Age rating: 4+ - Requires: iOS 16.0 · 3 MB - Languages: American English - Released: 2026-03-25 - Data updated: 2026-10-28 ## What is Querymason? Querymason is the SPL query builder for Splunk professionals who need to work fast. Whether you're in the middle of an incident response, running threat hunts, or just tired of rewriting the same queries from scratch — Querymason puts every search pattern one tap away. BUILD QUERIES INSTANTLY Choose a data source, select a query type, fill in your parameters, and get a complete, production-ready SPL query — syntax-highlighted and ready to paste into Splunk. 20+ DATA SOURCE PROFILES • Network: Router and switch syslog, network access control, next-generation firewalls, SolarWinds, Generic Firewall • Server: Linux Syslog, Windows WEC, Windows Sysmon, CrowdStrike • Data Center: VMware ESXi, VMware vCenter, NetApp, Pure Storage • Applications: Apache HTTP, Microsoft IIS, Nginx, Okta, Microsoft 365 QUERY LIBRARY 40 pre-built, production-tested SPL templates covering the most common SOC and IT operations use cases. Browse, filter, and copy in one tap. The free SOC Starter pack adds 12 more, ready to install from Packs. SHARE WITH YOUR TEAM Export your custom templates to share with teammates and import theirs. Templates you already have are skipped. QUERY HISTORY & PRESETS Never rewrite the same query twice. Querymason keeps your last 75 searches and lets you save unlimited named presets for one-tap recall. SPL ADVISOR A built-in advisor reviews your query and suggests performance improvements and command explanations. It works offline, and nothing leaves your device. PRO — ONE-TIME PURCHASE Everything above is free. One optional in-app purchase unlocks Pro: • Learning mode: an Explain switch on the query result walks through each pipe of your query in plain language, with short practice questions to test yourself • Sector packs built into the app: Threat Hunting (25 queries), Cloud Audit (18) and IT Ops Health (15) • Future Pro features at no extra cost Pay once. No subscription, no account. Restore Purchase is in the Pro screen. DESIGNED FOR THE FIELD A distraction-free dark interface built for long shifts. Syntax highlighting, copy-to-clipboard, and a clean 4-step wizard mean fewer mistakes under pressure. PRIVACY FIRST Querymason works entirely on-device. No telemetry, no accounts, no network calls. Purchases are handled entirely by Apple. Your queries never leave your device. Querymason is an independent product. It is not affiliated with, endorsed by or sponsored by Splunk Inc. Splunk® is a registered trademark of Splunk Inc. ## Pricing and in-app purchases Base price: Free. **One-time purchases** | Purchase | Price | Type | | --- | --- | --- | | Querymason Pro | $4.99 | one-time | ## Is Querymason safe? Not enough ratings yet to assess Querymason. ## Is Querymason legit? Querymason appears legitimate, with a few gaps. The AppsHunter Legitimacy Score for Querymason is 65 out of 100 points across 7 verification signals from App Store and developer data. ## Version history (last 2 releases) ### 1.11.0 — 2026-10-26 Splunk Query Studio is now Querymason. Same app with a new name: your history, presets and templates stay as they are. • New Pro upgrade, a one-time purchase: learning mode explains each part of your query in plain language, with practice questions • Pro sector packs: Threat Hunting, Cloud Audit and IT Ops Health • New free SOC Starter pack with 12 ready-to-use queries • Export your custom query templates to share with your team • Importing a template file now skips duplicates you already have • Clear messages when an imported file is too large (10 MB max) or can't be read • More reliable copy-to-clipboard in the SPL Advisor • Everything that was free is still free ### 1.10.1 — 2026-04-08 No release notes. ## Apps similar to Querymason | App | Rating | Price | Category | | --- | --- | --- | --- | | [Splunk Calculator](https://appshunter.io/ios/app/splunk-calculator/id6767674964) | — | Free | Productivity | | [John AI](https://appshunter.io/ios/app/john-ai/id6759395181) | — | Free | Productivity | | [Brand Prompt](https://appshunter.io/ios/app/brand-prompt/id6747673540) | 5.0 (4) | Free | Productivity | | [Prompt Designer](https://appshunter.io/ios/app/prompt-designer/id6757205688) | 5.0 (1) | Free | Productivity | | [Foothold: Interview Prep](https://appshunter.io/ios/app/foothold-interview-prep/id6756803555) | 5.0 (5) | Free | Productivity | | [RF calculator & Smith Chart](https://appshunter.io/ios/app/rf-calculator-and-smith-chart/id6757265018) | — | Free | Productivity | ## More apps by Souriya Vongchanh - [Shift Payroll Pro](https://appshunter.io/ios/app/shift-payroll-pro/id6758356126) - [QuikPDF Pro](https://appshunter.io/ios/app/quikpdf-pro/id6760364514) - [Splitzi: Split Bills & Trips](https://appshunter.io/ios/app/splitzi-split-bills-and-trips/id6760628181) - [MedicalForm AutoFill](https://appshunter.io/ios/app/medicalform-autofill/id6760768609) All apps by Souriya Vongchanh: https://appshunter.io/developer/1870362486 ## Related topics [splunk query studio](https://appshunter.io/ios/topics/splunk-query-studio) · [splunk observability cloud](https://appshunter.io/ios/topics/splunk-observability-cloud) · [splunk edge hub](https://appshunter.io/ios/topics/splunk-edge-hub) · [splunk on-call](https://appshunter.io/ios/topics/splunk-on-call) · [query](https://appshunter.io/ios/topics/query) · [splunk](https://appshunter.io/ios/topics/splunk) · [splunk mobile](https://appshunter.io/ios/topics/splunk-mobile) --- *Data collected daily from the US App Store and indexed by [AppsHunter](https://appshunter.io/). User reviews are verbatim App Store reviews. Ratings, prices and chart positions refresh continuously; this snapshot is from 2026-10-28.*