Skip to content

Splunk ​

Search, index, and analyze machine data with the Splunk REST API.

DetailValue
CategoryMonitoring
Base URLhttps://splunk.example.com:8089
AuthenticationBearer Token
Endpoints8
Connector keysplunk

Using Splunk in a workflow ​

  1. Go to Connections and click New Connection.
  2. Pick Splunk from the marketplace.
  3. Enter your credentials (see Authentication above for what's expected).
  4. In a workflow, drop an API Call node and select this connection.
  5. Pick the operation you need from the Operation dropdown — see the table below.

Available Endpoints ​

EndpointSummary
POST /services/search/jobsCreate a search job
GET /services/search/jobs/{search_id}Get search job status
GET /services/search/jobs/{search_id}/resultsGet search results
POST /services/search/jobs/oneshotRun oneshot search
POST /services/receivers/simpleIndex an event
GET /services/data/indexesList indexes
GET /services/saved/searchesList saved searches
GET /services/server/infoGet server info

Each endpoint has its own page with parameter details, an example API Call node configuration, and the response shape.