Splunk ​
Search, index, and analyze machine data with the Splunk REST API.
| Detail | Value |
|---|---|
| Category | Monitoring |
| Base URL | https://splunk.example.com:8089 |
| Authentication | Bearer Token |
| Endpoints | 8 |
| Connector key | splunk |
Using Splunk in a workflow ​
- Go to Connections and click New Connection.
- Pick Splunk from the marketplace.
- Enter your credentials (see Authentication above for what's expected).
- In a workflow, drop an API Call node and select this connection.
- Pick the operation you need from the Operation dropdown — see the table below.
Available Endpoints ​
| Endpoint | Summary |
|---|---|
| POST /services/search/jobs | Create a search job |
| GET /services/search/jobs/{search_id} | Get search job status |
| GET /services/search/jobs/{search_id}/results | Get search results |
| POST /services/search/jobs/oneshot | Run oneshot search |
| POST /services/receivers/simple | Index an event |
| GET /services/data/indexes | List indexes |
| GET /services/saved/searches | List saved searches |
| GET /services/server/info | Get server info |
Each endpoint has its own page with parameter details, an example
API Callnode configuration, and the response shape.