Splunk connection

Splunk is a software platform that lets users search, analyze and visualize machine data from multiple sources to gain insights for security, IT operations and business analytics. This connection can be used only in StreamSets flows.

Create a connection to Splunk

To create a connection to use in StreamSets flows, you need the following details:

  • Splunk API endpoint: The Splunk API endpoint URL. For example, https://server.example.com:1234.
  • Use proxy: Enables using an HTTP proxy to connect to the system. This is optional. Depending on its setup, a server proxy can provide load balancing, increased security, and privacy. The server proxy settings are independent of the authentication credentials and the personal or shared credentials selection. The server proxy settings cannot be stored in a vault.
    • Proxy URI: The proxy server endpoint.
    • The Username and Password: The username and password to access the endpoint.

Credentials

  • Splunk token: The Splunk HTTP event collector token.

Learn more