Splunk

The Splunk connector allows the retrieval of data from a running Splunk instance.

Using Splunk

1. When creating a new data table, select Splunk from the Connect to data dialog. The Splunk Connection dialog is displayed:

2. Update the Connection Details for the Splunk instance as appropriate (Host, Port, Username and Password).

3. Select the Application.

4. Select either a Saved Search from the listing, or Manual and define a new search query.

5. Select whether the parameters should be automatically enclosed in quotes by checking the Enclose parameters in quotes box.

6. Change the required Time zone (assuming data is stored in UTC).

7. Click OK to execute the Splunk data request. The source data is returned in the Edit Data Table view, with the fields displayed in the Data Source Preview.