Splunk Enterprise
by Splunk (Cisco)
Machine data platform (Splunk Enterprise and Splunk Cloud Platform) for searching, indexing and alerting on logs and events.
- Category
- IT, Security & Monitoring
- Type
- Log management
- Interface
- REST API
- Built with
- Connect Any API
- Credentials
- Username and password, Access token
02Data
What you can sync.
- Search results
- Saved searches
- Indexes
- Alerts
- Audit events
Join Splunk Enterprise search results with assets and people data to see risk by team, system and owner.
Need more? Name any other Splunk Enterprise data the API returns, and the AI adds it to the connector.
03Credentials
Credentials you will need.
- A username and password
- An access token
Splunk Enterprise uses a username and password or an access token. You add the credentials once, when the AI asks for them, and it tells you where to create them in Splunk (Cisco) if you need help.
04How it works
How it works in DataMind.
-
Pick Splunk Enterprise.
Open Lake, pick Splunk Enterprise in the source picker and name the connection. Connect Any API opens with a ready prompt that points the AI at the Splunk Enterprise API docs.
-
Answer a few questions.
The AI reads the Splunk Enterprise documentation, then asks which credentials you will use, which data to sync (for example search results and saved searches), whether you want a one-time load or a recurring sync, and which accounts or filters apply.
-
Your data lands in Lake.
It builds the connector, tests it and shows you sample rows. Then Splunk Enterprise data loads into your Lake on your schedule, ready for the Warehouse, DataPrism BI and AI Minds.
