Altair® Panopticon

 

Creating Splunk Input Data Source

The Splunk connector allows the retrieval of data from a Splunk instance.

Steps:

1.     In the New Data Source page, select Input > Splunk in the Connector drop-down list.

 

2.      Enter the connection details including:

Property

Description

Host

Splunk host address.

Port

Splunk host port. Default is 8089.

User Id

The user Id that will be used to connect to the Splunk service.

Password

The password that will be used to connect to the Splunk service.

 

3.     Select the Search Type:

·         Manual

Proceed to step 6 to define a new search query.

·         Saved Search

Allows you to select in the Saved Search drop-down list.

4.     Click  to populate the Application drop-down list and select one.

5.     Select whether the parameters should be automatically enclosed in quotes by selecting the Enclose parameters in quotes check box.

6.     Enter a Search Query.

7.     Click . The new data source is added in the Data Sources list.