Splunk

This app integrates with Splunk to update data on the device, in addition to investigate and ingestion actions

Supported Actions

• test connectivity: Validate the asset configuration for connectivity. This action logs into the device to check the connection and credentials
• get host events: Get events pertaining to a host that have occurred in the last 'N' days
• on poll: Ingest logs from the Splunk instance
• run query: Run a search query on the Splunk device. Please escape any quotes that are part of the query string
• update event: Update a notable event
• post data: Post data to Splunk