The Splunk connector links your Splunk deployment to Generate so you can search and read events and logs using natural language.

What You Can Do

  • Search events — Run searches across your Splunk indexes
  • Read logs — Pull and summarize log data
  • Investigate — Explore patterns and anomalies in your machine data

Connecting Splunk

1

Open the Connectors modal

Open Connectors and select the Apps tab. See Setting Up a Connector for the generic mechanics.
2

Find Splunk and click Connect

Locate Splunk in the connector catalog and click Connect.
3

Enter your API token

Provide a Splunk API token — either a HEC token or a REST token — along with your Splunk endpoint so Generate can authenticate.
Splunk API token entry
4

Confirm the connection

Save and verify the connector shows as Connected.
The indexes and events available in Generate depend on the roles and permissions tied to your Splunk token.