What You Can Do
- Search events — Run searches across your Splunk indexes
- Read logs — Pull and summarize log data
- Investigate — Explore patterns and anomalies in your machine data
Connecting Splunk
Open the Connectors modal
Open Connectors and select the Apps tab. See Setting Up a Connector for the generic mechanics.
Enter your API token
Provide a Splunk API token — either a HEC token or a REST token — along with your Splunk endpoint so Generate can authenticate.

The indexes and events available in Generate depend on the roles and permissions tied to your Splunk token.