Splunk Enterprise

Run SPL searches, read their results and dispatch saved searches through the Splunk REST API.

Scripts

Building blocks, if none of the projects above fit. Fork one, run it, or call it as a step inside your own flow.

The shape of the credential every script on this page expects.

Field	Type	Required	What it is
base_url	string	Yes	Management URL of the Splunk instance, scheme and port included, e.g. https://splunk.example.com:8089 (the management port is 8089 by default). The Windmill worker must trust its TLS certificate, which is self-signed on a default install.
token	string	Yes	Splunk authentication token, created under Settings > Tokens in Splunk Web. See https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/10.0/authenticate-into-the-splunk-platform-with-tokens/use-authentication-tokens