DocumentationPluginsSplunk data source

Splunk data source

Splunk is a data and log analysis tool used for monitoring and troubleshooting a wide variety of systems. The Splunk data source allows you to query and visualize Splunk data with Search Processing Language (SPL) or a visual SPL editor.

The following will help you get started with Splunk and Grafana:

• Splunk Infrastructure Monitoring data source for Grafana
• Instantly visualize Splunk data in Grafana
• Configure the Splunk data source

Requirements

The Splunk data source has the following requirements:

• A Splunk account.
• Any free or paid Grafana Cloud plan or an activated on-prem Grafana Enterprise license. Contracted Cloud customers should refer to their agreement.
• Port 8089 enabled.

Known limitations

There are no known limitations.

Install the Splunk data source

To install the data source, see Grafana’s Splunk installation page. To configure the data source see Configure the Splunk data source. If you want to provision Splunk see Provision the Splunk data source.

Get the most out of the Splunk data source

After installing and configuring Splunk you can:

• Use the Splunk query editor
• Add Annotations
• Configure and use Templates and variables
• Add Transformations
• Set up Alerting