Splunk

This app integrates with Splunk to update data on the device, in addition to investigate and ingestion actionsBuilt by Splunk LLC

Default Version 4.0.0

August 7, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0

Rating

(3)

Support

Splunk Supported

Ranking

#2 in SIEM

This app integrates with Splunk to update data on the device, in addition to investigate and ingestion actions

Supported actions

test connectivity: test connectivity
get host events: Get events pertaining to a host that have occurred in the last 'N' days
make request: make request
on poll: on poll
post data: Post data to Splunk
run query: Run a search query on the Splunk device. Please escape any quotes that are part of the query string
update event: Update a notable event