Default Version 4.0.0
August 4, 2026
Elasticsearch
This app integrates with an Elasticsearch installation to implement ingestion and investigative actionsBuilt by Splunk LLC
Compatibility
SOAR On-Prem, SOAR Cloud
Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4, 6.3, 6.2, 6.1, 6.0, 5.5, 5.4
Rating
0(0)
Log in to rate this app
Support
Splunk Supported
Ranking
#4 in SIEM
This app integrates with an Elasticsearch installation to implement ingestion and investigative actions
Supported actions
- test connectivity: Validate the asset configuration for connectivity. This action logs into the device to check the connection and credentials
- get config: Returns the list of indices and their information currently configured on the ElasticSearch instance
- run query: Run a search query on the Elasticsearch installation. Please escape any quotes that are part of the query string
- on poll: Run a query in elasticsearch and ingest the results
Categories
SIEM
Created by
Splunk LLC
Source code
Type
connector
Downloads
32,558
Splunk Answers
Resources
Log in to report this app listing.