Axiom for Splunk

Axiom for Splunk connects the datasets your team keeps in Axiom to the Splunk searches, dashboards, and investigations you already use. It's a query bridge, not an index-replication tool: filtering, projection, and aggregation run in Axiom, and Splunk receives tabular rows you shape with normal SPL. The app adds custom SPL commands so Splunk users can discover Axiom datasets and fields, sample recent events, run Axiom-backed searches with Splunk-like syntax, push common stats and timechart aggregations down into Axiom, look up Axiom context for existing Splunk events, and run raw APL when they need the full Axiom Processing Language. It's built for Splunk administrators, SREs, security analysts, and developers who want to query Axiom data from Splunk without moving or duplicating it. Authentication uses a shared Axiom API token stored in Splunk's encrypted credential store, and dataset visibility follows that token. Query commands honor the Splunk time picker by default, so a "Last 15 minutes" search maps to the same Axiom time window. The best searches push the expensive filtering and aggregation into Axiom, return a focused result set, then use SPL for tables, charts, dashboards, saved searches, and alerts.