How-To Guides
Integration Guides

Splunk Integration Guide

9min

Review the following guide for setting up an integration between Litmus Edge and Splunk through HTTP.

Before You Begin

You must have a Splunk account.

Step 1: Add Device



Step 2: Add Tag



Step 3: Retrieve Splunk Parameters

Log in to Splunk, navigate to the Splunk - Sublime Text page, and copy the following values:

  • Input line
  • Services line
  • Token line

Step 4: Add the Splunk Connector

Follow the steps to Add a Connector and select the Splunk provider.

Configure the following parameters.

  • Name: Enter a name for the connector.
  • Hostname: Paste the Input line copied in Step 3.
  • Port: Leave the default value of 8088.
  • Use SSL: Make sure the check box is selected.
  • Endpoint: Paste the Services line copied in Step 3.
  • Token: Paste the Token line copied in Step 3.
  • Throttling Limit: The maximum number of messages per second to be processed. The default value is zero, which means that there is no limit.
  • Persistent storage: When enabled, this will cause messages to undergo a store-and-forward procedure. Messages will be stored within Litmus Edge when cloud providers are online.
  • Queue Mode: Select the queue mode as lifo (last in first out) or fifo (first in first out). Selecting lifo means that the last data entry is processed first, and selecting fifo means the first data entry is processed first.

Step 5: Enable the Connector

After adding the connector, click the toggle in the connector tile to enable it.

Toggle to enable connector
Toggle to enable connector


If you see a Failed status, you can review the Connector Logs and relevant error messages.

Step 6: Create Topics for Connector

You will now need to import the tags created in Step 2 as topics for the Splunk connector. The topic will be created as outbound topics.



After adding all required topics, navigate to the Integration overview page and ensure the connector is not disabled and still shows a CONNECTED status.

Step 7: Enable Topics

To enable the topic, return to the Topics tab and click the Enable all topics icon.

Enable all topics icon
Enable all topics icon


Step 8: Verify Data Connection in Splunk

To verify the data connection in Splunk:

  1. Log in to Splunk.
  2. Open the Splunk HTTP Event Collector and refresh the data.
  3. Scroll down to the Activity section and hover over the data to view Valid Requests.
  4. In the Request Overview section, hover over the Valid Request Count and click the Refresh icon.
  5. Verify that the values for Event Count and Valid Request Count update.