Splunk data source
Splunk is a data and log analysis tool used for monitoring and troubleshooting a wide variety of systems. The Splunk data source allows you to query and visualize Splunk data with Search Processing Language (SPL) or a visual SPL editor.
Note
The Splunk data source is an Enterprise plugin. It’s available with a Grafana Cloud Pro or Advanced plan and Grafana Enterprise. For installation instructions, refer to Install the Splunk data source.
Supported features
Requirements
The Splunk data source has the following requirements:
- A Splunk account.
- A Grafana Cloud Pro or Advanced plan or an activated self-managed Grafana Enterprise license.
- Grafana version 11.6.7 or later.
- Port 8089 enabled on your Splunk instance.
Get started
The following documents help you set up and use the Splunk data source:
- Install the Splunk data source
- Get started with Splunk on Grafana Cloud
- Configure the Splunk data source
- Splunk query editor
- Splunk template variables
- Annotations
- Alerting
- Troubleshoot the Splunk data source
Additional features
After configuring the data source, you can:
- Use Explore to query Splunk data without building a dashboard.
- Add Annotations to overlay Splunk alerts or events on graphs.
- Configure and use template variables for dynamic dashboards.
- Add Transformations to manipulate query results.
- Set up Alerting rules based on Splunk queries.
Pre-built dashboards
The Splunk data source includes three pre-built dashboards for monitoring Kubernetes environments. These dashboards require Kubernetes data ingested into Splunk via the Splunk OpenTelemetry Collector for Kubernetes.
- Kubernetes overview: Summary statistics on cluster capacity, resource utilization, and pod state. Filter by cluster name and namespace.
- Node overview: Summary statistics for nodes in the cluster. Filter by node and cluster name.
- Pod overview: Summary statistics for Pods in the cluster. Filter by Pod and cluster name.
To import a dashboard, navigate to Connections > Data sources > Splunk, click the Dashboards tab, and click Import.
Note
When opening a dashboard, ensure you select an appropriate metrics and events index. These default to
em_metricsandmainrespectively.
Plugin updates
Always ensure that your plugin version is up-to-date so you have access to all current features and improvements. Navigate to Plugins and data > Plugins to check for updates. Grafana recommends upgrading to the latest Grafana version, and this applies to plugins as well.
Note
Plugins are automatically updated in Grafana Cloud.
