Plugins 〉Splunk
Splunk
Instantly visualize Splunk data in Grafana
The Splunk data source plugin is the easiest way to pull Splunk data directly into Grafana dashboards.
- Visualize it either in isolation (one database) or blend it with other data sources.
- Discover correlations and covariances across all your data in minutes.
Grafana Cloud Pro
- $25 / user / month and includes a free trial for new users
- Available with a Grafana Cloud Pro plan
- Access to 1 Enterprise plugin
- Fully managed service (not available to self-manage)
Grafana Cloud Advanced / Grafana Enterprise
- Available with a Grafana Cloud Advanced plan or Grafana Enterprise license
- Access to all Enterprise plugins
- Run fully managed or self-manage on your own infrastructure
Installing Splunk on Grafana Cloud:
Installing plugins on a Grafana Cloud instance is a one-click install; same with updates. Cool, right?
Note that it could take up to 1 minute to see the plugin show up in your Grafana.
Installing plugins on a Grafana Cloud instance is a one-click install; same with updates. Cool, right?
Note that it could take up to 1 minute to see the plugin show up in your Grafana.
Installing plugins on a Grafana Cloud instance is a one-click install; same with updates. Cool, right?
Note that it could take up to 1 minute to see the plugin show up in your Grafana.
Installing plugins on a Grafana Cloud instance is a one-click install; same with updates. Cool, right?
Note that it could take up to 1 minute to see the plugin show up in your Grafana.
Installing plugins on a Grafana Cloud instance is a one-click install; same with updates. Cool, right?
Note that it could take up to 1 minute to see the plugin show up in your Grafana.
For more information, visit the docs on plugin installation.
Installing on a local Grafana:
For local instances, plugins are installed and updated via a simple CLI command. Plugins are not updated automatically, however you will be notified when updates are available right within your Grafana.
1. Install the Data Source
Use the grafana-cli tool to install Splunk from the commandline:
grafana-cli plugins install
The plugin will be installed into your grafana plugins directory; the default is /var/lib/grafana/plugins. More information on the cli tool.
Alternatively, you can manually download the .zip file for your architecture below and unpack it into your grafana plugins directory.
Alternatively, you can manually download the .zip file and unpack it into your grafana plugins directory.
2. Configure the Data Source
Accessed from the Grafana main menu, newly installed data sources can be added immediately within the Data Sources section.
Next, click the Add data source button in the upper right. The data source will be available for selection in the Type select box.
To see a list of installed data sources, click the Plugins item in the main menu. Both core data sources and installed data sources will appear.
Change Log
4.2.0
Minor Changes
- Update the UI of the config page and clean up the documentation
4.1.10
Patch Changes
- Prevent unnecessary query run when query editor is rendered
[4.1.9] - 2023-05-04
- Bug Fix - Fixed issue with "No data" returned when "Poll result" or "Preview mode" were enabled
[4.1.8] - 2023-05-03
- Chore - Backend binaries are now compiled with golang 1.20.4
[4.1.7] - 2023-04-14
- Bug Fix - Fixed a bug where annotation queries didn't pass the namespace value
- Chore - Backend binaries are now compiled with golang 1.20.3
[4.1.6] - 2023-03-13
- Bug Fix - Fixed a "Data source not found" error
[4.1.5] - 2023-03-10
- Bug Fix - Fixed a bug when request errors were not shown on the panel
[4.1.4] - 2023-03-08
- Bug Fix - Fixed a bug when plugin was producing errors when requesting a big amount of data
[4.1.3] - 2023-02-24
- Bug Fix - Fixed a bug where the plugin failed to execute queries in Grafana version 9.4.0 and above
[4.1.2] - 2023-02-22
- Fix - query request using old datasource string format
[4.1.1] - 2023-02-21
- Fixed issue with appending nil frame
[4.1.0] - 2023-01-04
- Fixed wrong color theme on annotation editor input fields
- Migrate angular annotation editor to react
[4.0.6] - 2022-12-15
Chore Backend binaries are now compiled with the latest go version (1.19.4)
Chore Grafana dependencies are updated to latest version
Chore Add spellcheck + fix typos
Updated datasource instance init
[4.0.5] - 2022-10-28
- Updated datasource instance init
[4.0.4] - 2022-10-28
- Updated postman collection and contributing guide how to use
[4.0.3] - 2022-09-22
- Fixed a bug where the first time loading a query would sometimes error. This was due to a sending a nil response to httputil.DumpResponse
[4.0.2] - 2022-09-21
- Fixed a bug where health check was failing due to incorrect response format
[4.0.1] - 2022-08-25
- Enhanced request and response debug logging
[4.0.0] - 2022-07-12
- Token authentication method added
- BREAKING CHANGE: Session key clustering strategy / authentication method removed
[3.1.0-beta.1] - 2022-06-12
- Added support for HTTP logger
- Added support for multiple data links
[3.0.2] - 2022-04-20
- Handle null namespace values
[3.0.1] - 2022-03-29
- New builds with go 1.18 to address CVE-2022-24921
[3.0.0] - 2021-01-18
- Minimum supported Grafana version is now set to v8.2.0
- Support sample ratio in explore view URLs
- Fixes an issue with data link support in dashboard panels
[2.2.3] - 2021-12-17
- Enterprise license check update
[2.2.2] - 2021-12-14
- Values for template variables can now be numbers.
[2.2.1] - 2021-11-23
- Fixed an issue with escaping wildcards in queries with template variables
- Fixed an issue with applying defaults for Preview Mode and event sampling
[2.2.0] - 2021-11-01
- Added support for multi-value fields
- Added support for event sampling
- Added support for navigating from Prometheus metrics to Splunk logs in Explore
- Renamed Stream Mode to Preview Mode
- Fixed an issue with Preview Mode that prevented the display of partial results
- Prevent internal field filters from being applied to dashboard variable queries
- Improved query processing performance by 38 percent and reduced memory usage by 50 percent
- Fixed invalid output in
mstats
queries
[2.1.7] - 2021-09-08
- Fixed issue that would filter internal fields even if internal field filtering was disabled
[2.1.6] - 2021-08-04
- Documentation update
[2.1.5] - 2021-07-30
- Fixed issue where alerting queries don't filter out internal fields
- Results that return data in multiple different types are typed as string
[2.1.4] - 2021-06-02
Bug Fixes
- #278: 'No data' displayed for Grafana 8
[2.1.3] - 2021-05-27
Bug Fixes
- #265: Errors returned when in polling mode cause the driver to crash
- #226: Filter fields prefixed with _ if filtration is on
[2.1.2] - 2021-4-12
- Chore: Update SDK
[2.1.1] - 2020-04-06
Bug Fixes
- #254: To template variables properly, splunk should be passing in scopedvars into the templating engine
- #224: Splunk executes queries that have hide = true (the eye icon)
- #222: Get the splunk changelog to publish to GCOM by upgrading to the "next" toolkit"
- #246: Splunk should not refresh the query immediately after every pause in typing/editing the query
- #239: Enable E2E tests
- #215: "Skip TLS Verify" option not working
- #213: "Post forbidden" error after upgrading to 2.0.4
- #208: Update to new SDK to support individual plugin licensing
[2.1.0] - 2020-01-25
Bug fixes
- #212: Return all indexes
- #235: Better handle edge cases
- #236: Better handle an out-of-bounds error
Enhancements
- #187: Update README
- #210: Link from logs to traces using data links or derived fields
Known issues
- You must use // around regular expressions in the datalinks configuration or any plugin health check will fail. When a regular expression is optional, use an empty
//
.
[2.0.5] - 2020-12-11
Bug fixes
- #214: Time filters not working for Splunk queries in dashboard variables
- #210,#209: Plugin crashes a lot while trying out queries
[2.0.4] - 2020-10-27
- Fix: If session key is empty, still valid
- Enhancement: When using splunk in clustered mode, allow user to revert to 'basic auth'
[2.0.3] - 2020-10-19
- Fix for proxy settings, now will recognize standard "http_proxy" "https_proxy" and "no_proxy" environment variables
- TLS Skip Verification now performs verification when not checked
[2.0.2] - 2020-09-10
- Fix for time range issue #184
[2.0.1] - 2020-06-01
Issues Resolved
[2.0.0] - 2020-05-22
- Rewritten as a backend plugin with native alerting support
- Removed distinction between table & time_series results
- Signed version for grafana 7.x
[1.5.0] - 2020-05-17
- Signed release for Grafana 7.x
[1.4.1] - 2020-01-10
Fixed
- "Unbalanced quotes" error when using variables in some scenarios
- Logs panel does not show data in logs format
- Query returns only first 100 points
[1.4.0] - 2019-11-26
Added
- Explore logs integration
[1.3.4] - 2019-11-22
Fixed
- Plugin failed with "Unexpected token <" error
[1.3.3] - 2019-11-21
Fixed
- Query in template variable with no result data is running forever #82
[1.3.2] - 2019-10-03
Fixed
- Plugin failed in Grafana 6.4 with error "Unexpected token <"
[1.3.1] - 2019-10-01
Fixed
- Streaming support in Grafana 6.4 (incompatible with previous version)
[1.3.0] - 2019-07-30
Added
- Variable query editor with namespace support, #63
Fixed
- Streaming support in Grafana 6.3
[1.2.2] - 2019-06-29
Fixed
- Bug with semicolon in query, #57
- Variable expansion when concatenated with literal string, #58
- Variable expansion when there is a period character in the name, #59
[1.2.1] - 2019-03-18
Fixed
[1.2.0] - 2019-02-01
Added
Fixed
- Table panel is empty after update to v1.1.0, #34
- Panel is not refreshing on leaving search field, #40
[1.1.0] - 2018-11-14
Added
- Multi-value template variables support, #2
- Use time range for variable queries if Refresh option set to On Time Range Change
- Option for variables search mode in datasource config (fast/smart/verbose)