Configuring Splunk Accounts

In this article

Overview

You must create Splunk Basic Auth account to connect to data sources that you want to use in your Pipelines. You can configure your Splunk Basic Auth account in SnapLogic using either the Designer or the Manager.

Snap-Account Compatibility

Snaps in the Splunk Snap Pack work with Splunk Basic Auth account as per the following table.

Configuring Splunk Account Using SnapLogic Designer

Drag a Splunk Snap to the Canvas and click the Snap to open its settings. Click the Account tab. You can now either use an existing account or create a new one.

Selecting an existing account

SnapLogic organizes and displays all accounts to which you have access, sorting them by account type and location. To select an existing account:

  1. In the Account tab, click the list  icon to view the accounts to which you have access, and select the account that you want to use.

  2. Click  Save.

Creating an account

  1. In the Account tab, click Add Account below the Account Reference field.

  2. Select the Location in which you want to create the account, select the Account Type, and click Continue. The Add Account dialog window associated with the account type is displayed.

  3. Enter the required account details and click Apply to complete configuring the Splunk Basic Auth account.. For detailed guidance on how to provide information required for each account type, see Splunk Basic Auth account.

    Enter additional information on this account in the Notes field of the Info tab. This will help you–and other users–understand the purpose of the account, especially if there are multiple accounts of the same type.

 Configuring Splunk Basic Auth account Using SnapLogic Manager

You can use Manager to create accounts without associating them immediately with Pipelines.

Accounts in SnapLogic are associated with projects. You can use accounts created in other projects only if you have at least Read access to them.

  1. In the left pane, browse to the project in which you want to create the account and click  > Account  > Splunk, followed by the appropriate account type. The Create Account dialog associated with the selected account type is displayed.

  2. Repeat the steps numbered 3 through 5 in the Creating an account section.

    Avoid updating account credentials while Pipelines using that account are executing. Doing so may lead to unexpected results, including your account getting locked.

Account Encryption

Standard Encryption

If you are using Standard Encryption, the High sensitivity settings under Enhanced Encryption are followed.

Enhanced Encryption

If you have the Enhanced Account Encryption feature, the following describes which fields are encrypted for each sensitivity level selected per each account.

Account:

  • High:
  • Medium + High:
  • Low + Medium + High


Snap Pack History

 Click to view/expand
ReleaseSnap Pack VersionDateTypeUpdates
4.27 Patch427patches13429 Latest

In the Splunk Basic Auth account:

  • Fixed the connection failure issue when connecting to a cloud-based Splunk instance by not adding the prefix 'input-'to the hostname.
  • Removed the On-premises checkbox from the Snap Account settings.

4.27

main12833

 

Stable

Upgraded with the latest SnapLogic Platform release.
4.26main11181 StableUpgraded with the latest SnapLogic Platform release.
4.25main9554
 
StableUpgraded with the latest SnapLogic Platform release.
4.24main8556
 
StableUpgraded with the latest SnapLogic Platform release.
4.23423patches7504
 
Latest

Enhances the Splunk Search Snap by adding a new field, Response Mode, which allows receiving either JSON or XML response from the Splunk server. The default mode is XML, to enable backward compatibility.

4.23main7430
 
StableUpgraded with the latest SnapLogic Platform release.
4.22422patches7312
 
Latest

Enhances the Splunk Search Snap by adding a new field, Response Mode, which allows receiving either JSON or XML response from the Splunk server. The default mode is XML, to enable backward compatibility.

4.22main6403
 
StableUpgraded with the latest SnapLogic Platform release.
4.21421patches5851
 
Latest

Fixes the Splunk Snaps that fail to route connection errors to error view, thus aborting the Snaps.

4.21snapsmrc542
 
StableUpgraded with the latest SnapLogic Platform release.
4.20snapsmrc535
 
StableUpgraded with the latest SnapLogic Platform release.
4.19splunk8425
 
Latest
  • Fixes the Splunk Search Snap where the output data do not display some of the preview fields.
  • Added the preview field to the Splunk Search Snap output to allow users to select between preview and actual search results to pass on to downstream Snaps.
4.19snaprsmrc528
 
StableUpgraded with the latest SnapLogic Platform release.
4.18splunk7812
 
Latest

Added properties named Earliest RelativeLatest Relative, and Preset Relative Search to the Splunk Search Snap to fix an issue wherein the Snap returns inaccurate and inconsistent results regarding last-30-day and year-to-date searches.

4.18snapsmrc523
 
StableUpgraded with the latest SnapLogic Platform release.
4.17 ALL7402
 
Latest

Pushed automatic rebuild of the latest version of each Snap Pack to SnapLogic UAT and Elastic servers.

4.17snapsmrc515
 
Latest

Added the Snap Execution field to all Standard-mode Snaps. In some Snaps, this field replaces the existing Execute during preview check box.

4.16snapsmrc508
 
StableUpgraded with the latest SnapLogic Platform release.
4.15snapsmrc500
 
StableUpgraded with the latest SnapLogic Platform release.
4.14splunk5963
 
Latest

Updated the Splunk Search Snap to stream results directly to the client without storing them in the server.

4.14snapsmrc490
 
StableUpgraded with the latest SnapLogic Platform release.
4.13

snapsmrc486

 
StableUpgraded with the latest SnapLogic Platform release.
4.12

snapsmrc480

 
StableUpgraded with the latest SnapLogic Platform release.
4.11snapsmrc465
 
StableUpgraded with the latest SnapLogic Platform release.
4.10snapsmrc414
 
StableUpgraded with the latest SnapLogic Platform release.
4.9

snapsmrc405

 
StableUpgraded with the latest SnapLogic Platform release.
4.8

snapsmrc398

 
StableUpgraded with the latest SnapLogic Platform release.
4.7

snapsmrc382

 
StableUpgraded with the latest SnapLogic Platform release.
4.6snapsmrc362
 
StableUpgraded with the latest SnapLogic Platform release.
4.5.1

snapsmrc344

 
StableUpgraded with the latest SnapLogic Platform release.
4.5

snapsmrc344

 
Stable

Resolved an issue in Splunk Search Snap to ensure that the same errors are reported on Java 7 and Java 8 Snaplexes.

4.4.1

NA
 
Stable
  • Splunk Search: Resolved an issue with the message presented when a non-JavaScript expression was used in a Search.
  • Splunk Search: Resolved an issue with the input schema not populating after enabling an expression.
4.3.2NA
 
Stable

Added SSL support to the Splunk Account.

4.3.1

NA

Stable

Feature: Additional configuration parameters for the Splunk Writer Snap.

May 15, 2015

NA
Stable

Addressed the following issue: Splunk Write: Writer does not throw error if Index is disabled. Instead pipelines successfully runs, but no data inserted.

May 2, 2015

NA
Latest

Introduced Splunk Saved Search and Splunk Writer

March 2015

NA
Stable

Introduced Splunk Search Snap