Step: Query Splunk

Perform a splunk query and save the results to a variable in the package


Stores data in a package table variable

Operates on a reified package graph

Uses Splunk Search Processing Language (SPL) syntax

  • Data Source: Choose one of the Splunk data sources that have been configured in the Data Sources view.
  • Output Format: Select the output data to be formatted as a JSON, XML, or CSV file.
  • Output Variable Name: Name of package variable you want to store the table in
  • Splunk Query: Use this space to enter a Splunk query in the Search Processing Language (SPL) syntax. Line returns, spaces, and tabs are all allowed and stored after saving.
  • step/query-splunk
  • Last modified: 2018/02/27 22:06