splunk_search data source

blackstork/splunk, v0.4.2

Installation #

To use splunk_search data source, you must install the plugin blackstork/splunk.

To install the plugin, add the full plugin name to the plugin_versions map in the Fabric global configuration block (see Global configuration for more details), as shown below:

fabric {
  plugin_versions = {
    "blackstork/splunk" = ">= v0.4.2"
  }
}

Note the version constraint set for the plugin.

Configuration #

The data source supports the following configuration arguments:

config data splunk_search {
  # Required string.
  # For example:
  auth_token = "some string"

  # Optional string.
  # Default value:
  host = null

  # Optional string.
  # Default value:
  deployment_name = null
}

Usage #

The data source supports the following execution arguments:

data splunk_search {
  # Required string.
  # For example:
  search_query = "some string"

  # Optional number.
  # Default value:
  max_count = null

  # Optional number.
  # Default value:
  status_buckets = null

  # Optional list of string.
  # Default value:
  rf = null

  # Optional string.
  # Default value:
  earliest_time = null

  # Optional string.
  # Default value:
  latest_time = null
}