Step 1: share the data to splunk
Go to Pilot Things Integrations Menu, click on New Forward target and select Splunk
Fill the form fields with the explanations hereunder:
| Field | Description | Mandatory | Default value |
| URL | URL of your local Splunk instance. Example: https://yourIPAddress:8089 | Yes | N/A |
| User name | Your Splunk user name | Yes | N/A |
| Password | Your Splunk password | Yes | N/A |
| Authentication token | If you use an authentification token, put it here | No | N/A |
| Host | The source host of the data | No | localhost:8083 |
| Host regex | No | N/A | |
| Source | Splunk data source name. Put PilotThings | No | pth |
| Source type | Put either _json or any of your source type that inherits _json (see step 2) | No | _json |
| Index | The index in which the data will be stored | No | default |
Step2: create a new data source in splunk
Go to Splunk Parameter menu and click on source type:
In the extraction index field, select "_json". You can then configure the rest of the fields as you wish. You can then use this source type in the Pilot Things integration feature.
Step3 : access the data
Go in Splunk Search & Reporting menu and search for PilotThings as datasource.
Comments
0 comments
Please sign in to leave a comment.