Data Destinations Splunk Integration

Prerequisites

• Have an active Splunk account.

Pulling your Splunk Access Token (Splunk documentation)

1. Log into your Splunk account.
2. Locate your Access Tokens: In the left navigation bar select Settings, than select Access Tokens menu item. A page with your Access tokens appears.

3. Click on New Token button

• At least you must enable the following permissions:
  • Ingests

6. Click on Create button and the new token will appear in the table on the screen.
7. Click on the name of an Access Token.
8. Click on Show token button (located right behind the name). And Copy the generated token.

8. Share the Access Token with an Embrace onboarding specialist or use Embrace's UI to add Splunk as Data Destination.

Pulling your Splunk Realm (Splunk documentation)

1. Log into your Splunk account.
2. Locate your Profile: In the left navigation bar select Settings, than press View Profile button. A page with your profile appears appears.

3. Click on Organizations button
4. Copy Realm

5. Share the Realm with an Embrace onboarding specialist or use Embrace's UI to add Splunk as Data Destination.