{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["img","admonition"]},"type":"markdown"},"seo":{"title":"Splunk Integration","siteUrl":"https://docs.hiddenlayer.ai","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"splunk-integration","__idx":0},"children":["Splunk Integration"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The Splunk integration allows HiddenLayer to send Supply Chain, Runtime Security, and Audit Log events as datasources to the specified Splunk endpoint."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"prerequisites","__idx":1},"children":["Prerequisites"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To configure the Splunk integration, you need:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Administrator access to the HiddenLayer Console (or have an administrator configure it for you)."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The Splunk HEC endpoint URL and a valid Splunk HEC authentication token."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"configure-splunk","__idx":2},"children":["Configure Splunk"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["In the HiddenLayer Console, go to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Settings > Integrations"]},"."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Under Webhooks & Security Tools for Splunk, click the menu (three vertical dots)."]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/splunk-menu-configuration.df111f288dec00776a6d9f933b6661bea84523d7cd80f4452ed36348b1b8bd28.06b34c01.png","alt":"Splunk integration","framed":false,"withLightbox":true,"width":"600px","align":"center"},"children":[]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Configure Integration"]},"."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Enter a unique name for the integration."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Enter the Splunk HEC URL and the HEC authentication token."]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/splunk-enter-config.f3524c11c419cb9da8e851aa13d2e2024fc43f66414f3bedaa64c031db7503d1.06b34c01.png","alt":"Splunk integration settings","framed":false,"withLightbox":true,"width":"600px","align":"center"},"children":[]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To disable TLS verification, select the Disable TLS Verification checkbox."]}]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Disabling TLS"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Disabling TLS verification removes HTTPS security, exposing data to potential interception and tampering. Disabling TLS verification is intended for testing and troubleshooting only"]}]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":7},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Click next"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Select the desired data sources."]}]}]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/splunk-data-sources.1775e13db5c1b1b4907fec217c7eabb0acf4224c4ec39f72a9b66c0401451c93.06b34c01.png","alt":"Splunk Data sources","framed":false,"withLightbox":true,"width":"600px","align":"center"},"children":[]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":9},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Submit"]},"."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"disable-splunk","__idx":3},"children":["Disable Splunk"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You can disable the Splunk integration without deleting its configuration."]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["In the HiddenLayer Console, go to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Settings > Integrations"]},"."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Under Webhooks & Security Tools for Splunk, click the menu (three vertical dots)."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Configure Integration"]},"."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Clear the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Enabled"]}," checkbox."]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/splunk-enabled.2fc67f0f8e2a5e413c6e39123f4d94b10de95baa6f4a9f63361f8e010ca30ad8.06b34c01.png","alt":"Disable Splunk","framed":false,"withLightbox":true,"width":"600px","align":"center"},"children":[]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Submit"]},"."]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"delete-splunk","__idx":4},"children":["Delete Splunk"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You can delete the Splunk integration when it is no longer needed."]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["In the HiddenLayer Console, go to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Settings > Integrations"]},"."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Click the Splunk menu (three vertical dots)."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Delete"]},"."]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/splunk-delete.dbe80c9fadf9f0a6f68cbb1918c5ef5c22b45e5d776e344cfb54c6c144d56aea.06b34c01.png","alt":"Delete Splunk","framed":false,"withLightbox":true,"width":"600px","align":"center"},"children":[]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Confirm the deletion."]}]}]}]},"headings":[{"value":"Splunk Integration","id":"splunk-integration","depth":1},{"value":"Prerequisites","id":"prerequisites","depth":2},{"value":"Configure Splunk","id":"configure-splunk","depth":2},{"value":"Disable Splunk","id":"disable-splunk","depth":2},{"value":"Delete Splunk","id":"delete-splunk","depth":2}],"frontmatter":{"seo":{"title":"Splunk Integration"}},"lastModified":"2026-07-02T17:55:49.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/docs/integrations/splunk","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}