Basic integration with Splunk Enterprise, Splunk Cloud, or Splunk Light: http://www.splunk.com/en_us/products.html

Copy the example configuration in splunk.yaml.example to /opt/stackstorm/configs/splunk.yaml and edit as required.

It should contain:

• host - Splunk server
• port - Splunk API port (default 8089)
• username - Splunk username
• password - Splunk password

You can also use dynamic values from the datastore. See the docs for more info.

Runs a synchronous search to get Splunk data. E.g., st2 run splunk.search query='search * | head 10. Refer to Splunk documentation for search query syntax.

TBD