Can Cortex trigger actions in Splunk, and Splunk in Cortex?

Yes — the integration works in both directions. Use each app's triggers to start a workflow and the other app's actions to update it.

Do I need to write code to integrate Cortex and Splunk?

No. Cortex-to-Splunk automations are built visually on the canvas. You can optionally add custom JavaScript with Functions when you need advanced logic.

Cortex + Splunk Integration

Keep Cortex and Splunk aligned: when developer tools events happen in one, update the other automatically.

Example: when Splunk's "Watch Fired Alerts" fires, WEXTL can "Delete Analyzer" in Cortex. Cortex has 13 actions (including Delete Analyzer, Delete Job, and Get Analyzer); Splunk has 148 actions (including Acknowledge Saved Search, Control Search Job, and Create Automatic Lookup).

Explore Documentation

GDPR
Data Encryption
2FA
Local Data Region

Splunk triggersCortex actions

Splunk workflow triggers

Cortex workflow actions

Frequently asked questions

Common questions about connecting Cortex and Splunk.

Connect your Cortex and Splunk accounts once, pick a trigger in one app and an action in the other, then map the fields so data flows automatically between them.

CortexBrowse all Cortex triggers, actions, and integrations.

SplunkBrowse all Splunk triggers, actions, and integrations.

Cortex + Splunk Integration

Frequently asked questions

How do I connect Cortex and Splunk?

What can I automate between Cortex and Splunk?

Can Cortex trigger actions in Splunk, and Splunk in Cortex?

Do I need to write code to integrate Cortex and Splunk?

Explore Cortex and Splunk, or get started

Cortex + Splunk Integration

Frequently asked questions

How do I connect Cortex and Splunk?

What can I automate between Cortex and Splunk?

Can Cortex trigger actions in Splunk, and Splunk in Cortex?

Do I need to write code to integrate Cortex and Splunk?

Explore Cortex and Splunk, or get started