Splunk icon

Splunk

Run Splunk searches, manage saved searches and users, and send events via HEC.

2 triggers72 searches76 actionsPollingAuth: API key

AI-assisted documentation24 min read

This documentation is compiled from our integration source code, internal specs for Splunk, its official API documentation and anonymized requests logs we collect from our support team[2].

Open Splunk on WEXTL →

To use Splunk on WEXTL you need an active account and an API access token from your account settings.[3]

Credential type option 1

Splunk - Session Token

  • Base URLurlRequired

    Management port origin, e.g. https://splunk.example.com:8089

    [1]
  • TokenpasswordRequired
Credential type option 2

Splunk - HEC Token

  • HEC URLurlRequired

    HEC origin, often port 8088.

    [1]
  • HEC TokenpasswordRequired
  1. Log in to your WEXTL account, add the Splunk node module to your workflow, and click Create new credential.
  2. Optional: In the Credential name field, enter a name for the credential.
  3. Enter the authentication credentials you copied from your Splunk account, or follow the on-screen instructions to create the credential.
  4. If prompted, authenticate your account and confirm access.
  5. If you want to make changes to your credential in the future, follow the steps in Manage credentials →

Notes

Credentials are org-scoped; share them with teammates from the Credentials picker on any of its nodes.For detailed information on connecting an application, see Connect an application →

Watch Fired AlertsTrigger
Output fields[3]
FieldType
SIDtext
Nametext
Contenttext
Watch Search Job DoneTrigger
Input fields[3]
FieldType
Search Job IDRequired
text
Output fields[3]
FieldType
SIDtext
Nametext
Contenttext
Get Alert ActionSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get ConfigSearch
Input fields[3]
FieldType
FileRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Current ContextSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Data ModelSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Event TypeSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Export Search ResultsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Field AliasSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Field ExtractionSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Fired AlertSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get HEC HealthSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get HTTP InputSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get IndexSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get KV Store CollectionSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get KV Store RecordSearch
Input fields[3]
FieldType
CollectionRequired
text
KeyRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Local AppSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get LookupSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get MacroSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get MessageSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get PanelSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Parsed SearchSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get RoleSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Saved SearchSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Saved Search HistorySearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Saved Search Scheduled TimesSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Search JobSearch
Input fields[3]
FieldType
SidRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Search Job EventsSearch
Input fields[3]
FieldType
SidRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Search Job LogSearch
Input fields[3]
FieldType
SidRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Search Job ResultsSearch
Input fields[3]
FieldType
SidRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Search Job Results PreviewSearch
Input fields[3]
FieldType
SidRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Search Job SummarySearch
Input fields[3]
FieldType
SidRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Search Job TimelineSearch
Input fields[3]
FieldType
SidRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get Server InfoSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get TagSearch
Input fields[3]
FieldType
Tag NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get TCP InputSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get TimeparserSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get TokenSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get TransformSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get UDP InputSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get UserSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Get ViewSearch
Input fields[3]
FieldType
NameRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List Alert ActionsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List CapabilitiesSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List ConfigsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List Data ModelsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List Event TypesSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List Field AliasesSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List Field ExtractionsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List Fired AlertsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List HTTP InputsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List IndexesSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List InputsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List KV Store CollectionsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List KV Store RecordsSearch
Input fields[3]
FieldType
CollectionRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List Local AppsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List LookupsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List MacrosSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List MessagesSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List Modular InputsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List PanelsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List RolesSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List Saved SearchesSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List Saved Searches By NamespaceSearch
Input fields[3]
FieldType
OwnerRequired
text
AppRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List Search JobsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List Search Jobs By NamespaceSearch
Input fields[3]
FieldType
OwnerRequired
text
AppRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List TagsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List TCP InputsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List TokensSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List TransformsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List UDP InputsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List UsersSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
List ViewsSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Search TypeaheadSearch
Input fields[3]
FieldType
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Acknowledge Saved SearchAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Control Search JobAction
Input fields[3]
FieldType
SidRequired
text
SearchRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create Automatic LookupAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create Calculated FieldAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create Data ModelAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create Event TypeAction
Input fields[3]
FieldType
Bodytext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create Field AliasAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create Field ExtractionAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create HTTP InputAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create IndexAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create KV Store CollectionAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create KV Store RecordAction
Input fields[3]
FieldType
CollectionRequired
text
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create Local AppAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create LookupAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create MacroAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create MessageAction
Input fields[3]
FieldType
ToRequired
text
FromRequired
text
Texttext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create PanelAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create RoleAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create Saved SearchAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create Search JobAction
Input fields[3]
FieldType
SearchRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create TagAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create TCP InputAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create TokenAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create TransformAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create UDP InputAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create UserAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create ViewAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Create Workflow ActionAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Delete Event TypeAction
Input fields[3]
FieldType
NameRequired
text
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Delete Fired AlertAction
Input fields[3]
FieldType
NameRequired
text
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Delete HTTP InputAction
Input fields[3]
FieldType
NameRequired
text
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Delete IndexAction
Input fields[3]
FieldType
NameRequired
text
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Delete KV Store CollectionAction
Input fields[3]
FieldType
NameRequired
text
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Delete KV Store RecordAction
Input fields[3]
FieldType
CollectionRequired
text
KeyRequired
text
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Delete Local AppAction
Input fields[3]
FieldType
NameRequired
text
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Delete LookupAction
Input fields[3]
FieldType
NameRequired
text
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Delete MacroAction
Input fields[3]
FieldType
NameRequired
text
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Delete MessageAction
Input fields[3]
FieldType
NameRequired
text
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Delete RoleAction
Input fields[3]
FieldType
NameRequired
text
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Delete Saved SearchAction
Input fields[3]
FieldType
NameRequired
text
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Delete Search JobAction
Input fields[3]
FieldType
SidRequired
text
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Delete TagAction
Input fields[3]
FieldType
Tag NameRequired
text
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Delete UserAction
Input fields[3]
FieldType
NameRequired
text
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Disable Saved SearchAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Dispatch Saved SearchAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Enable Local AppAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Enable Saved SearchAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Make an API Calluniversal
Input fields[3]
FieldType
URLRequired
text
MethodRequired
choice
Headersarray
Headerobject
Query Stringarray
Parameterobject
Bodytext
Output fields[3]
FieldType
Bodytext
Headerstext
Status Codenumber
Reload IndexAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Restart Local AppAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Send HEC EventAction
Input fields[3]
FieldType
Bodytext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Send HEC RawAction
Input fields[3]
FieldType
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Suppress Saved SearchAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update Data ModelAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update Event TypeAction
Input fields[3]
FieldType
NameRequired
text
Bodytext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update Field AliasAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update Field ExtractionAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update HTTP InputAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update IndexAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update KV Store RecordAction
Input fields[3]
FieldType
CollectionRequired
text
KeyRequired
text
Nametext
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update Local AppAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update LookupAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update MacroAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update MessageAction
Input fields[3]
FieldType
NameRequired
text
ToRequired
text
FromRequired
text
Texttext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update PanelAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update RoleAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update Saved SearchAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update Saved Search ScheduleAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update Search JobAction
Input fields[3]
FieldType
SidRequired
text
SearchRequired
text
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update TagAction
Input fields[3]
FieldType
Tag NameRequired
text
Nametext
Additional Fieldstext
Maximum Number of Resultsnumber
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update TCP InputAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update TransformAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update UDP InputAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update UserAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Update ViewAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate
Upload Lookup FileAction
Input fields[3]
FieldType
NameRequired
text
Additional Fieldstext
Output fields[3]
FieldType
IDtext
Nametext
Statustext
Created Atdate

Look for Splunk templates in the WEXTL template library.

Browse templates →
  1. WEXTL® Splunk Source Code connector implementation.
  2. Our users use cases and automations.
  3. Official API Documentation for Splunk.
  4. WEXTL® visual workflow builder data.

Last updated: Sep 3, 2026 08:06