Requirements
To use Splunk on WEXTL you need an active account and an API access token from your account settings.[3]
Get your Splunk credentials
Connect Splunk in WEXTL
- Log in to your WEXTL account, add the Splunk node module to your workflow, and click Create new credential.
- Optional: In the Credential name field, enter a name for the credential.
- Enter the authentication credentials you copied from your Splunk account, or follow the on-screen instructions to create the credential.
- If prompted, authenticate your account and confirm access.
- If you want to make changes to your credential in the future, follow the steps in Manage credentials →
Notes
Credentials are org-scoped; share them with teammates from the Credentials picker on any of its nodes.For detailed information on connecting an application, see Connect an application →
Splunk node modules
The list below is a reference of every Splunk node module the integration supports. You will be able to pick any of them on the workflow canvas while building automations.
Open any Splunk node module below to inspect its input parameters, outputs, and connection requirements.
Watch Fired AlertsTrigger
| Field | Type |
|---|---|
| SID | text |
| Name | text |
| Content | text |
Watch Search Job DoneTrigger
Get Alert ActionSearch
Get ConfigSearch
Get Current ContextSearch
Get Data ModelSearch
Get Event TypeSearch
Get Export Search ResultsSearch
Get Field AliasSearch
Get Field ExtractionSearch
Get Fired AlertSearch
Get HEC HealthSearch
Get HTTP InputSearch
Get IndexSearch
Get KV Store CollectionSearch
Get KV Store RecordSearch
Get Local AppSearch
Get LookupSearch
Get MacroSearch
Get MessageSearch
Get PanelSearch
Get Parsed SearchSearch
Get RoleSearch
Get Saved SearchSearch
Get Saved Search HistorySearch
Get Saved Search Scheduled TimesSearch
Get Search JobSearch
Get Search Job EventsSearch
Get Search Job LogSearch
Get Search Job ResultsSearch
Get Search Job Results PreviewSearch
Get Search Job SummarySearch
Get Search Job TimelineSearch
Get Server InfoSearch
Get TagSearch
Get TCP InputSearch
Get TimeparserSearch
Get TokenSearch
Get TransformSearch
Get UDP InputSearch
Get UserSearch
Get ViewSearch
List Alert ActionsSearch
List CapabilitiesSearch
List ConfigsSearch
List Data ModelsSearch
List Event TypesSearch
List Field AliasesSearch
List Field ExtractionsSearch
List Fired AlertsSearch
List HTTP InputsSearch
List IndexesSearch
List InputsSearch
List KV Store CollectionsSearch
List KV Store RecordsSearch
List Local AppsSearch
List LookupsSearch
List MacrosSearch
List MessagesSearch
List Modular InputsSearch
List PanelsSearch
List RolesSearch
List Saved SearchesSearch
List Saved Searches By NamespaceSearch
List Search JobsSearch
List Search Jobs By NamespaceSearch
List TagsSearch
List TCP InputsSearch
List TokensSearch
List TransformsSearch
List UDP InputsSearch
List UsersSearch
List ViewsSearch
Search TypeaheadSearch
Acknowledge Saved SearchAction
Control Search JobAction
Create Automatic LookupAction
Create Calculated FieldAction
Create Data ModelAction
Create Event TypeAction
Create Field AliasAction
Create Field ExtractionAction
Create HTTP InputAction
Create IndexAction
Create KV Store CollectionAction
Create KV Store RecordAction
Create Local AppAction
Create LookupAction
Create MacroAction
Create MessageAction
Create PanelAction
Create RoleAction
Create Saved SearchAction
Create Search JobAction
Create TagAction
Create TCP InputAction
Create TokenAction
Create TransformAction
Create UDP InputAction
Create UserAction
Create ViewAction
Create Workflow ActionAction
Delete Event TypeAction
Delete Fired AlertAction
Delete HTTP InputAction
Delete IndexAction
Delete KV Store CollectionAction
Delete KV Store RecordAction
Delete Local AppAction
Delete LookupAction
Delete MacroAction
Delete MessageAction
Delete RoleAction
Delete Saved SearchAction
Delete Search JobAction
Delete TagAction
Delete UserAction
Disable Saved SearchAction
Dispatch Saved SearchAction
Enable Local AppAction
Enable Saved SearchAction
Make an API Calluniversal
Reload IndexAction
Restart Local AppAction
Send HEC EventAction
Send HEC RawAction
Suppress Saved SearchAction
Update Data ModelAction
Update Event TypeAction
Update Field AliasAction
Update Field ExtractionAction
Update HTTP InputAction
Update IndexAction
Update KV Store RecordAction
Update Local AppAction
Update LookupAction
Update MacroAction
Update MessageAction
Update PanelAction
Update RoleAction
Update Saved SearchAction
Update Saved Search ScheduleAction
Update Search JobAction
Update TagAction
Update TCP InputAction
Update TransformAction
Update UDP InputAction
Update UserAction
Update ViewAction
Templates
Look for Splunk templates in the WEXTL template library.
Browse templates →Explore alternative apps
- AWS Cognito[2]Amazon Cognito User Pools — manage users, groups, app clients, and identity providers with SigV4.
- Azure StorageManage containers and blobs in Azure Blob Storage.
- Bunny.netCDN control plane — manage pull zones, storage zones, DNS, video libraries, and cache purge.
- AWS LambdaServerless compute that runs your code without managing servers.
- ClerkAuthentication and user management with sign-in, sign-up, and MFA.
References
- WEXTL® Splunk Source Code connector implementation.
- Our users use cases and automations.
- Official API Documentation for Splunk.
- WEXTL® visual workflow builder data.
Last updated: Sep 3, 2026 08:06