samples
turbot/flowpipe-samples/run-search-in-splunk

Run Search in Splunk

Runs the provided search in Splunk, waits for the search to complete, and returns the results.

Run the pipeline

To run this pipeline from your terminal:

flowpipe pipeline run run_search_in_splunk.pipeline.run_search_in_splunk \
--arg 'search_query=<string>' \
--arg 'insecure=<bool>'

Use this pipeline

To call this pipeline from your pipeline, use a step:

step "pipeline" "step_name" {
pipeline = run_search_in_splunk.pipeline.run_search_in_splunk
args = {
search_query = <string>
insecure = <bool>
}
}

Params

NameTypeRequiredDescriptionDefault
splunk_auth_tokenstringYesAuth token to authenticate requests with Splunk.eyJraWQiOiJzcGx1bmsuc2Vjc...
splunk_serverstringYesThe Splunk server.localhost
search_querystringYesThe query to be searched.-
insecureboolYesDisable TLS verification.-

Outputs

NameDescription
search_result