Support Questions

Find answers, ask questions, and share your expertise

NIFI Get Splunk

avatar
Explorer

is it possible to get records from Splunk based on a specific index? Where can I define the different indexes I want to quey?

Thanks 

1 REPLY 1

avatar
Master Mentor

@dzbeda 
Have you tried specifying the index in your configured Query within the GetSplunk NiFi processor component?

NiFi is not going to be able to provide you a list of indexes from your Splunk to choose from, you would need to know what indexes exist in your Splunk server.

Hope this helps,

Matt