Run SPL searches and manage saved searches and alerts in Splunk
Splunk is a AACFlow integration in the Observability category. AACFlow is the AI workspace where teams build and deploy AI agents. AACFlow's Splunk integration provides 12 tools that AI agents can use inside AACFlow's visual workflow builder. Splunk connects with an API key. Get started at aacflow.io.
Last updated
Integrate Splunk Enterprise or Splunk Cloud into workflows. Run SPL searches synchronously or as asynchronous jobs, fetch results, dispatch saved searches, and inspect fired alerts and indexes.
Sign up at aacflow.io in seconds. Your workspace is ready immediately.
Open your workspace, drag a Splunk block onto the workflow builder, and paste in your Splunk API key.
Pick the tool you need, wire in an AI agent for reasoning or data transformation, and run. Your Splunk automation is live.
Ready-to-use templates featuring Splunk. Click any to build it instantly.
12 Splunk tools available to AACFlow agents.
Run an SPL search synchronously and return its results in a single call (oneshot mode). A oneshot search buffers the whole result set in one response with no paging, so use it for short searches; for anything large use Create Search Job with Get Search Results, which defaults to 100 rows and pages with offset.
Start a Splunk search job and return its search ID (sid). The search runs asynchronously — poll its status and fetch results separately.
Get the status and progress of a Splunk search job by search ID, including dispatch state, completion progress, and event/result counts.
Fetch the transformed results of a completed Splunk search job by search ID, with pagination.
Cancel a running Splunk search job and delete its result cache.
List saved searches and reports configured in Splunk, including their SPL, schedule, and alert configuration.
Get the configuration of a single Splunk saved search by name, including its SPL, schedule, and alert settings.
Run a Splunk saved search immediately and return the search ID (sid) of the dispatched job.
List the saved searches with currently triggered (unexpired) Splunk alerts and how many times each has fired.
List the unexpired triggered instances of a Splunk alert by saved search name, including severity, trigger time, and the search ID of each firing.
List the indexes configured on the Splunk instance with their size, event count, and retention settings.
List the apps installed on the Splunk instance with their label, version, author, and enabled state.
AACFlow's Splunk integration adds 12 tools to the AI agents you build in AACFlow's visual workflow builder. Run SPL searches and manage saved searches and alerts in Splunk.
