Remote Splunk Search

Search over a remote Splunk server

This app lets you run a Splunk search on a remote Splunk server within your own Splunk server

Examples

Using credentials:

| remote 
    host="mysplunk2.com" 
    query="index=main | head 50 | table _time host _raw" 
    username="user" 
    password="changeme"

Using token:

| remote 
    host="mysplunk2.com" 
    query="index=main | head 50 | table _time host _raw" 
    token="sometokengeneratedbysplunkstartingv7.3"

Using a generating command

| remote 
    host="mysplunk2.com" 
    query="| makeresults count=10" 
    token="sometokengeneratedbysplunkstartingv7.3"

Options

• host (required): Remote Splunk hostname
• query (required): SPL query to run on the remote server
• username (optional): Username for authentication
• password (optional): Password for authentication
• token (optional): Splunk token for authentication (Can be used instead of username and password)
• port (optional): Splunk API port (Default to 8089)

• NOTE: Credentials should be supplied as username & password OR token