Splunk Cloud

Splunk Cloud is a tool that allows you to search, analyze, and visualize data.

Setup Steps

1. Create a Splunk Cloud account

You can create a user at any time and assign several aspects to that user. When you clone a user, you use this procedure. The user that you clone must have a different username than any existing user.

1. From the system bar, select Settings > Users.
2. Select New User.
3. In the Name field, provide a user name. This is the what the user provides at the login page.
4. In the Full Name field, provide the first and last name of the user.
5. In the Email Address field, provide the user email address.
6. In the Set password field, create a password.
7. Confirm the new password in the Confirm Password field.
8. Confirm that the password you created meets the password requirements as displayed near the "Confirm password" field.
9. (Optional) Select the user's time zone in the Time Zone field.
10. In the Default App field, select the app that the user will land in by default when they log into the Splunk platform instance. The default is "Home". "Search" is a common default app as well.
11. In Assign to Roles, you can select any roles that you want for your user to hold.
12. Select Create a role for user if you want to user's new assignments to be created as a role assigned specifically to this user.
13. Check Require password change on first login to force your user to change their password when they first log into the Splunk platform instance.
14. Select Save. The Splunk platform creates the user and returns you to the "Users" page.

2. Identify the Host

The Host corresponds to the unique domain name of your Splunk Cloud deployment. It follows the pattern:

<deployment-name>.splunkcloud.com

This information can be found directly from the Splunk Cloud instance:

1. Log in to the Splunk Cloud console.
2. Look at the URL in your browser’s address bar the part before .splunkcloud.com is the deployment name.
   • Example: if the URL is https://acme-data.splunkcloud.com, the host is acme-data.splunkcloud.com.

Reference:

• Access requirements and limitations for the Splunk Cloud Platform REST API

3. Integrate Qevlar AI with Splunk Cloud

1. In Qevlar AI open Integrations.

2. Locate Splunk Cloud and click +.
3. In the dialog paste the Username, Password, and Host noted earlier.

4. Click Test & Save, Qevlar AI validates informations and starts the first sync.