Configure real-time data export to Splunk

Note: Before you start, make sure that Real-time data export is enabled. To do this, check the Enabling or Disabling Insights section of the Managing Products page from the Automation Suite guide.

1. Go to the Automation Suite Administration page.
2. From the tenants list, select the tenant in which you want to enable real-time data export.
3. Select Services.
   
   

   

   
   
4. Click on the three-dot icon (⁝) from the Insights tile.
5. Select Configure Real-time Data Export from the drop-down list.
6. Add the Splunk endpoint and the HTTP Event Colletor (HEC) token.
   1. Fill in the HEC token from the Preparing Splunk procedure.
   2. Fill in the Splunk endpoint. This has the following format: https://{splunk endpoint}:{hec port}.
   3. Fill in the port information:
   1. If you are using Splunk Enterprise (on-premises), the port is 8088.
   2. If you are using Splunk Cloud trial, the port is8088.
   3. If you are using Splunk Cloud, a port number is not needed. Use 443 in this case.
   4. If you configured an HEC port number, use the configured port.