NOTE >>>
This is a hard fork of efcasado/grafana-plugin-splunk-datasource as the project has been abandoned for three years. I have updated a significant amount of the repo to the point that it does not have much in common with the original.
IMPORTANT NOTICE & DISCLAIMER >>>
This Splunk datasource plugin for Grafana is an independent project and is not affiliated with, endorsed, or sponsored by Grafana Labs.
It was created without any reference to or knowledge of the official, closed-source Splunk plugin available in Grafana's Enterprise plan. This plugin is provided "as-is" under the MIT License, with no warranties of any kind, express or implied.
As an unsigned plugin, you will need to configure your Grafana instance to allow its use. Please be aware that this plugin under active development, and breaking changes may be introduced. Use in a production environment is not recommended without thorough testing.
The "Grafana - Splunk Datasource" plugin is a Grafana plugin that allows you to run SPL queries on Splunk via Grafana.
-
Download the latest release of the plugin
-
Extract it in your Grafana's installation plugin directory (
/var/lib/grafana/plugins)tar -zxf essinghigh-splunk-datasource-XXXXX.tar.gz -C YOUR_PLUGIN_DIR
-
As of Grafana v8+ unsigned plugins must be explicitly allowed within Grafana's configuration (
/etc/grafana/grafana.ini)allow_loading_unsigned_plugins = essinghigh-splunk-datasource
The plugin can be configured
by an administrator from Grafana's UI Configuration --> Datasources --> Add data source.
NOTE: By default Splunk's REST API is only available via HTTPS (even if you allow HTTP access on a differen port), usually on: https://splunk:8089
(Example configuration via the Grafana WebUI (Grafana 11.6.1):
