Splunk

The Splunk connector is a Palantir-provided driver for Splunk.

To create a new Splunk source, follow the standard setup flow for Palantir-provided drivers, then use the sections below for Splunk-specific configuration and networking. For the complete property reference, see the official Splunk driver documentation ↗.

Configuration

The properties below are mandatory or recommended.

Networking

The table below lists the domains that the source needs to be able to access in order to successfully run.

For each domain, add a corresponding egress policy. If the source is hosted on-premises and not directly reachable from Foundry, use an agent proxy egress policy instead; the agent host itself must also be able to reach the listed domains. See using an agent as a proxy for details.