Splunk × AmbactiBring Splunk into
the flow of work.
A little less busywork with Splunk.
Alert2 capabilities+
- Get a fired alerts reportRead
Retrieve a fired alerts report
- Get metricsRead
Retrieve metrics
Fired Alert1 capabilities+
- Get a fired alerts reportRead
Retrieve a fired alerts report
Report4 capabilities+
- Get many search reportsRead
Retrieve many search reports
- Get a search reportRead
Retrieve a search report
- Create a search reportWrite
Create a search report from a search job
- Delete a search reportWrite
Search5 capabilities+
- Get many search jobsRead
Retrieve many search jobs
- Get the result of a search jobRead
- Get a search jobRead
Retrieve a search job
- Create a search jobWrite
- Delete a search jobWrite
Search Configuration3 capabilities+
- Get many search configurationsRead
Retrieve many search configurations
- Get a search configurationRead
Retrieve a search configuration
- Delete a search configurationWrite
Search Job4 capabilities+
- Get many search jobsRead
Retrieve many search jobs
- Get a search jobRead
Retrieve a search job
- Create a search jobWrite
- Delete a search jobWrite
Search Result1 capabilities+
- Get many search resultsRead
Retrieve many search results for a search job
User5 capabilities+
- Get many usersRead
Retrieve many users
- Get a userRead
Retrieve an user
- Create a userWrite
Create an user
- Delete a userWrite
Delete an user
- Update a userWrite
Update an user
Frequently asked
questions.
What could an Ambacti integration do with Splunk?
The documented operations include Alert: Get a fired alerts report; Alert: Get metrics; Fired Alert: Get a fired alerts report; Report: Get many search reports.
Could I keep a workflow read-only?
For a read-only workflow, limit account permissions to reading data and exclude actions that create, update, or delete records.
Will every action run automatically?
Choose which steps could run on their own and which should pause for review. Changes should follow the permissions and approval rules you set.
Do I need to review actions in Splunk?
Decide which work could run on its own and which steps need your review.