---
title: Splunk Integration Guide
slug: bhdo-v1/splunk-integration-guide
createdAt: 2022-11-24T18:24:26.000Z
---

Review the following guide for setting up an integration between Belden Horizon Data Operations and Splunk. 

# Before You Begin

You must have a Splunk account. 

# Step 1: Add Device

Follow the steps to [Connect a Device](docId\:T-cWPe0_Jsfw5-aoj8WPP). The device will be used to store tags that will be eventually used to create outbound topics in the connector. Make sure to select the **Enable Data Store** check box. 

# Step 2: Add Tags

After connecting the device in Belden Horizon Data Operations, you can [Add Tags](docId\:Wpe2HMXelARLBnhWbuChY) to the device. Create tags that you want to use to create outbound topics for the connector. 

# Step 3: Retrieve Splunk Parameters

Log in to Splunk, navigate to the Splunk - Sublime Text page, and copy the following values:

- Input line
- Services line
- Token line

# Step 4: Add Splunk Connector

Follow the steps to [Add a Connector](docId\:rrskXSXVcBZSd6UWyJ-yv) and select the **Splunk** provider. 

Configure the following parameters. 

- **Name**: A recognizable name to identify the connector. 
- **Hostname**: Paste the **Input line** copied in Step 3. 
- **Port**: Leave the default value of **8088**. 
- **Use SSL**: Make sure the check box is selected. 
- **Endpoint**: Paste the **Services line** copied in Step 3. 
- **Token**: Paste the **Token line** copied in Step 3. 
- **Throttling Limit**: The maximum number of messages per second to be processed. The default value is zero, which means that there is no limit. 
- **Persistent storage**: When enabled, this will cause messages to undergo a store-and-forward procedure. Messages will be stored within Belden Horizon Data Operations when cloud providers are online.  

# Step 5: Enable the Connector

After adding the connector, click the toggle in the connector tile to enable it. 

::Image[]{src="https://api.archbee.com/api/optimize/vAqK-046vdh4I0e1y9cfX/7p78tEy5EPLvZlLLeGocK_splunk.png" size="60" width="370" height="345" position="center" showCaption="false"}

If you see a *Failed *status, review the [Connector Logs](docId\:wciGtqYdwS5P7BnDd7LId) and any relevant error messages. 

# Step 6: Create Topic for Splunk Connector

You will now need to import the tag created in Step 2 as topics for the Splunk connector. The topic will be created as an outbound topic. 

**To create outbound topics:**

1. Click the connector tile.
   The connector *Dashboard *appears. 
2. Click the **Topics **tab. 
3. Click the **Import from DeviceHub** tags icon. 
   The *DeviceHub Import *dialog box appears.

   ::Image[]{src="https://api.archbee.com/api/optimize/SSUUxKZUk9bFTEPNn_6Zo/4fC8yaOKctxiiTvUDGfWu_import-from-devicehub.png" size="80" width="1148" height="570" position="center" showCaption="false"}
4. Select all the tags to import and click **Import**. 

After adding all required topics, navigate to the Integration overview page and ensure the connector is not disabled and still shows a CONNECTED status. 

# Step 7: Enable Topics

To enable the topics, return to the *Topics *tab and click the **Enable all topics** icon. 

::Image[]{src="https://api.archbee.com/api/optimize/SSUUxKZUk9bFTEPNn_6Zo/bCV1JMfeMF7XQryi1HSGr_enable-all-topics.png" size="80" width="1148" height="570" caption="Enable all topics icon" position="center" showCaption="true"}

# Step 8: Verify Data Connection in Splunk

**To verify the data connection in Splunk:**

1. Log in to Splunk. 
2. Open the Splunk HTTP Event Collector and refresh the data.
3. Scroll down to the *Activity *section and hover over the data to view *Valid Requests*.
4. In the *Request Overview* section, hover over the *Valid Request Count* and click the **Refresh **icon. 
5. Verify that the values for *Event Count* and *Valid Request Count* update.