- Created a Splunk connection
Creating a Splunk Subscription
Navigate to Splunk integrations by clicking the Splunk link on the integrations page.
Click the + SUBSCRIPTION button to begin the creation process.
Choose a name for the subscription as well as the saved filters you would like the subscription to be based on.
Choose the connection for the subscription output.
Enter the Splunk index.
Enter a Splunk source type.
BluBracket events matching your filters will create events in the specified Splunk index.