Skip to content

splunk: add search data stream#15041

Merged
efd6 merged 10 commits intoelastic:mainfrom
efd6:st12948-splunk
Sep 5, 2025
Merged

splunk: add search data stream#15041
efd6 merged 10 commits intoelastic:mainfrom
efd6:st12948-splunk

Conversation

@efd6
Copy link
Contributor

@efd6 efd6 commented Aug 26, 2025

Proposed commit message

See title.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • [ ]

How to test this PR locally

Related issues

Screenshots

@efd6 efd6 self-assigned this Aug 26, 2025
@efd6 efd6 added enhancement New feature or request Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Integration:splunk Splunk labels Aug 26, 2025
@elastic-vault-github-plugin-prod
Copy link

elastic-vault-github-plugin-prod bot commented Aug 26, 2025

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@andrewkroh andrewkroh added the documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. label Aug 26, 2025
@efd6 efd6 force-pushed the st12948-splunk branch 4 times, most recently from cda1230 to b8d355b Compare August 27, 2025 23:11
@efd6 efd6 marked this pull request as ready for review August 28, 2025 00:15
@efd6 efd6 requested a review from a team as a code owner August 28, 2025 00:15
@elasticmachine
Copy link

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@efd6 efd6 requested review from andrewkroh and jamesspi August 28, 2025 00:15
@efd6 efd6 requested a review from kcreddy September 3, 2025 05:39
@efd6
Copy link
Contributor Author

efd6 commented Sep 3, 2025

I'll wait for @andrewkroh, particularly for review of this and the subsequent logic that depends on that (query construction based on user input), and for @jamesspi for general comments on the user-facing aspects.

@efd6 efd6 requested a review from andrewkroh September 4, 2025 21:48
@elasticmachine
Copy link

💚 Build Succeeded

History

cc @efd6

@elastic-sonarqube
Copy link

Copy link

@jamesspi jamesspi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks!

@efd6 efd6 merged commit 8df94e9 into elastic:main Sep 5, 2025
9 checks passed
@elastic-vault-github-plugin-prod

Package splunk - 0.7.0 containing this change is available at https://epr.elastic.co/package/splunk/0.7.0/

tehbooom pushed a commit to tehbooom/integrations that referenced this pull request Nov 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. enhancement New feature or request Integration:splunk Splunk Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants