Splunk

The Splunk module streams controller device-data (and optional monitor metrics) to Splunk via HTTP Event Collector (HEC) so OT and energy events are searchable in your SIEM / observability stack.

Setup

1. Enable Splunk under Modules.
2. Enter HEC URL / token and test connectivity.
3. Optionally package or sync the Aida OT Analytics app from the module UI.

Platform-level Splunk guidance also appears under Integrations → Splunk; the controller module is what sends edge telemetry for that appliance.

Operators

• Confirm events arrive in the target Splunk index after control and sensor activity
• Use monitor metrics when entitled and configured
• Rotate HEC tokens like any other secret

Related

• Platform Splunk integration
• Monitors