[FEATURE] Add Splunk datasource plugin by sharangokul28 · Pull Request #543 · perses/plugins

sharangokul28 · 2026-01-28T07:28:11Z

Description

The Splunk plugin enables Perses to connect to Splunk instances and query data using Splunk Processing Language (SPL). It supports both time series visualizations and log queries.

Screenshots

Splunk endpoints

Splunk datasource

Splunk logs table panel

Splunk time series chart panel

Checklist

Pull request has a descriptive title and context useful to a reviewer.
Pull request title follows the [<catalog_entry>] <commit message> naming convention using one of the
following catalog_entry values: FEATURE, ENHANCEMENT, BUGFIX, BREAKINGCHANGE, DOC,IGNORE.
All commits have DCO signoffs.

UI Changes

Changes that impact the UI include screenshots and/or screencasts of the relevant changes.
Code follows the UI guidelines.

splunk/cue.mod/module.cue

jgbernalp · 2026-01-28T09:20:10Z

splunk/cue.mod/module.cue

+}
+deps: {
+	"github.com/perses/perses/cue@v0": {
+		v:       "v0.53.0-beta.3"


Suggested change

v: "v0.53.0-beta.3"

v: "v0.53.0-rc.1"

Need to be updated to 0.53.1

splunk/schemas/datasources/splunk.cue

splunk/package.json

jgbernalp · 2026-01-28T09:35:03Z

splunk/package.json

+    "@perses-dev/components": "^0.53.0-beta.3",
+    "@perses-dev/core": "^0.53.0-beta.3",
+    "@perses-dev/plugin-system": "^0.53.0-beta.3",


Suggested change

"@perses-dev/components": "^0.53.0-beta.3",

"@perses-dev/core": "^0.53.0-beta.3",

"@perses-dev/plugin-system": "^0.53.0-beta.3",

"@perses-dev/components": "^0.53.0-rc.1",

"@perses-dev/core": "^0.53.0-rc.1",

"@perses-dev/plugin-system": "^0.53.0-rc.1",

Need to be updated to 0.53.1

jgbernalp · 2026-01-28T09:35:35Z

splunk/go.mod

+
+go 1.25.1
+
+require github.com/perses/perses v0.53.0-beta.3


Suggested change

require github.com/perses/perses v0.53.0-beta.3

require github.com/perses/perses v0.53.0-rc.0

Need to be updated to 0.53.1

AntoineThebaud

CUE review following a change on main branch:

splunk/schemas/datasources/splunk.cue

splunk/schemas/queries/splunk-log-query/query.cue

splunk/schemas/queries/splunk-time-series-query/query.cue

Gladorme

Nice PR!
First review done, ping me if you have any questions :)

splunk/src/queries/splunk-log-query/get-splunk-log-data.ts

splunk/src/queries/splunk-log-query/SplunkLogQueryEditor.tsx

splunk/src/queries/splunk-time-series-query/get-splunk-time-series-data.ts

Gladorme · 2026-02-17T16:57:08Z

splunk/src/model/splunk-client.ts

+  return response.json();
+}
+
+export async function exportSearch(


This fetch looks like to be "streamed" when I look at the network inspect (result payload is displayed part by part), I wonder if we could use: https://tanstack.com/query/v5/docs/reference/streamedQuery 🤔

Never used it myself, but would ne nice if we don't have to wait full payload to display the content. Something that could be added in a future PR.

splunk/src/queries/splunk-time-series-query/get-splunk-time-series-data.ts

splunk/src/queries/splunk-log-query/get-splunk-log-data.ts

Gladorme · 2026-02-25T15:56:54Z

You need to add "splunk" in main package.json (workspaces) and then check format + lint (npm run lint and npm run type-check)

splunk/src/queries/splunk-log-query/get-splunk-log-data.ts

Gladorme · 2026-03-18T10:41:30Z

splunk/src/model/splunk-client.ts

+  if (params.earliest_time) formData.append('earliest_time', params.earliest_time);
+  if (params.latest_time) formData.append('latest_time', params.latest_time);
+  formData.append('output_mode', params.output_mode || 'json');
+  try {


Remove try catch + credentials: 'include'
And use:

Suggested change

try {

return await fetchJson<SplunkJobCreateResponse>(url.toString(), {

method: 'POST',

headers: {

'Content-Type': 'application/x-www-form-urlencoded',

...options.headers,

},

body: formData.toString(),

});

Gladorme · 2026-03-18T10:41:57Z

splunk/src/model/splunk-client.ts

+export async function getJobStatus(jobId: string, options: SplunkApiOptions): Promise<SplunkJobStatusResponse> {
+  const url = buildUrl(`/services/search/v2/jobs/${jobId}`, options.datasourceUrl);
+  url.searchParams.append('output_mode', 'json');
+  try {


Suggested change

try {

return await fetchJson<SplunkJobStatusResponse>(url.toString(), {

method: 'GET',

headers: {

'Content-Type': 'application/json',

...options.headers,

},

});

Gladorme · 2026-03-18T10:42:18Z

splunk/src/model/splunk-client.ts

+  url.searchParams.append('output_mode', params.output_mode || 'json');
+  if (params.count) url.searchParams.append('count', params.count.toString());
+  if (params.offset) url.searchParams.append('offset', params.offset.toString());
+  try {


Suggested change

try {

return await fetchJson<SplunkResultsResponse>(url.toString(), {

method: 'GET',

headers: {

'Content-Type': 'application/json',

...options.headers,

},

});

Gladorme · 2026-03-18T10:42:34Z

splunk/src/model/splunk-client.ts

+  url.searchParams.append('output_mode', params.output_mode || 'json');
+  if (params.count) url.searchParams.append('count', params.count.toString());
+  if (params.offset) url.searchParams.append('offset', params.offset.toString());
+  try {


return await fetchJson(url.toString(), {
method: 'GET',
headers: {
'Content-Type': 'application/json',
...options.headers,
},
});

Gladorme · 2026-03-18T10:43:01Z

splunk/src/model/splunk-client.ts

+  const url = buildUrl('/services/data/indexes', options.datasourceUrl);
+  url.searchParams.append('output_mode', 'json');
+  url.searchParams.append('count', '0');
+  try {


Suggested change

try {

return await fetchJson<SplunkIndexResponse>(url.toString(), {

method: 'GET',

headers: {

'Content-Type': 'application/json',

...options.headers,

},

});

Gladorme · 2026-03-18T10:45:38Z

splunk/src/bootstrap.tsx

+// limitations under the License.
+
+// This file is used for development mode only
+export default function bootstrap() {


Please use the same boostrap as others plugins.

Suggested change

export default function bootstrap() {

import React from 'react';

import ReactDOM from 'react-dom/client';

const root = ReactDOM.createRoot(document.getElementById('root')!);

root.render(<React.StrictMode></React.StrictMode>);

Gladorme · 2026-03-18T10:46:01Z

splunk/go.mod

+
+go 1.25.1
+
+require github.com/perses/perses v0.53.0-rc.0


Suggested change

require github.com/perses/perses v0.53.0-rc.0

require github.com/perses/perses v0.53.1

Gladorme · 2026-03-18T10:46:18Z

splunk/cue.mod/module.cue

+}
+deps: {
+	"github.com/perses/shared/cue@v0": {
+		v:       "v0.53.0-rc.2"


Suggested change

v: "v0.53.0-rc.2"

v: "v0.53.1"

Gladorme · 2026-03-18T10:47:00Z

splunk/package.json

+  "types": "lib/index.d.ts",
+  "dependencies": {},
+  "peerDependencies": {
+    "@perses-dev/components": "^0.53.0-rc.1",


Suggested change

"@perses-dev/components": "^0.53.0-rc.1",

"@perses-dev/components": "^0.53.1",

"@perses-dev/core": "^0.53.1",

"@perses-dev/plugin-system": "^0.53.1",

Gladorme · 2026-03-18T10:48:11Z

splunk/package.json

@@ -0,0 +1,66 @@
+{
+  "name": "@perses-dev/splunk-plugin",
+  "version": "0.1.0",


Suggested change

"version": "0.1.0",

"version": "0.1.0",

"homepage": "https://github.com/perses/plugins/blob/main/README.md",

"repository": {

"type": "git",

"url": "git+https://github.com/perses/plugins.git"

},

"bugs": {

"url": "https://github.com/perses/plugins/issues"

},

Signed-off-by: Sharan Gokul <sharangokul@gmail.com>

AntoineThebaud changed the title ~~[FEATURE] Splunk: new plugin for perses/plugin~~ [FEATURE] Add Splunk datasource plugin Jan 28, 2026

sharangokul28 force-pushed the feature/splunk-plugin branch from d37ccf8 to 756a791 Compare January 28, 2026 09:11

sharangokul28 marked this pull request as ready for review January 28, 2026 09:12

sharangokul28 requested review from a team, AntoineThebaud and Nexucis as code owners January 28, 2026 09:12

sharangokul28 requested review from shahrokni and removed request for a team January 28, 2026 09:12

jgbernalp reviewed Jan 28, 2026

View reviewed changes

splunk/cue.mod/module.cue Outdated Show resolved Hide resolved

jgbernalp reviewed Jan 28, 2026

View reviewed changes

splunk/cue.mod/module.cue Outdated Show resolved Hide resolved

jgbernalp reviewed Jan 28, 2026

View reviewed changes

splunk/schemas/datasources/splunk.cue Outdated Show resolved Hide resolved

jgbernalp reviewed Jan 28, 2026

View reviewed changes

splunk/schemas/datasources/splunk.cue Outdated Show resolved Hide resolved

jgbernalp reviewed Jan 28, 2026

View reviewed changes

splunk/package.json Show resolved Hide resolved

jgbernalp reviewed Jan 28, 2026

View reviewed changes

sharangokul28 force-pushed the feature/splunk-plugin branch from 756a791 to 7997593 Compare January 28, 2026 11:28

Gladorme self-requested a review January 29, 2026 14:16

AntoineThebaud reviewed Feb 3, 2026

View reviewed changes

splunk/schemas/datasources/splunk.cue Outdated Show resolved Hide resolved

splunk/schemas/queries/splunk-log-query/query.cue Outdated Show resolved Hide resolved

splunk/schemas/queries/splunk-time-series-query/query.cue Outdated Show resolved Hide resolved

sharangokul28 force-pushed the feature/splunk-plugin branch 2 times, most recently from 2ec9a89 to 7b2c6f5 Compare February 9, 2026 11:52

Gladorme reviewed Feb 17, 2026

View reviewed changes

sharangokul28 force-pushed the feature/splunk-plugin branch from 7b2c6f5 to c9061d7 Compare February 19, 2026 07:15

Gladorme reviewed Feb 25, 2026

View reviewed changes

splunk/src/queries/splunk-time-series-query/get-splunk-time-series-data.ts Outdated Show resolved Hide resolved

Gladorme reviewed Feb 25, 2026

View reviewed changes

splunk/src/queries/splunk-log-query/get-splunk-log-data.ts Outdated Show resolved Hide resolved

Gladorme reviewed Feb 25, 2026

View reviewed changes

splunk/src/queries/splunk-log-query/get-splunk-log-data.ts Show resolved Hide resolved

sharangokul28 force-pushed the feature/splunk-plugin branch from c9061d7 to d5a7aeb Compare March 5, 2026 05:33

Gladorme reviewed Mar 18, 2026

View reviewed changes

sharangokul28 force-pushed the feature/splunk-plugin branch from d5a7aeb to 6c2c090 Compare April 1, 2026 07:11

[FEATURE] Splunk: new plugin for perses

d8a1e5d

Signed-off-by: Sharan Gokul <sharangokul@gmail.com>

sharangokul28 force-pushed the feature/splunk-plugin branch from 6c2c090 to d8a1e5d Compare April 1, 2026 09:02

sharangokul28 added 2 commits April 1, 2026 15:28

Merge branch 'perses:main' into feature/splunk-plugin

25b9015

Merge branch 'main' into feature/splunk-plugin

a051d29

	require github.com/perses/perses v0.53.0-beta.3
	require github.com/perses/perses v0.53.0-rc.0

-  try {
+  return await fetchJson<SplunkJobCreateResponse>(url.toString(), {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/x-www-form-urlencoded',
+      ...options.headers,
+    },
+    body: formData.toString(),
+  });

-  try {
+  return await fetchJson<SplunkJobStatusResponse>(url.toString(), {
+    method: 'GET',
+    headers: {
+      'Content-Type': 'application/json',
+      ...options.headers,
+    },
+  });

-export default function bootstrap() {
+import React from 'react';
+import ReactDOM from 'react-dom/client';
+const root = ReactDOM.createRoot(document.getElementById('root')!);
+root.render(<React.StrictMode></React.StrictMode>);

	require github.com/perses/perses v0.53.0-rc.0
	require github.com/perses/perses v0.53.1

-    "@perses-dev/components": "^0.53.0-rc.1",
+    "@perses-dev/components": "^0.53.1",
+    "@perses-dev/core": "^0.53.1",
+    "@perses-dev/plugin-system": "^0.53.1",

-  "version": "0.1.0",
+  "version": "0.1.0",
+  "homepage": "https://github.com/perses/plugins/blob/main/README.md",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/perses/plugins.git"
+  },
+  "bugs": {
+    "url": "https://github.com/perses/plugins/issues"
+  },

Conversation

sharangokul28 commented Jan 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Screenshots

Checklist

UI Changes

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

AntoineThebaud left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Gladorme left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Gladorme Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Gladorme commented Feb 25, 2026

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

sharangokul28 commented Jan 28, 2026 •

edited

Loading

Gladorme Feb 17, 2026 •

edited

Loading