Splunk - Incident Enrichment integration

---
title: Splunk - Incident Enrichment integration
description: The Splunk - Incident Enrichment integration searches your logs and adds relevant sighting information to your security incidents.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/splunk-in-enrich-landing-page.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: reference
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [Security Incident Response integrations, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Splunk - Incident Enrichment integration

The Splunk - Incident Enrichment integration searches your logs and adds relevant sighting information to your security incidents.

<table id="simpletable_g33_wwg_vt" class="simpletableBody"><tbody><tr><td>

Explore [Security Incident Response integrations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/sir_integrations.md)

</td><td>

Setup [Get started with the Splunk Search integration for Security Operations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/activate-configure-splunk-inc-enric.md)

</td></tr><tr><td>

Use -   [Run a Sightings Search](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/run-sightings-search.md)
-   [Security Operations Integration - Sightings Search Flow](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/secops-integration-sightings-search-workflow.md)
-   [Security Operations Integration - Splunk Sightings Search Flow](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/secops-integration-sightings-search-splunk-workflow.md)
-   [View Sightings Search Details](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/view-sightings-search-details.md)
-   [View Sightings Search Results](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/view-sightings-search-results.md)

</td><td>

Develop -   [ServiceNow Security Operations integration development guidelines](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/c_IntegrationWritingGuidelines.md)
-   [Tips for writing integrations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/c_BestPractisesIntegrations.md)
-   [Developer training](https://developer.servicenow.com/app.do#!/training/landing)
-   [Developer documentation](https://developer.servicenow.com/app.do#!/documentation)
-   [Find components installed with an application](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-administration/find-components.md)

</td></tr><tr><td>

Troubleshooting and Additional information -   [Integration troubleshooting](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/c_IntegrationTroubleshooting.md)
-   [Ask or answer questions in the Security Operations community](https://community.servicenow.com/community/security-operations)
-   [Search the Known Error Portal for known error articles](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0597477)
-   [Contact Customer Service and Support](https://support.servicenow.com/now?draw=case)

</td><td>

 

</td></tr></tbody>
</table>