# Splunk integration

Connect your Splunk instance so Anyshift can analyze logs, metrics, and correlate events with infrastructure changes for faster troubleshooting.

Source: https://anyshift.io/for-agents/integrations/splunk

## Availability

- Available.

## Capabilities

- Authenticate via Splunk API tokens

- Query Splunk indexes during incident triage

- Correlate Splunk alerts with cloud resource changes

## Connect and verify

- Check the intended project's existing integration before adding a connection.

- Verify that the resources and time window needed for the task are covered. Connection status alone does not establish that the evidence is available.

[Splunk setup and permissions](https://docs.anyshift.io/pages/onboarding/overview_integrations)

## Use cases

- Find the log line matching a failing deploy in seconds

- Map a Splunk alert back to the resource graph

## Continue

[All integrations](https://anyshift.io/for-agents/integrations)

[Query your project with Graph MCP](https://anyshift.io/for-agents/product/context)