Splunk integration

Investigate AI governance events in Splunk

An alert is the starting point. VeriProof adds policy outcomes and risk context to Splunk, with links to the decision records your analysts need to investigate.

Two ways to work with Splunk

Investigate individual governance events with the Splunk integration on this page. For operational metrics and application-health trends, explore Splunk Observability Cloud.

Find the event, then follow the decision

CIM Alerts

Search governance activity

Filter the included dashboard by application, environment, event, outcome, or risk. No search query is needed. Alerts map to Splunk's Common Information Model.

Session links

Open the supporting record

Event links take authorized analysts to the supporting application or session in VeriProof, with existing access permissions intact.

Delivery limits

Control scope and volume

Keep ingestion focused. Choose the application groups, environments, and event types to send, then set limits on rate, daily volume, and event size.

Share event context, keep session content in VeriProof

Splunk receives selected event fields. Prompts, responses, evidence content, and subject data stay out of the feed; authorized analysts can open the VeriProof record for context.

Manage delivery from the customer portal

Choose which events to send and set delivery limits. A test event confirms the connection before delivery starts. Administrators receive a notification when repeated delivery failures need attention.

Available for VeriProof SaaS

Connect VeriProof SaaS to a public Splunk Cloud or Splunk Enterprise HTTP Event Collector endpoint. The VeriProof add-on provides CIM Alerts mapping and a dashboard with links to session records.

Bring governance context into your investigations

Tell us which events your analysts need. We can discuss the feed, dashboard, and delivery scope that fit your team.