---
title: "Splunk Query"
method: POST
path: "/data-explorer/splunk/query"
---

# Splunk Query

`POST /data-explorer/splunk/query`

## Request

- Base URL: `https://api.traversal.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.traversal.com/data-explorer/splunk/query`
- Auth: none declared

## Request body

- SplunkQueryRequest
  - `organization_id` string, uuid, nullable: Organization whose integrations to query. Platform admins may select any org; omit to use the caller's current organization.
  - `instance` string, uuid, required: Organization-scoped integration instance UUID. The frontend receives this from GET /data-explorer/config and must not invent connector IDs.
  - `query` string, required
  - `earliest` string
  - `latest` string
  - `max_rows` integer

## Response `200`

Successful Response

- object

## Other responses

- `422`: Validation Error

## Changes

> 66 revisions in range; 9 not diffed.

- **2026-08-27** `5b3d8e378765`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/traversal/apis/traversal-api/changes/data-explorer/splunk/query/post.md)

---

[API](https://skmtc.dev/traversal/apis/traversal-api.md) - [All operations](https://skmtc.dev/traversal/apis/traversal-api/llms.txt) - [OpenAPI document](https://skmtc.dev/traversal/apis/traversal-api/revisions/31e1a8b7cf89?raw)