Per-pair page

Connect Slack to Splunk in two minutes.

Real-time triggers from Slack, ready-made actions in Splunk. Filter, transform, and route without writing a line of code.

Connect Slack and Splunk See reverse direction

Trigger app

Slack as the trigger

Workflows fire when something happens in Slack.

See all 13 triggers →

Action app

Splunk as the action

Workflows do something in Splunk, instantly.

Splunk Send Event (HEC)API

Both directions

Pick the way that fits your stack.

Pair pages are mirrored. Each direction gets its own dedicated page.

Slack → Splunk

When something happens in Slack, do it in Splunk.

13 Slack triggers wired to 1 Splunk actions. Most-used pairing: App Home Opened → Splunk Send Event (HEC).

Splunk → Slack

Or fire it the other way around.

0 Splunk triggers wired to 45 Slack actions downstream.

Use any trigger in the catalog as the upstream.

See Splunk → Slack →

Popular pairings

Common Slack → Splunk workflows.

Pick a pairing to set it up in two minutes. Each one is a fully editable recipe.

Showing 3 of 13 combinations

When app home opened in Slack, splunk send event (hec) in Splunk.

Fires when a user opens your Slack app's Home tab or DM. Useful for refreshing the Home view, lazy-loading user-specific data, or tracking app engagement.

When app mentioned in Slack, splunk send event (hec) in Splunk.

Fires when your Slack app is mentioned in a message. The standard hook for chatbots that answer when summoned with @your-app.

When new channel in Slack, splunk send event (hec) in Splunk.

Fires when a new Slack channel is created in the workspace. Useful for auto-adding the bot, welcome messages, or governance audit logs.

How it works

Connect Slack and Splunk in five steps.

No code, no glue, no half-day setup. Each step is one click.

1
Connect
Authorize Slack and Splunk
Open Tiny Command, authorize Slack and Splunk once each. Both connections are available to every workflow on your account.
2
Trigger
Pick a Slack trigger
Drop the Slack → App Home Opened trigger onto the canvas. Tiny Command auto-registers the webhook.
POST /v1/webhooks/slack.trigger-app-home-opened
3
Transform
Add a filter or AI step
Optionally add a Filter node ("subject contains URGENT") or an AI step ("classify intent") between trigger and action.
4
Action
Add the Splunk action
Drop the Splunk → Splunk Send Event (HEC) action below it. Map fields from the Slack payload into the Splunk inputs.
splunk.send-event
5
Publish
Publish and forget
Hit Publish. Tiny Command runs it in production from second one. Watch the run-log fill up.

FAQ

Questions about Slack + Splunk.

How long does it take to connect Slack and Splunk on Tiny Command?

Under two minutes. Authorize Slack and Splunk once each, drop the Slack trigger and Splunk action onto a workflow canvas, map a couple of fields, and publish. No code, no glue.

Is the Slack ↔ Splunk integration real-time?

Yes. Both Slack and Splunk expose webhooks, so events from one fire workflows in the other within seconds rather than on a polling interval.

Can I filter or transform data between Slack and Splunk?

Yes. Add a Filter node to only pass through matching events, a Switch node to branch by value, or an AI / Code node to transform payloads before they hit Splunk.

What Slack events can trigger a Splunk workflow?

Any of the 13 Slack triggers, including "App Home Opened". Each fires in real time when the matching event happens in Slack.

Do I need a paid plan to use Slack with Splunk?

No. There's a free tier that covers most Slack+Splunk use cases without a credit card. Paid plans unlock higher run volumes and team features when you outgrow it.

What if I want Splunk → Slack instead?

Build it the same way, in reverse. There's a dedicated /integrations/splunk/with/slack page with the reverse-direction triggers and actions.

Other apps that pair well with Slack.

Slack + Gmail

Slack + Google Sheets

Spreadsheets & Databases