Using the Splunk IM Terraform Provider

Using the Splunk IM Terraform Provider

Upcoming Classes


Instructor-led online training

Location Sep 2021 Oct 2021 Nov 2021 Dec 2021 Jan 2022 Feb 2022 Mar 2022
AMER Pacific Time - Virtual Oct 4 – Oct 5


This virtual 2-day course targeted towards DevOps, Observability and SRE teams is a follow-up to the course "Automation Using the REST and SignalFlow APIs". Learn to use the Splunk Terraform provider to manage Splunk IM resources for visualization, alerting and teams. Create and manage detectors and muting rules. Learn to create and modify teams including team notification policies.

All concepts are taught through discussions and hands-on lab exercises


  • Introduction to the Splunk Terraform provider
  • Manage chart resources
  • Manage dashboards and dashboard groups
  • Manage alerting resources
  • Manage teams resources


2 Days


Module 1 – Introduction to the Splunk Terraform Provider

  • Install terraform
  • Use the Splunk Terraform provider
  • Run a terraform plan

Module 2 – Manage Chart Resources

  • Create chart resources
  • Modify SignalFlow in the chart resources
  • Specify chart options

Module 3 – Manage Dashboards and Dashboard Groups

  • Create and modify dashboard groups
  • Create dashboard resources
  • Create datalinks

Module 4 – Manage Alerting Resources

  • Create and modify detector resources
  • Add multiple rules to a detector
  • Create a muting rule

Module 5 – Manage Teams

  • Create and modify team resources
  • Define team notification policies

Module 6 – Use Common Terraform Commands and Concepts

  • Define and use variables in Terraform
  • Use different options with Terraform plan and apply command
  • Work with the Terraform state file
  • Import existing Splunk IM resources


  • Automation Using the REST and SignalFlow APIs

Onsite Training

For groups of three or more

Request Quote

Public Training

AMER Pacific Time - Virtual

Don't see a date that works for you?

Request Class