Skip to content
This repository

Twitter application for Splunk

branch: master

Bumped version number from 2.3 to 2.3.1 so that the app could be uplo…

…aded to and--most importantly--customers have a path for upgrading from 2.3 to 2.3.1.

Signed-off-by: David Noble <>
latest commit 59b507255e
David Noble David-Noble-at-work authored September 16, 2013
Octocat-spinner-32 twitter2
Octocat-spinner-32 .gitignore
Octocat-spinner-32 LICENSE

Splunk-Twitter Connector

This app provides a scripted input for Splunk that automatically extracts tweets from Twitter's 1% sample stream. It is tested on Splunk 5.0.4.

A number of dashboards and searches are also included to demonstrate how Splunk can be used to visualize Twitter activity.


  • Install the app by copying the twitter2 directory to $SPLUNK_HOME/etc/apps/twitter2.

  • (Re)start Splunk so that the app is recognized.

  • In the Splunk web interface, from the App menu, select the Splunk-Twitter Connector app and press "Continue to app setup page".

  • Enter the OAuth settings for a Twitter application that will be used to access tweets from the sample stream and click "Save".

    If you don't already have a Twitter account, you can sign up for one at If you need to create a Twitter application for accessing tweets, you can create one at It need only be enabled for read access to Twitter data. See for details on the Twitter application permission model

  • Wait 15 seconds or so for some tweets to be extracted.

  • Run the search index=twitter in Splunk to see the events. If you don't see any events, open $SPLUNK_HOME/var/log/splunk/splunkd.log and look for errors issued by ExecProcessor related to the $SPLUNK_HOME/etc/apps/twitter2/bin/ script.

Dashboards and Searches

Views > Twitter General Activity

Provides information about trending activity during the last 15 minutes.

Views > Twitter Per-User Activity

Drills down into activity related to a particular user or hashtag.

This view could be used as a social dashboard for tracking activity related to a user of interest.

Searches & Reports > Tweet Locations

NOTE: This view requires the Google Maps application from SplunkBase to be installed.

Displays the locations of tweets on a map.


This software is licensed under the Apache License 2.0. Details can be found in the file LICENSE.

Something went wrong with that request. Please try again.