---
title: Installing and configuring Splunk for PingIntelligence
description: To complete the configuration of Splunk for PingIntelligence, you need to create a source type.
component: pingintelligence
version: 5.2
page_id: pingintelligence:pingintelligence_reference_guide:pingintelligence_configure_splunk
canonical_url: https://docs.pingidentity.com/pingintelligence/5.2/pingintelligence_reference_guide/pingintelligence_configure_splunk.html
revdate: April 3, 2024
section_ids:
  about-this-task: About this task
  steps: Steps
  result: Result:
---

# Installing and configuring Splunk for PingIntelligence

To complete the configuration of Splunk for PingIntelligence, you need to create a source type.

## About this task

Creating a source type helps Splunk to understand the event format. The **source type** is one of the default fields that Splunk assigns to all the incoming data. Configuring the source type informs Splunk about the type of data ABS provides. This helps Splunk in formatting data intelligently during indexing.

To create a source type, complete the following steps:

## Steps

1. Configure a new source type by navigating to **Splunk Enterprise → Settings → Source Types → New Source Type**.

   ### Result:

   The **Source Type Events** page is displayed.

2. Configure the **New Source Type**.

   The fields are defined in the following table.

   | Name                    | Value                                           |
   | ----------------------- | ----------------------------------------------- |
   | **Source Type Name**    | `pi_events_source_type`                         |
   | **Destination app**     | Search and Reporting (Can change for your apps) |
   | **Category**            | Structures                                      |
   | **Indexed Extractions** | `json`                                          |
   | **SEDCMD-alter**        | `s/pi-attack-info-//`                           |

   ![A screenshot of the Edit Source Type page in PingIntelligence.](../_images/aoc1576566153846.png)

3. Create a new index `pi_events` by navigating to **Enterprise → Settings → Indexes → New Index**.

   ![A screenshot of the New Index page in PingIntelligence.](../_images/fzk1576572831979.png)