correct Splunk Input documentation
@@ -16,20 +16,15 @@ under the License.
////
:documentationPath: /pipeline/transforms/
:language: en_US
-
+:description: The Splunk Input transform runs a Splunk search query and returns the result as a set of Hop fields
= Splunk input
== Description
-This transform allows you to split a row containing a delimited field into multiple new rows, one per split value.
-The original row is not delivered to following transforms.
-The original field is left in each new row to assist in debugging or error handling.
-It can be removed via a Select Values transform if needed.
+The Splunk Input transform runs a Splunk search query and returns the result as a set of Hop fields
-The original field must be a string field.
-A new field name must be specified.
-If the value type/format of the new row is not specified, the new field will use the same type/format as the original field.
+Check the xref:metadata-types/splunk-connection.adoc[Splunk Connection docs] for more information about creating a Splunk connection.
== Options
@@ -37,8 +32,13 @@ If the value type/format of the new row is not specified, the new field will use
|===
|Option|Description
|Transform name|Name of the transform.
-|Field to split|The field you want to split
-|Delimiter|The delimiter or separator used.
-Special characters (e.g. CHAR ASCII HEX01) can be set with the format $[value], e.g. $[01] or $[6F,FF,00,1F].
-|New name field|The name of the new field
+|Splunk Connection|The Splunk connection to use
+|Query|The Splunk search query to run
+|Returns a|The list of fields returned by the Splunk query:
+
+* Field name: the field name to store as an output field for this transform
+* Splunk name: the field name (key) returned by the Splunk search
+* Return type: search result field data type
+* Length: length of the result field
+* Format: format for the result field
|===
