Manages Splunk reports and scheduled searches via the Splunk REST API directly within Claude Code.
This skill empowers Claude Code to interact directly with Splunk's reporting engine, allowing users to automate the complete lifecycle of saved searches and alerts. It provides a comprehensive toolset for creating new reports, updating existing search logic, managing execution schedules, and running searches on-demand. By integrating Splunk REST API automation into the development workflow, it streamlines observability, incident response, and data analysis tasks without leaving the terminal.
Key Features
01App-specific listing of saved searches and alerts
02Detailed retrieval of search configurations and metadata
03Full CRUD operations for Splunk reports and saved searches
04On-demand execution of saved searches with result waiting
050 GitHub stars
06Programmatic enabling and disabling of search schedules
Use Cases
01Triggering and monitoring high-priority reports during active incident investigations
02Automating the migration of reports and alerts between Splunk environments
03Bulk updating search logic and time ranges across multiple saved reports
