Splunk
OfficialConnect AI assistants to Splunk data with SPL queries, index metadata, and RBAC enforcement.
Tools (9)
splunk_get_info
Get comprehensive information about the Splunk instance. Retrieves system information including version, hardware specs, and operational status.
splunk_get_indexes
Get a list of indexes from Splunk. Indexes are data repositories where machine data is stored and organized.
splunk_get_index_info
Get detailed information about a specific Splunk index. Returns comprehensive configuration and status information for the specified index.
splunk_get_user_list
Get a list of users from Splunk. Retrieves information about all users including authentication details, roles, and account status.
splunk_get_user_info
Retrieves detailed information about the currently authenticated user including roles and permissions. Returns comprehensive user profile data for the current session.
splunk_run_query
Execute a Splunk search query and return the results. This is the primary tool for running Splunk searches using SPL (Search Processing Language). Use this to retrieve log data, perform aggregations, analyze events, and extract insights from your Splunk environment.
splunk_get_metadata
Retrieve metadata about hosts, sources, or sourcetypes across one or more indexes in the selected time window.
splunk_get_kv_store_collections
Get KV Store collection statistics including size, count, and storage information. Retrieves comprehensive metrics about all KV Store collections in the Splunk instance.
splunk_get_knowledge_objects
Retrieve Splunk knowledge objects by type. Supports various knowledge object types including saved searches, alerts, field extractions, lookups, macros, data models, and more.