Execute SPL searches and retrieve saved searches, alerts, and server health from Splunk.
npx skills add https://github.com/NCLGISA/trellis-catalog --skill splunk
Please help me install this Agent Skill. Skill: splunk Source: https://github.com/NCLGISA/trellis-catalog/tree/main/bridges/splunk/skills/splunk Command: npx skills add https://github.com/NCLGISA/trellis-catalog --skill splunk
This Skill provides programmatic access to Splunk for searching logs, retrieving saved searches, and monitoring alerts, streamlining security and operational analysis.
Use the splunk skill to search for all errors in the main index from the last 24 hours.
High-intent search queries and answers about installing and using this skill.
Automate Splunk log analysis by executing ad-hoc Search Processing Language (SPL) queries programmatically via the REST API. This enables rapid incident response by retrieving specific log data across your indexes without manual dashboard intervention.
Yes, you can retrieve triggered alerts and run saved searches from Splunk. The Skill interacts with the REST API to run predefined searches and pull alert information, streamlining your security and operational monitoring workflows.
Yes, the Splunk integration works with both Splunk Cloud and Splunk Enterprise. It connects programmatically via the Splunk REST API to support operational monitoring, index inventory queries, and SPL searches across both deployment types.
The best way to check Splunk server health and index inventory is by querying the Splunk REST API. This approach retrieves operational health status and index overviews directly, facilitating automated environment monitoring and maintenance.
Search Splunk logs for authentication failures by executing custom SPL queries against your indexes. This allows you to filter and retrieve specific event data from the last hour or any timeframe to investigate potential security incidents effectively.
chambear2809Automate installing, validating, and configuring Splunk Security Essentials via the Splunk REST API.
hmzainjamilAutomate security monitoring, threat detection, and incident response from enterprise logs.
ivegamsftAutomate security monitoring, threat detection, and incident response workflows for Kubernetes environments.
redhat-etCorrelate Ansible Automation Platform job logs with Splunk OpenShift pod logs.
