splunk-knowledge-objects-setup

Community

Render and govern Splunk knowledge objects safely.

Authorchambear2809
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Governance and automation for Splunk knowledge objects (saved searches, macros, lookups, eventtypes, and tags), including ACLs, ownership, and app-scoped sharing.

Core Features & Use Cases

  • Render and preview stanzas for saved searches, macros, transforms, eventtypes, and tags with ACL plans before applying.
  • Apply object configurations to a Splunk app via REST with optional global sharing and per-role access.
  • Use-case: A security operations team wants consistent sharing and ownership across multiple apps while auditing changes.

Quick Start

Install and run the renderer to generate knowledge-object assets, validate the rendered plan, and apply it to the Splunk instance with an optional dry-run.

Dependency Matrix

Required Modules

None required

Components

scriptsreferences

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: splunk-knowledge-objects-setup
Download link: https://github.com/chambear2809/splunk-cisco-skills/archive/main.zip#splunk-knowledge-objects-setup

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 510,000+ vetted skills library on demand.