splunk-observability-aws-integration

Render and apply Splunk Observability Cloud AWS integration definitions with drift detection.

36|7|Updated Mar 17, 2026
One-click install
npx skills add https://github.com/chambear2809/splunk-cisco-skills --skill splunk-observability-aws-integration
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: splunk-observability-aws-integration
Source: https://github.com/chambear2809/splunk-cisco-skills/tree/main/skills/splunk-observability-aws-integration
Command: npx skills add https://github.com/chambear2809/splunk-cisco-skills --skill splunk-observability-aws-integration

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires yaml_compat, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Create and manage a Splunk Observability Cloud AWS integration definition.

Core Features & Use Cases

  • Render a complete integration object from a template, then perform preflight, apply, and validate cycles without exposing secrets.
  • Discover drift by comparing rendered specs against live AWSCloudWatch integrations and propose safe updates.
  • Handoff coordinated work to related skills (IAM, CloudFormation/Terraform, dashboards, and logs integration) for end-to-end operations.

Quick Start

Render the AWS integration plan from the default template and inspect the generated artifacts.

Frequently Asked Questions about splunk-observability-aws-integration

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a Splunk Observability Cloud AWS integration definition?

To create a Splunk Observability Cloud AWS integration, use a render-first workflow that generates a complete integration object from a template, then performs preflight and apply cycles without exposing secrets. This supports standalone and multi-account setups.

How do I detect configuration drift in my AWS CloudWatch integration?

To detect drift in your AWS CloudWatch integration, compare rendered integration specs against live configurations to discover discrepancies. The tool then proposes safe, idempotent updates to reconcile the detected changes.

Does this Splunk AWS integration support Terraform-managed polling and metric streams?

Yes, the Splunk AWS integration supports Terraform-driven paths alongside Splunk-managed and AWS-managed metric streams. It renders the canonical schema for polling configurations and applies them without exposing secrets.

What is the best way to manage AWS multi-account setups in Splunk Observability?

The best way to manage AWS multi-account setups in Splunk Observability is by rendering a canonical integration template that enforces schema validation. This approach records idempotent apply steps for creation and updates across all accounts.

Can I coordinate IAM and CloudFormation tasks after rendering the AWS integration?

Yes, after rendering the AWS integration you can hand off coordinated work to related skills. This allows you to manage IAM permissions, CloudFormation or Terraform deployments, dashboards, and logs integration for end-to-end operations.

Why do I need to render an AWS integration plan before applying it?

Rendering an AWS integration plan before applying it enforces the canonical schema and prevents secrets leakage during creation and updates. This preflight step ensures the generated artifacts are validated before any live changes occur.