splunk-observability-native-ops

Automates end-to-end configuration of Splunk Observability Cloud operations with render-first safety gates.

36|7|Updated Mar 17, 2026
One-click install
npx skills add https://github.com/chambear2809/splunk-cisco-skills --skill splunk-observability-native-ops
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: splunk-observability-native-ops
Source: https://github.com/chambear2809/splunk-cisco-skills/tree/main/skills/splunk-observability-native-ops
Command: npx skills add https://github.com/chambear2809/splunk-cisco-skills --skill splunk-observability-native-ops

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires PyYAML, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This skill helps configure native Splunk Observability Cloud operations using a render-first workflow with explicit safety controls, enabling deterministic updates to detectors, alert routing, muting rules, SLOs, and related surfaces.

Core Features & Use Cases

  • Render and validate native-ops specs for detectors, alert routing, muting rules, slo_links, synthetics, apm, rum, logs, and on_call, generating payloads, deeplinks, and handoffs.
  • Apply changes only when explicitly requested, with realm awareness and token-based authentication, ensuring safe, auditable changes.

Quick Start

Render a native-ops spec with the provided SKILL and review the generated assets before applying.

Frequently Asked Questions about splunk-observability-native-ops

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Splunk Observability detector configuration and alert routing?

You render native-ops specs to generate payloads and deeplinks for Splunk Observability detectors and alert routing. The workflow validates rules and creates handoffs before any live changes are applied to your environment.

What is a render-first workflow for Splunk Observability Cloud operations?

A render-first workflow generates Splunk Observability payloads, deeplinks, and handoffs for review before execution. It enforces validation rules and requires explicit safety gates to apply any live changes to your environment.

Can I apply muting rules and SLOs across multiple Splunk Observability surfaces?

Yes, you can apply muting rules and SLOs across Splunk Observability detectors, synthetics, APM, RUM, and logs. The skill restricts API surfaces to documented endpoints and blocks unsupported services during configuration.

What do I need to apply live changes to Splunk Observability native ops?

To apply live changes to Splunk Observability native ops, you need a rendered plan, realm context, and an authentication token. The skill enforces these requirements to ensure safe and auditable updates.

Does Splunk Observability automation support On-Call handoffs?

Yes, Splunk Observability automation supports On-Call handoffs by generating them as part of the rendered native-ops spec. This ensures deterministic updates are properly routed and validated before execution.

Why are unsupported services blocked during Splunk Observability configuration?

Unsupported services are blocked during Splunk Observability configuration to enforce validation rules and restrict API surfaces to documented endpoints. This prevents unauthorized or unsafe changes to detectors and alert routing.