skills.rest
automateyournetwork
automateyournetworkCOMMUNITY
Explore all skills by this author →
Website𝕏@john_capobiancoGitHub

splunk-saved

Lists and executes saved searches in Splunk via the splunk-mcp server.

650|182|Updated Feb 19, 2026
Search Tags:#mcp#network monitoring#siem#splunk#saved searches#Log Analysis#Observability
One-click install
npx skills add https://github.com/automateyournetwork/netclaw --skill splunk-saved
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: splunk-saved
Source: https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/splunk-saved
Command: npx skills add https://github.com/automateyournetwork/netclaw --skill splunk-saved

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Running recurring Splunk queries manually through the web UI is repetitive and hard to integrate into automated network operations workflows. This Skill lets you list and execute saved searches directly through natural language, so scheduled reports and operational queries become conversational commands.

Core Features & Use Cases

  • List Saved Searches: Retrieve all saved searches available on the Splunk server, optionally filtered by app context.
  • Execute Saved Searches: Run any saved search by name and get results without opening the Splunk web interface.
  • Use Case: A network operator asks to run the "Network Health Summary" saved search each morning and review the results inline, instead of logging into Splunk and navigating to the report manually.

Quick Start

Ask the agent to run the "Network Health Summary" saved search in Splunk and show the results.

Frequently Asked Questions about splunk-saved

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a saved search in Splunk from an AI agent?▼

Use the run_saved_search tool with the exact name of the saved search, for example "Network Health Summary". The skill connects through the splunk-mcp server and returns the search results directly in the conversation.

How do I list all saved searches in Splunk?▼

Call the get_saved_searches tool to retrieve every saved search on the connected Splunk server. You can also scope the listing to a specific app, such as the network app, by mentioning it in your request.

What credentials does the Splunk MCP integration need?▼

It requires four environment variables: SPLUNK_HOST for the server hostname, SPLUNK_PORT for the management port (default 8089), and SPLUNK_USERNAME plus SPLUNK_PASSWORD for a service account with permission to view and run saved searches.

Can I create or edit Splunk saved searches with this skill?▼

No. This skill only supports listing existing saved searches and executing them by name. Creating, modifying, or deleting saved searches must be done through the Splunk web UI or REST API directly.

Why does running a saved search fail with a connection error?▼

Connection failures usually mean SPLUNK_HOST or SPLUNK_PORT is incorrect, the management port 8089 is blocked by a firewall, or the service account credentials are invalid. Verify the environment variables and network reachability to the Splunk management API.

Related Skills

Explore More Software Engineering Skills→
NCLGISANCLGISA

splunk

Execute SPL searches and retrieve saved searches, alerts, and server health from Splunk.

Official
Intermediate
dgethingsdgethings

slack-network-alerts

Format and deliver network alerts to Slack with Block Kit attachments.

Community
Intermediate
williamzujkowskiwilliamzujkowski
6

Observability Unified Dashboard

Designs unified observability dashboards correlating metrics, logs, and traces across Prometheus, Loki, Tempo, and Grafana 11.

Community
Advanced
PostHogPostHog
58

feature-flags-php

Implement and evaluate PostHog feature flags in PHP applications.

Official
Advanced