splunk-search

Convert natural language requests into SPL queries to search Splunk logs.

8|Updated Nov 26, 2025

Search Tags:#troubleshooting #logs #analysis #search #splunk #spl

Ready to run

npx skills add https://github.com/infiquetra/infiquetra-claude-plugins --skill splunk-search

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: splunk-search
Source: https://github.com/infiquetra/infiquetra-claude-plugins/tree/main/plugins/splunk/skills/splunk-search
Command: npx skills add https://github.com/infiquetra/infiquetra-claude-plugins --skill splunk-search

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps users search and analyze Splunk logs by converting natural language requests into SPL queries and executing them.

Core Features & Use Cases

Log Searching: Find errors, patterns, or specific events within Splunk indexes.
SPL Query Building: Translate natural language descriptions into Splunk Processing Language (SPL) queries.
Incident Correlation: Analyze logs around the time of PagerDuty incidents.
Performance Analysis: Investigate application behavior and performance metrics.

Quick Start

Use the splunk-search skill to find all errors from the wallet-service in the last hour.

Frequently Asked Questions about splunk-search

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I search Splunk logs using natural language instead of writing SPL queries manually?▼

You can search Splunk logs by describing your request in natural language. The tool translates your input into Splunk Processing Language (SPL) queries and executes them to find specific errors, patterns, or events within your indexes.

What do I need to connect and query Splunk indexes for log analysis?▼

To connect and query Splunk indexes for log analysis, you need to configure the environment variables SPLUNK_TOKEN and SPLUNK_HOST for authentication and connection to your Splunk instance.

Can I analyze application performance and correlate incidents using Splunk logs?▼

Yes, you can analyze application performance and correlate incidents using Splunk logs. The tool investigates application behavior, detects performance metrics, and analyzes log events around specific time ranges like PagerDuty incidents.

How does natural language processing translate into Splunk search queries?▼

Natural language processing translates into Splunk search queries by parsing your descriptive text input and mapping it to the corresponding Splunk Processing Language (SPL) syntax. This builds executable queries for log investigation across various indexes and time ranges.

What is the best way to troubleshoot errors across different Splunk indexes?▼

The best way to troubleshoot errors across different Splunk indexes is to use natural language interactions to build and execute targeted SPL queries. This allows you to search for specific error events, detect patterns, and analyze logs across specified time ranges.

What are the limitations of using natural language for Splunk log investigation?▼

A limitation of using natural language for Splunk log investigation is its reliance on accurate environment variables SPLUNK_TOKEN and SPLUNK_HOST. Without proper authentication and connection setup, the tool cannot build or execute SPL queries to search indexes.