概要
Splunk Assistant serves as the central orchestration hub for a modular framework designed to automate Splunk management and data retrieval. It implements a three-level progressive disclosure model that ensures secure authentication via JWT or Basic Auth, selects the optimal execution strategy (Oneshot, Normal, or Export) based on data volume, and enforces resource governance through automatic field reduction and job cleanup. By acting as an intelligent router, it seamlessly directs natural language queries to specific sub-skills for searching, job management, metadata discovery, and security audits, making it an essential tool for SREs and SOC analysts using Claude Code.
