Can I run Splunk reports on-demand using this skill?

Yes, the skill includes a specific command to execute saved searches immediately and can even wait for the job to complete to provide the results.

What can I do with the Splunk Saved Search skill?

You can perform full lifecycle management (create, read, update, delete) on reports, scheduled searches, and alerts within your Splunk environment using Claude Code.

How do I manage alert schedules?

The skill provides dedicated scripts to enable or disable the scheduled execution of any saved search, making it easy to manage alert noise or maintenance windows.

Does this work with specific Splunk apps?

Yes, you can list and manage saved searches within specific Splunk apps by providing the app name as a parameter in the commands.

Is deleting a saved search permanent?

Deletion is a high-risk operation. While some Splunk configurations may be recoverable from backups, the skill treats deletion as a permanent removal of the search object.

Splunk Saved Search Manager

Name: Splunk Saved Search Manager
Author: grandcamel

bygrandcamel

분석 및 모니터링

Manages Splunk reports and scheduled searches via the Splunk REST API directly within Claude Code.

소개

This skill empowers Claude Code to interact directly with Splunk's reporting engine, allowing users to automate the complete lifecycle of saved searches and alerts. It provides a comprehensive toolset for creating new reports, updating existing search logic, managing execution schedules, and running searches on-demand. By integrating Splunk REST API automation into the development workflow, it streamlines observability, incident response, and data analysis tasks without leaving the terminal.

주요 기능

App-specific listing of saved searches and alerts
Detailed retrieval of search configurations and metadata
Full CRUD operations for Splunk reports and saved searches
On-demand execution of saved searches with result waiting
0 GitHub stars
Programmatic enabling and disabling of search schedules

사용 사례

Triggering and monitoring high-priority reports during active incident investigations
Automating the migration of reports and alerts between Splunk environments
Bulk updating search logic and time ranges across multiple saved reports

소개

주요 기능

App-specific listing of saved searches and alerts
Detailed retrieval of search configurations and metadata
Full CRUD operations for Splunk reports and saved searches
On-demand execution of saved searches with result waiting
0 GitHub stars
Programmatic enabling and disabling of search schedules

사용 사례

Triggering and monitoring high-priority reports during active incident investigations
Automating the migration of reports and alerts between Splunk environments
Bulk updating search logic and time ranges across multiple saved reports