splunk-mcp-server

MCP server with splunk integration

This MCP server was generated using the Template Orchestrator and includes the following integrations:

Available Tools

This MCP server provides 25 tools across 1 integrations:

Splunk Tools

• splunk_create_search: Create a new search job and return a search ID for result retrieval
• splunk_export_search: Stream search results as they become available without creating a search ID
• splunk_get_search_job: Get search job status and metadata
• splunk_get_search_results: Get transformed search results from a completed search job
• splunk_get_search_events: Get raw untransformed events from a search job
• splunk_control_search_job: Execute control commands on a search job (pause, cancel, finalize, etc.)
• splunk_delete_search_job: Delete a search job and free up resources
• splunk_list_search_jobs: List all search jobs for the authenticated user
• splunk_create_saved_search: Create a new saved search configuration
• splunk_get_saved_search: Get configuration of a specific saved search
• splunk_list_saved_searches: List all saved searches accessible to the user
• splunk_update_saved_search: Update configuration of an existing saved search
• splunk_delete_saved_search: Delete a saved search configuration
• splunk_list_indexes: List all available indexes in the Splunk instance
• splunk_create_index: Create a new index for data storage
• splunk_get_index: Get configuration and details of a specific index
• splunk_update_index: Update configuration of an existing index
• splunk_delete_index: Delete an index and all its data
• splunk_list_inputs: List all data inputs configured in Splunk
• splunk_create_http_input: Create a new HTTP Event Collector (HEC) input
• splunk_get_app_info: Get server information including version, build, and licensing
• splunk_list_apps: List all installed applications
• splunk_get_app: Get details of a specific application
• splunk_create_alert: Create an alert based on a saved search
• splunk_list_fired_alerts: List all fired alerts

Installation

npm install @coretext-ai/qa-splunk-d24f6210-2b13-48ae-be2e-fc89afaee229

Environment Setup

Create a .env file with the following variables:

SPLUNK_API_KEY=your_splunk_api_key_here
SPLUNK_EMAIL=your_splunk_email_here

Usage

Running the server

# Development mode
npm run dev

# Production mode
npm run build && npm start

Using with Claude Desktop

Add this to your Claude Desktop configuration:

{
  "mcpServers": {
    "splunk-mcp-server": {
      "command": "npx",
      "args": ["@coretext-ai/qa-splunk-d24f6210-2b13-48ae-be2e-fc89afaee229"],
      "env": {
        "SPLUNK_API_KEY": "your_splunk_api_key_here",
        "SPLUNK_EMAIL": "your_splunk_email_here"
      }
    }
  }
}

Instructions for Fetching API Keys/Tokens

• COMING SOON

Generated Information

• Generated at: Thu Jul 24 2025 03:05:56 GMT+0000 (Coordinated Universal Time)
• Orchestrator version: 0.0.2
• Template repository: Coretext-AI-Dev/server-template-v2
• Total endpoints: 25