TA Studio

TA Studio is a browser-based visual workbench for building Splunk® add-ons (TAs) on the Universal Configuration Console (UCC) Framework — without touching the command line. Authoring a quality add-on normally means working with the ucc-gen CLI, hand-editing globalConfig.json and a web of .conf files, and running AppInspect and packaging from a terminal. TA Studio replaces that workflow with a guided, point-and-click interface that runs entirely inside your own Splunk instance. From one UI you can create and manage data inputs (REST API, shell command, or Python modular inputs), alert actions (including Enterprise Security adaptive response), source types, field extractions with a live regex builder, CIM data model mappings, setup pages (accounts, proxy, logging), CSV lookups, and event types. You can import existing Splunk Add-on Builder and conf-based add-ons to modernize them, run inputs and alert actions right in the browser to inspect the events and output they produce, validate with AppInspect (including cloud checks) and review the results, then package a Splunkbase-ready archive in one click. TA Studio also includes built-in AI assistance to help you generate and refine input and alert-action code as you work. It otherwise runs entirely within your local Splunk environment: your add-on projects are not collected, transmitted, or stored outside your instance, and AI features send only the content you choose to submit to your selected AI provider.