Splunk Agent Skills
Discover skills designed to guide your AI agent to work more efficiently and consistently and deliver better outcomes with Splunk.
Alerting and Notable Workflows
Assess Splunk alert, notable, and risk workflows safely
App and Add-on Lifecycle Advisor
Assess Splunk app lifecycle readiness safely
Custom Visualization Builder
Build, package, install, and migrate Splunk dashboard custom visualizations.
Dashboard, Report, and Alert Performance Advisor
Assess object latency and scheduling without changes
Data Model and Search Acceleration
Assess Splunk acceleration readiness and summary health safely
Data Source Onboarding Advisor
Plan evidence-bound Splunk source onboarding and acceptance.
Deployment Server and Forwarder Fleet Management
Plan and diagnose Splunk forwarder fleet delivery
Field Extraction and CIM Mapping
Author and validate Splunk field and CIM mappings
Forwarder and Data Ingest Doctor
Diagnose forwarder and ingest paths safely.
HEC Setup and Troubleshooting
Set up and troubleshoot Splunk HEC safely
Incident Diagnosis Specialist
Diagnose post-triage multi-component Splunk incidents safely.
Index and Storage Management Advisor
Design Splunk indexes, retention, storage, and SmartStore safely
Indexer Cluster Health and Troubleshooting
Assess indexer-cluster health and readiness without changes
Ingestion Pipeline Design
Design evidence-bound Splunk ingestion pipelines
Knowledge Object Governance
Review Splunk knowledge-object governance safely
Splunk License and Capacity Planning Advisor
Separate entitlement lifecycle from evidence-based capacity planning.
Report Authoring Specialist
Define report contracts and readiness without changes
Search and Dashboard Troubleshooter
Diagnose broken Splunk searches and saved objects from evidence.
Search Head Cluster Health and Troubleshooting
Assess SHC health and rolling readiness without changes
Search Performance Optimizer
Optimize existing Splunk searches from evidence
Splunk Cloud Admin Copilot
Safely operate one approved Splunk Cloud IP allowlist CIDR.
Splunk Dashboard Converter
Convert classic Simple XML dashboards into Dashboard Studio (v2) dashboards while preserving SPL.
Splunk Enterprise Administration Advisor
Advise on Splunk Enterprise users, roles, precedence, ownership, and validation read-only.
Splunk Health Monitoring and Diagnostic Collection
Collect and interpret Splunk health evidence.
Splunk Identity and SAML Readiness Advisor
Diagnose Splunk SAML, LDAP, roles, mappings, and access read-only.
Splunk Product Question Navigator
Answer current Splunk product questions from public evidence.
Splunk Search
Run bounded read-only Splunk searches through splunkctl.
Splunk Setup Page Builder
Build a certification-compliant first-run setup page for a Splunk app or add-on, using the configurations REST endpoint and storage/passwords instead of the deprecated setup.xml mechanism.
Upgrade and Security Readiness Router
Route Splunk upgrade and security readiness requests
Upgrade and Vulnerability Readiness Advisor
Assess Splunk upgrade and security-patch readiness
Upgrade Planning and Execution Readiness
Plan cited, evidence-backed Splunk upgrades
Vulnerability Remediation and Compliance Readiness
Assess Splunk vulnerability and compliance readiness