Splunk Agent Skills

Warning

These skills are experimental. They are not covered by existing Splunk support contracts. Review Support before using them.

This repository contains reusable skills for AI agents working with Splunk.

Skills

Skill	Purpose
splunk-search	Run bounded Splunk SPL searches through the splsearch CLI, save large result sets as local SQLite tables, and inspect them with focused summaries, text search, ordered events, or bounded SQL.
splunk-dashboard-converter	Convert classic Splunk Simple XML dashboards (version 1) into Dashboard Studio (version 2), preserve every SPL query verbatim, and return the Studio JSON definition to the caller.
custom-visualization-builder	Scaffold, build, package, and install a custom visualization into Splunk using the dashboard-studio-extension framework.

Each skill is self-contained under skills/. The lowercase tools/splsearch directory contains the Go source for the helper CLI used by splunk-search.

Install and use

This repository uses the skills/<name>/SKILL.md layout expected by compatible AI coding agents.

Available skill IDs:

• custom-visualization-builder
• splunk-dashboard-converter
• splunk-search

List the skills before installing:

npx skills add splunk/splunk-agent-skills --list

Run one of these commands from a project root to copy all three skills for the selected agent:

npx skills add splunk/splunk-agent-skills --skill '*' --agent claude-code --copy --yes
npx skills add splunk/splunk-agent-skills --skill '*' --agent codex --copy --yes
npx skills add splunk/splunk-agent-skills --skill '*' --agent cursor --copy --yes
npx skills add splunk/splunk-agent-skills --skill '*' --agent github-copilot --copy --yes
npx skills add splunk/splunk-agent-skills --skill '*' --agent gemini-cli --copy --yes
npx skills add splunk/splunk-agent-skills --skill '*' --agent opencode --copy --yes

Project scope is the default. Add --global to install into the selected agent's user-level skills directory instead. To copy only one skill, name it with --skill:

npx skills add splunk/splunk-agent-skills --skill splunk-search --agent codex --copy --yes

For a manual installation, clone or download this repository and copy the desired directory from skills/ into the skills directory configured for the agent. Read the selected SKILL.md before use; it defines the prerequisites, workflow, and safety boundaries for that skill.

The skills CLI installs skill directories; it does not install external executables. The splunk-search skill also requires the splsearch CLI on PATH. With Go 1.21 or later installed, clone this repository and build the CLI:

git clone https://github.com/splunk/splunk-agent-skills.git
cd splunk-agent-skills
make -C tools/splsearch build
export PATH="$PWD/tools/splsearch/bin:$PATH"
splsearch --help

Then use the installed skill through your agent according to its normal skill invocation workflow.

Policies

• Support
• Security
• Apache License 2.0