splunk-mcp
If you are the rightful owner of splunk-mcp and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.
A FastMCP-based tool for interacting with Splunk Enterprise/Cloud through natural language.
Splunk MCP is a tool designed to facilitate interaction with Splunk Enterprise/Cloud using natural language. It leverages the FastMCP framework to provide a seamless interface for executing searches, managing KV stores, and accessing various Splunk resources. The tool operates in three modes: SSE, API, and STDIO, each catering to different use cases and client types. With features like async support, detailed logging, and comprehensive error handling, Splunk MCP ensures efficient and reliable communication with Splunk instances. It also includes robust testing and debugging capabilities, making it a versatile tool for both development and production environments.
Features
- Splunk Search: Execute Splunk searches with natural language queries
- Index Management: List and inspect Splunk indexes
- User Management: View and manage Splunk users
- KV Store Operations: Create, list, and manage KV store collections
- Async Support: Built with async/await patterns for better performance
Tools
Tools Management
List all available MCP tools
Health Check
Verify connectivity and server status
User Management
Manage user information
Index Management
Manage index information
Search
Perform a Splunk search
KV Store
Manage KV storage collections