claudecodex

splunk-platform

Operational skills for Splunk Platform, Splunk Cloud Platform, Splunk Enterprise, collectors, and data-source integrations.

6 on GitHubby Cisco DevNetv0.1.0Apache-2.0updated 20 days agoobservability
/

Plugin splunk-platform from marketplace cisco-skills in CiscoDevNet/skills. Commands read from the repo's manifest — 19 days ago.

What it installs

Skills (87)

  • cisco-appdynamics-setup

    Use when the user asks about AppDynamics setup, Splunk_TA_AppDynamics, controller connections, analytics connections, or AppDynamics dashboards in Splunk. Automate Cisco Splunk Add-on for AppDynamics (Splunk_TA_AppDynamics) setup and configuration. Creates the AppDynamics index, sets add-on defaults

  • cisco-asa-ta-setup

    Use when onboarding or validating Cisco ASA or FTD syslog with Splunk_TA_cisco-asa and SC4S. product: splunk-platform maturity: draft

  • cisco-catalyst-enhanced-netflow-setup

    Use when installing or validating Cisco HSL/IPFIX mappings and Enhanced NetFlow dashboards in Splunk. product: splunk-platform maturity: draft

  • cisco-catalyst-ta-setup

    Use when configuring or validating Catalyst Center, ISE, Catalyst SD-WAN API or syslog collection, Cyber Vision, or the beta IOS-XE CLI collector with TA_cisco_catalyst. product: splunk-platform maturity: draft

  • cisco-cloud-control-setup

    Use when the user asks to prepare Cisco Cloud Control, AgenticOps, AI Canvas, Cloud Control Studio, Cloud Control Workflows, or governed Cisco/Splunk agent execution workflows. Render, validate, doctor, and optionally execute delegated setup plans for Cisco Cloud Control adoption, AI Canvas readines

  • cisco-collaboration-setup

    Use when planning or reviewing Splunk onboarding for Cisco Unified Communications Manager syslog, CDR, or CMR; Cisco Expressway syslog, CDR, or media evidence; Cisco Meeting Server syslog or XML CDR; or Cisco Meeting Management system and audit syslog. Render a privacy-safe, evidence-gated collabora

  • cisco-data-fabric-setup

    Use when users need Cisco Data Fabric architecture, feature or product coverage, readiness assessments, gap analysis, machine-data activation, federation targets, storage tiering, AI-ready data, or AgenticOps data foundation requests. Distinguish this architecture from a single product, package, ent

  • cisco-dc-networking-setup

    Use when the user asks about Cisco DC networking, ACI, APIC, Nexus Dashboard, Nexus 9K TA setup, Splunk TA automation, or cisco_dc_networking_app_for_splunk. Automate Cisco DC Networking TA setup and configuration on Splunk. Creates indexes, configures ACI/Nexus Dashboard/Nexus 9K accounts, enables

  • cisco-enterprise-networking-setup

    Use when the user asks about Cisco Enterprise Networking app, cisco-catalyst-app, Catalyst dashboards, ISE dashboards, SD-WAN dashboards, or Cyber Vision dashboards. Automate Cisco Enterprise Networking for Splunk Platform (cisco-catalyst-app) setup. Configures index macros, sourcetype macros, saved

  • cisco-intersight-setup

    Use when configuring or validating Cisco Intersight audit, inventory, alarm, or metrics inputs in Splunk. product: splunk-platform maturity: draft

  • cisco-meraki-ta-setup

    Use when configuring Cisco Meraki organization accounts, API inputs, or dashboards in Splunk. product: splunk-platform maturity: draft

  • cisco-scan-setup

    Use when the user asks about SCAN, Cisco App Navigator, product catalog, ecosystem intelligence, or splunk-cisco-app-navigator setup in Splunk. Automate Splunk Cisco App Navigator (SCAN) setup and validation. Installs the splunk-cisco-app-navigator app from a local package, verifies the product cata

  • cisco-secure-access-setup

    Use when configuring Cisco Secure Access accounts, event collection, indexes, or Splunk dashboards. product: splunk-platform maturity: draft

  • cisco-secure-email-web-gateway-setup

    Use when onboarding Cisco ESA or WSA logs through supported Splunk add-ons and managed ingestion. product: splunk-platform maturity: draft

  • cisco-security-cloud-setup

    Use when configuring Cisco Security Cloud API inputs, product flows, indexes, or dashboards in Splunk. product: splunk-platform maturity: draft

  • cisco-spaces-setup

    Use when configuring or validating Cisco Spaces meta stream accounts, firehose inputs, and data in Splunk. product: splunk-platform maturity: draft

  • cisco-talos-intelligence-setup

    Use when validating Cisco Talos reputation enrichment and service-account readiness in Splunk ES Cloud. product: splunk-platform maturity: draft

  • cisco-thousandeyes-setup

    Use when configuring ThousandEyes OAuth, HEC, streaming or polling inputs, dashboards, or ITSI in Splunk. product: splunk-platform maturity: draft

  • cisco-ucs-ta-setup

    Use when configuring Cisco UCS Manager records, task inputs, templates, or cisco:ucs data in Splunk. product: splunk-platform maturity: draft

  • cisco-webex-setup

    Use when configuring Webex OAuth, meetings, audit, calling, quality, or Contact Center data in Splunk. product: splunk-platform maturity: draft

  • splunk-admin-doctor

    Use when the user asks for a Splunk admin doctor, health audit, full feature coverage check, production- safe remediation plan, Cloud/Enterprise admin troubleshooting, or routing to existing Splunk admin skills. Diagnose Splunk Cloud Platform and Splunk Enterprise administration health, render full-

  • splunk-agent-management-setup

    Use when the user asks to manage universal forwarder or heavy forwarder fleets, create serverclass.conf, configure deploymentclient.conf, or prepare Splunk 10.x Agent Management / legacy Deployment Server workflows. Render, preflight, apply, and validate Splunk Enterprise agent management assets for

  • splunk-ai-assistant-setup

    Use when the user asks about splunk-ai-assistant, Splunk AI Assistant, Splunk AI Assistant for SPL, AI Assistant for SPL, or the `Splunk_AI_Assistant_Cloud` app. Install, validate, and help complete Splunk AI Assistant (`Splunk_AI_Assistant_Cloud`) setup on Splunk Cloud or Splunk Enterprise. Handles

  • splunk-ai-ml-toolkit-setup

    Use when the user asks about MLTK, Splunk AI Toolkit, Machine Learning Toolkit, PSC, Python for Scientific Computing, DSDL, Deep Learning Toolkit, Splunk anomaly detection assistants, AI Toolkit Agent Launchpad or the earlier Agent Builder preview, the `aiagent` command, Cisco Time Series Model, Cis

  • splunk-amazon-kinesis-firehose-setup

    Use when the user asks to send AWS Firehose data to Splunk. Render and validate Amazon Kinesis Firehose to Splunk HEC onboarding for CloudTrail, VPC Flow Logs, CloudWatch events, and raw or JSON data, including HEC token/index handoffs, delivery stream settings, buffering, retry, S3 backup, IAM poli

  • splunk-app-install

    Use when the user asks to install a Splunk app, TA, add-on, download from Splunkbase, deploy an app package, or manage installed apps. Install, update, and manage Splunk apps and add-ons (TAs). Supports installing locally from .tgz/.spl files, remotely from a URL, or from Splunkbase. Can also list i

  • splunk-aws-ta-setup

    Use when the user asks about Splunk_TA_aws, the Splunk Add-on for AWS, CloudTrail, AWS Config, or GuardDuty log ingestion, SQS-based S3 inputs, or a manual AWS TA configuration alternative to Data Manager. Install, render, configure, and validate the Splunk Add-on for AWS (Splunk_TA_aws, Splunkbase

  • splunk-box-ta-setup

    Use when the user asks to onboard, configure, render, or validate Box data in Splunk. Install, render, configure, and validate the Splunk Add-on for Box (Splunk_TA_box, Splunkbase 2679). Renders Box historical event, live monitoring, and file-ingestion inputs, encrypted OAuth account handoffs, Box i

  • splunk-cim-data-model-setup

    Use when the user asks to accelerate a CIM data model, constrain CIM data model indexes, map data to CIM with tags and eventtypes, fix CIM compliance, or manage datamodels.conf for CIM or custom data models. Not for Enterprise Security-specific acceleration, which lives in splunk-enterprise-security

  • splunk-cloud-acs-admin-setup

    Use when the user asks to manage Splunk Cloud ACS, acs admin, ACS indexes, ACS HEC tokens, ACS users and roles, app permissions, private connectivity, outbound ports, DDSS, ACS limits, maintenance windows, restart current-stack, ACS license state, Observability pairing, or to audit Splunk Cloud cont

  • splunk-cloud-acs-allowlist-setup

    Use when an existing handoff or slash command still references splunk-cloud-acs-allowlist-setup. Compatibility alias for the older Splunk Cloud ACS IP allowlist workflow. Use splunk-cloud-acs-admin- setup for new ACS work, including allowlists, indexes, HEC tokens, users, roles, capabilities, app pe

  • splunk-cloud-data-manager-setup

    Use when the user asks to set up Splunk Cloud Data Manager, onboard cloud data sources through Data Manager, validate Data Manager prerequisites, handle Data Manager CloudFormation or ARM or Terraform templates, diagnose Data Manager ingestion health, migrate Azure Event Hubs from MSCS, promote hist

  • splunk-connect-for-otlp-setup

    Use when the user asks to deploy the OTLP modular input, expose OTLP gRPC/HTTP listeners, configure OTel SDK or Collector senders to Splunk Platform, verify HEC token/index routing, or troubleshoot Splunk Connect for OTLP. Install, administer, validate, diagnose, repair, and render sender handoffs f

  • splunk-connect-for-snmp-setup

    Use when the user asks about SC4SNMP, Splunk Connect for SNMP, SNMP polling, or SNMP trap ingestion through HEC. Deploy and validate Splunk Connect for SNMP (SC4SNMP) for Splunk Enterprise or Splunk Cloud. Prepares Splunk indexes and HEC, renders Docker Compose or Kubernetes Helm configuration, and

  • splunk-connect-for-syslog-setup

    Use when the user asks about SC4S, Splunk Connect for Syslog, syslog-ng collector setup, or syslog ingestion through HEC. Deploy and validate Splunk Connect for Syslog (SC4S) for Splunk Enterprise or Splunk Cloud. Prepares Splunk indexes and HEC, renders Docker/Podman/systemd or Kubernetes Helm conf

  • splunk-cyberark-ta-setup

    Use when the user asks to onboard, configure, render, or validate CyberArk data in Splunk. Umbrella render, install, and validation workflow for CyberArk Splunk add-ons: supported CyberArk EPM API collection (Splunk_TA_cyberark_epm, Splunkbase 5160) and archived/not-supported CyberArk EPV/PTA CEF pa

  • splunk-dashboard-studio-setup

    Use when the user asks to create a Splunk Dashboard Studio dashboard, build a platform dashboard as code, push a dashboard JSON to data/ui/views, or replicate a dashboard between Splunk environments. Not for Splunk Observability Cloud dashboards, which use splunk-observability-dashboard-builder. Ren

  • splunk-data-source-readiness-doctor

    Use when the user asks for data-source readiness, ES/ITSI/ARI readiness scoring, CIM or OCSF validation, data-model acceleration checks, dashboard population checks, ingest pipeline health, knowledge-object enrichment, federated data usability, ITSI summary health, or fix handoffs after app/input se

  • splunk-database-ta-setup

    Use when the user asks to onboard SQL Server, MySQL, Oracle Database, database logs, or supported database TA readiness in Splunk. Render, install, and validate package-verified Splunk Supported Add-ons for Microsoft SQL Server, MySQL, and Oracle Database. Uses extracted Splunkbase packages as sourc

  • splunk-db-connect-setup

    Use when the user asks to install or plan DB Connect, configure DBX Java and JDBC drivers, prepare identities, connections, inputs, outputs, lookups, SQL Explorer, dbxquery, dbxoutput, dbxlookup, DB Connect over Federated Search, or validate DB Connect topology. Render, preflight, validate, and hand

  • splunk-ddaa-archive-setup

    Use when the user asks to archive expired Splunk Cloud index data to the Splunk-managed archive, set or change DDAA archival retention, restore archived data, or move an index onto Splunk Archive. Not for DDSS self-storage or generic index administration, which live in splunk-cloud-acs-admin-setup.

  • splunk-deployment-server-setup

    Use when the user asks to bootstrap a deployment server, tune Universal Forwarder phoneHome intervals, inspect enrolled clients, set up DS high availability, migrate clients to a new DS, scale to 5000+ forwarders, or diagnose DS runtime health. Hand off serverclass.conf and deploymentclient.conf aut

  • splunk-edge-processor-setup

    Use when installing Edge Processor, managing EP pipelines, routing forwarders, or handling Cisco Data Fabric / telemetry pipeline management requests that need Splunk Platform edge routing and transformation. Render Cisco Data Fabric edge-routing workflows and the full Splunk Edge Processor lifecycl

  • splunk-enterprise-host-setup

    Use when the user asks to bootstrap a Splunk host, install a heavy forwarder, build a search/index/forwarder tier, or configure clustered Splunk Enterprise nodes. Install Splunk Enterprise packages on Linux hosts and configure them as a search-tier, indexer, heavy-forwarder, cluster manager, indexer

  • splunk-enterprise-kubernetes-setup

    Use when planning, installing, upgrading, or validating either runtime. Render, preflight, apply, and validate Splunk Enterprise on Kubernetes with Splunk Operator for Kubernetes 3.1.0 or Splunk POD 10.4.0_1.6.0 on Cisco UCS. Covers SOK S1/C3/M4, guarded C3 indexing and ingestion separation, reviewe

  • splunk-enterprise-public-exposure-hardening

    Use when the user asks to expose Splunk Enterprise on the public internet, harden a Splunk search head against internet exposure, configure TLS / HSTS / CSP / mTLS / per-IP rate limit / DMZ heavy forwarder, lock down splunkd or the KV store, fix splunk.secret / pass4SymmKey defaults, evaluate agains

  • splunk-federated-search-setup

    Use when configuring Cisco Data Fabric federated search or standalone Splunk Federated Search, cross- domain search, federated analytics, S3 data-lake search, or querying data where it resides. Render, preflight, apply, and validate FSS2S standard/transparent providers and reviewed legacy FSS3 paylo

  • splunk-gcp-ta-setup

    Use when the user asks about Splunk_TA_google-cloudplatform, the Splunk Add-on for Google Cloud Platform, GCP audit logs, Cloud Logging, Pub/Sub ingestion, or GCP log onboarding in Splunk. Install, render, configure, and validate the Splunk Add-on for Google Cloud Platform (Splunk_TA_google- cloudpl

  • splunk-github-ta-setup

    Use when the user asks to onboard, configure, render, or validate GitHub audit/security data in Splunk. Install, render, configure, and validate the Splunk Add-on for GitHub (Splunk_TA_github, Splunkbase 6254). Renders GitHub Cloud audit, user, and code/dependabot/secret scanning alert inputs; emits

  • splunk-google-workspace-ta-setup

    Use when the user asks to onboard, configure, render, or validate Google Workspace data in Splunk. Install, render, configure, and validate the Splunk Add-on for Google Workspace (Splunk_TA_Google_Workspace, Splunkbase 5556). Renders package-backed activity_report, gws_gmail_logs, gws_gmail_logs_mig

  • splunk-hec-service-setup

    Use when the user asks for reusable HEC token management, inputs.conf rendering, ACS HEC tokens, allowed index restrictions, indexer acknowledgement, HEC port/TLS settings, or a shared ingestion endpoint for apps and external collectors. Render, preflight, apply, and validate Splunk HTTP Event Colle

  • splunk-index-lifecycle-smartstore-setup

    Use when the user asks to inventory index age/size/retention, decide whether indexes are unused, change searchable retention, configure SmartStore remote volumes, enable Cloud archive handoffs, restore/thaw archived data, disable indexes, delete indexes, clean standalone index data, configure S3/GCS

  • splunk-indexer-cluster-setup

    Use when the user asks to bootstrap an indexer cluster, configure site_replication_factor or site_search_factor, apply or roll back a cluster bundle, perform searchable rolling restarts, take a peer offline, migrate single-site to multisite, decommission a site, or set up cluster manager redundancy.

  • splunk-ingest-actions-setup

    Use when the user asks to set up Ingest Actions, evaluate or mask data at ingest, drop noisy events before indexing, or stage an RFS S3 destination for a route handoff. Not for Ingest Processor or Edge Processor pipelines. Render, validate, and apply eval, mask, and drop rules as props.conf RULESET

  • splunk-ingest-processor-setup

    Use when the user asks to configure Ingest Processor, author Ingest Processor pipelines, route or transform data at ingest time, validate Ingest Processor readiness, or compare Ingest Processor with Edge Processor and Data Manager, including Cisco Data Fabric or telemetry pipeline management request

  • splunk-knowledge-objects-setup

    Use when the user asks to create or govern saved searches, scheduled searches, alerts, macros, lookups, eventtypes, tags, or to set knowledge-object permissions, ownership, or app sharing. Not for Enterprise Security detections, which live in splunk-enterprise-security-config. Render, validate, and

  • splunk-kvstore-admin-setup

    Use when the user asks to back up or restore the KV Store, migrate the KV Store storage engine, upgrade the KV Store server version, reset or clean the KV Store, define a KV Store collection or lookup, or recover KV Store on an SHC. Render, validate, and apply Splunk App Key Value Store administrati

  • splunk-license-manager-setup

    Use when the user asks about configuring a Splunk Enterprise license manager, license master, license peer, License-Master-URI, license slave, license pool, license group, or license usage reporting. Render, preflight, apply, validate, and audit a Splunk Enterprise license manager and its license pe

  • splunk-lookup-file-editing-setup

    Use when the user asks to install, configure, operate, or validate Lookup File Editing. Render and validate Splunk App for Lookup File Editing readiness, including install planning, CSV and KV Store lookup inventory checks, SHC allowRestReplay backup-replication runbook, app health checks, lookup ow

  • splunk-mcp-server-setup

    Use when the user asks about Splunk MCP server setup, Splunk MCP TA, Splunk_MCP_Server, /services/mcp, the hosted SCS MCP Gateway for Splunk Observability Cloud, Cursor MCP, Codex MCP, Claude Code MCP connectivity to Splunk, or Cisco Data Fabric agentic/tool access through Splunk MCP. Install, confi

  • splunk-microsoft-cloud-setup

    Use when the user asks about Splunk_TA_o365, Office 365, Microsoft 365, Entra ID, Azure AD audit/sign- in, Microsoft Graph, Splunk Add-on for Microsoft Cloud Services, or Microsoft cloud log onboarding in Splunk. Install, render, configure, and validate the Splunk add-ons for Microsoft cloud telemet

  • splunk-microsoft-exchange-ta-setup

    Use when the user asks for Splunk Supported Add-on for Microsoft Exchange onboarding and validation. Render, install, and validate the package-verified Microsoft Exchange supported add-on bundle and Exchange Indexes package. Covers TA-Exchange-ClientAccess, TA-Exchange-Mailbox, TA-SMTP-Reputation, T

  • splunk-microsoft-scom-ta-setup

    Use when the user asks to onboard, configure, or validate Microsoft System Center Operations Manager data in Splunk. Render, install, and validate the package-verified Splunk Add-on for Microsoft SCOM (Splunk_TA_microsoft-scom, Splunkbase 2729). Covers package-derived PowerShell inputs, microsoft:sc

  • splunk-microsoft-security-ta-setup

    Use when the user asks to onboard, configure, render, or validate Microsoft Security / Defender data in Splunk. Install, render, configure, and validate the Splunk Add-on for Microsoft Security (Splunk_TA_MS_Security, Splunkbase 6207). Renders package-backed Defender incidents, endpoint alerts, mach

  • splunk-monitoring-console-setup

    Use when the user asks to configure distributed or standalone Monitoring Console mode, splunk_monitoring_console_assets.conf auto-config, distsearch.conf search peer groups, forwarder monitoring, platform alerts, search peer onboarding checks, or Monitoring Console status validation. Render, preflig

  • splunk-netapp-ontap-ta-setup

    Use when the user asks to onboard or validate NetApp Data ONTAP, ONTAP extractions, or ONTAP indexes in Splunk. Render, install, and validate package-verified NetApp ONTAP supported add-ons: Splunk_TA_ontap, TA-ONTAP-FieldExtractions, and SA-ONTAPIndex. Covers scheduler/worker placement, ontap index

  • splunk-okta-ta-setup

    Use when the user asks about Splunk_TA_okta_identity_cloud, the Splunk Add-on for Okta Identity Cloud, Okta System Log, OktaIM2, Okta Universal Directory, or Okta authentication onboarding in Splunk. Install, render, configure, and validate the Splunk Add-on for Okta Identity Cloud (Splunk_TA_okta_i

  • splunk-oncall-setup

    Use when the user asks about Splunk On-Call, VictorOps, on-call schedules, escalation, paging, X-VO-Api- Id/X-VO-Api-Key, the alert.victorops.com REST endpoint, or victorops_app. Render, validate, and apply the full Splunk On-Call (formerly VictorOps) lifecycle — teams, users + contact methods, rota

  • splunk-platform-pki-setup

    Use when the user asks to build Splunk PKI, mint certs, prepare third-party CA CSRs, replace default certs, configure mTLS, fix KV Store cert validation, encrypt replication traffic, configure SAML/LDAPS trust, or rotate Splunk TLS certificates. Render, preflight, apply, validate, rotate, and invent

  • splunk-platform-restart-orchestrator

    Use when the user asks to restart Splunk, avoid unnecessary restarts, recover from management API restart trouble, review repo-wide restart handling, choose between REST/CLI/systemd/ACS restart paths, or validate that a Splunk app/config change has been activated. Plan, validate, audit, and safely e

  • splunk-platform-sizing

    Use when the user asks to size a Splunk cluster, decide how many indexers or search heads they need, plan reference hardware, evaluate an All-In-One vs distributed deployment, size Splunk on Kubernetes, or estimate storage for a retention requirement. Size a Splunk deployment from a use case (daily

  • splunk-rsa-securid-ta-setup

    Use when the user asks to onboard, configure, render, or validate RSA SecurID data in Splunk. Umbrella render, install, and validation workflow for RSA SecurID Splunk add-ons: RSA SecurID Authentication Manager syslog parsing (Splunk_TA_rsa-securid, Splunkbase 2958) and RSA SecurID Cloud Authenticat

  • splunk-salesforce-ta-setup

    Use when the user asks to onboard, configure, render, or validate Salesforce data in Splunk. Install, render, configure, and validate the Splunk Add-on for Salesforce (Splunk_TA_salesforce, Splunkbase 3549). Renders Salesforce object and event log inputs, encrypted account setup handoffs, Salesforce

  • splunk-search-head-cluster-setup

    Use when the user asks to bootstrap an SHC, push a deployer bundle, perform a searchable rolling restart, transfer the captain, add or remove a member, troubleshoot KV Store replication lag, migrate a standalone search head to SHC, or replace a deployer. Render, preflight, apply, validate, and opera

  • splunk-secure-gateway-setup

    Use when the user asks about Splunk Secure Gateway, Connected Experiences, Spacebridge, Private Spacebridge, or mobile distribution. Apply only splunk_secure_gateway app enable/disable on an explicit Splunk Enterprise target. Render an Enterprise egress check, endpoint and instance-ID placeholder sk

  • splunk-servicenow-ta-setup

    Use when the user asks about Splunk_TA_snow, the Splunk Add-on for ServiceNow, ServiceNow incident or change or CMDB ingestion, snow:// inputs, or ITSM data onboarding in Splunk. Install, render, configure, and validate the Splunk Add-on for ServiceNow (Splunk_TA_snow, Splunkbase 1928). Renders real

  • splunk-soar-setup

    Use when the user asks to install Splunk SOAR On-prem, build a SOAR cluster, onboard SOAR Cloud, install Automation Broker, install splunk-side SOAR apps, or wire up SOAR with Splunk Enterprise Security. Render, preflight, apply, and validate the full Splunk SOAR lifecycle: Splunk SOAR (On-prem) unp

  • splunk-spl2-pipeline-kit

    Use when the user needs SPL2 pipeline authoring, conversion review, compatibility linting, or shared templates for Ingest Processor or Edge Processor workflows, including Cisco Data Fabric or telemetry pipeline management requests that need reusable SPL2 pipeline logic. Render and lint reusable SPL2

  • splunk-stream-setup

    Use when the user asks about Splunk Stream, stream forwarder, streamfwd, wire data, network capture, NetFlow, or packet capture setup. Install and configure Splunk Stream, Splunk Stream Forwarder (Splunk_TA_stream), and Splunk Stream Wire Data (Splunk_TA_stream_wire_data). Creates indexes, configure

  • splunk-stream-windows-setup

    Use when the user asks to investigate, install, upgrade, configure, validate, troubleshoot, or roll back Splunk Stream Forwarder on a Windows host. Provides action-capable local PowerShell, Windows OpenSSH, WinRM, and AWS Systems Manager paths; enforces a drift-bound investigation and plan before in

  • splunk-supported-addons-setup
  • splunk-syslog-web-proxy-ta-setup
  • splunk-sysmon-ta-setup
  • splunk-universal-forwarder-setup
  • splunk-vmware-ta-setup
  • splunk-windows-ta-setup
  • splunk-workload-management-setup
View source on GitHub

More from CiscoDevNet/skills

All 15 plugins →

Operational skills for Splunk Observability Cloud, Galileo, Lemonade, and telemetry integrations.

36 skills

6

appdynamics

claudecodex

Operational skills for AppDynamics platform administration, agents, monitoring, and integrations.

20 skills

6

Operational skills for Splunk Enterprise Security, security portfolio products, and WideField integrations.

18 skills

6

thousandeyes

claudecodex

Agent Skills for Cisco ThousandEyes.

3 skills

6

sccfm

claudecodex

Safely operate Cisco Security Cloud Control Firewall Manager through its CLI and Ansible collection.

2 skills

6

splunk-itsi

claudecodex

Operational skills for Splunk IT Service Intelligence installation, configuration, and service operations.

2 skills

6

Similar plugins

CMEM Pro

claude

CMEM Pro for the Claude app - hooks stream tool use to cmem.ai and inject observations into new sessions and agents

3 skills · 1 MCP server · hooks

thedotmack/claude-mem 116,618

Structured logging, distributed tracing, and metrics — correlate agent swarm activity with application telemetry

2 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

honeycomb

claudecodex

Skills, agents, and workflows for Honeycomb observability — query patterns, production investigations, SLOs, OpenTelemetry instrumentation, and Beeline migration. Designed to complement the Honeycomb MCP server.

11 skills · 1 command · 2 agents · 1 MCP server · hooks

anthropics/claude-plugins-official 47,076

Kubernetes manifest generation, networking configuration, security policies, observability setup, GitOps workflows, and auto-scaling

4 skills · 1 agent

wshobson/agents 42,461

Honeycomb

claudecodex

Skills, agents, and workflows for Honeycomb observability — query patterns, production investigations, SLOs, OpenTelemetry instrumentation, and Beeline migration. Designed to complement the Honeycomb MCP server.

11 skills · 1 command · 2 agents · 1 MCP server · hooks

anthropics/knowledge-work-plugins 35,601

Maintain splunk-platform?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins15 plugins