splunkguard-mcp

64johnlee/splunkguard-mcp
★ 0 stars Python 🤖 AI/LLM Updated today
A small Gemini-driven agent that drives the official Splunk MCP Server (Splunkbase App #7931, Streamable HTTP) to answer natural-language questions about your Splunk data. Extracted from the SplunkGuard hackathon project.
View on GitHub → Try with Claude — $10 free →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "splunkguard-mcp": {
      "command": "uvx",
      "args": [
        "splunkguard-mcp"
      ]
    }
  }
}

Or install with pip: pip install splunkguard-mcp

README Excerpt

> A small Gemini-driven agent that drives the **official Splunk MCP Server** ([Splunkbase App #7931](https://splunkbase.splunk.com/app/7931)) to answer natural-language questions about your Splunk data. Ask *"What CI pipelines failed last night and why?"* or *"Are there auth anomalies in the last 24 hours?"* and get back a typed `SplunkInvestigationReport` with root cause, failure category, time range, affected components, and paste-ready SPL recommendations.