splunk-app

Splunk Universal Forwarder Agent 2026 — DevOps toolkit for Windows. DevOps visibility for engineers running services on Windows. Business-class build with pro settings switched on by default.

URL Toolbox (UTBox) is a set of building blocks for Splunk specially created for URL manipulation. UTBox has been created to be modular, easy to use and easy to deploy in any Splunk environments.

Analyzing FDS Data through Criminal IP

A secure, governable AI gateway for Splunk with operational guardrails. An alternative to Splunk AI Assistant focused on safety, compliance, and predictable results using a 'Configuration as Code' approach."

Scheduled Search Analyzer for Splunk

Experimental, educational Splunk app: an AI agent's second opinion on SPL searches. Demo project, not production software, no warranty or support.

Splunk app: the | jev search command asks TypeSafe Jev typed questions about your events and adds calibrated probabilities, choices and scores as fields, cached in the KV store.

A minimal Splunk add-on wired to a build, test and ship pipeline. The take-home repo for .conf26 DEV1036.

Splunk TA (Technology Add-On) & App for SSL/TLS certificate expiration tracking, SNI audits, and proactive alerting.

This app provide assistance in yearly compliance to the Data Security and Protection Toolkit (DSPT)

Track your trips and visualize them in Splunk

Provides visualizations for the OPNsense Firewall.

Bitsight Security Ratings for Splunk App provides prebuilt dashboards, modular input collection, lookup-backed enrichment, workflow actions, setup pages, alert actions, additional functionality that is not found in the BitSight Security Ratings UI and documentation views for BitSight data in Splunk.

Zabbix operations, audit, authentication and agent activity in Splunk. Secure token collection, flexible TLS and data-model dashboards.

A calendar with pie charts showing the distribution of different categories for each day.

Organize Splunk macros as MCP tools and constrain agents to predetermined searches

Splunk CIM add-on for Cisco Secure Firewall Management Center (FMC) audit log and correlation syslog: Authentication, Change, Alerts.

Splunk add-on that collects Workspace ONE UEM (AirWatch) device GPS locations with each device's user and nearest city. Managed in Splunk Web.

Splunk app for identity support: when did it start, who is affected, and the likely cause, with runbook links. Tested on real identity-lab failures

General tools and scripts for Splunk, packaged as an app.