topic Re: Automating Splunk query results in Dashboards & Visualizations

Automating Splunk query results

senmng — Tue, 03 Mar 2026 18:21:45 GMT

I would like to use AI tool to automate the Splunk search capability. For instance, instead of using Splunk search using the query ,i would like to automate in such a way that I need to get the results by giving prompting in an UI client.

((index=*) OR (index = *)) sourcetype IN ("*","*") "errorcode" | dedup sessionID

instead of writing this query in search bar, i would like to prompt in UI client using AI agent to ask to return the results the sessions with this errorcode by filtering out using unique session id

Re: Automating Splunk query results

livehybrid — Wed, 04 Mar 2026 16:45:48 GMT

Hi @senmng

You problably want to look at the Splunk MCP app/server if you are wanting to query Splunk from your AI tooling, if its supported.

The search you provided - Thats possibly the most inefficient search Ive ever seen - I'm assuming this is just an example??

🌟 Did this answer help you? If so, please consider:

Adding karma to show it was useful
Marking it as the solution if it resolved your issue
Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing