[Register HERE]. This thread is for the Community Office Hours session on Splunk MCP Server: Ask Me Anything on Thurs, July 23, 2026 at 11:00 AM PT / 2:00 PM ET.

Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics.

In this session, we’ll focus on Splunk MCP Server and how it helps connect AI assistants and agents with Splunk through a secure, standardized interface. Join us to learn how to get started, understand key prerequisites and permissions, explore admin capabilities, and see how MCP Server can help users explore Splunk.

What can I ask in this AMA?

• What is Splunk MCP Server and why is it useful?
• How can I get started with MCP Server?
• What prerequisites or permissions do I need before using MCP Server?
• What Admin capabilities does Splunk MCP Server provide?
• How can MCP Server help me explore Splunk data and run SPL searches?
• What are some common use cases for MCP Server across security, observability, and platform workflows?
• Anything else you’d like to learn about MCP Server!

Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here).

Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants.

Look forward to connecting!