Splunk MCP for On-Prem Instances

[thangarun]

Hi Team,

I have seen the news that Splunk MCP is available for both cloud and enterprise environments. However, in the prerequisites, it states "Enable REST API access for your Splunk Cloud Platform deployment."

This creates some confusion regarding whether MCP is available for Cloud only, or for both Cloud and on-premises deployments. Could you please clarify this so I can coordinate with my team to enable it in our on-premises environment if supported?

Thank you for your assistance.

[splunkreal]

Hello, where do you install the mcp server? On search heads? Does it work on clustered (SHC)?

Thanks.

[thambisetty]

https://www.linkedin.com/posts/balu6645_splunk-splunkenterprise-mcp-activity-7352613620880486400-WCv...

[govind39]

@thangarun Splunk MCP is still in sort of beta.

I have installed and tested it with On-prem Splunk Enterprise and it works like a charm.

You can install and integrate this Splunk MCP app with Claude LLM free version and unleash the power of it.

[thangarun]

@govind39 Thanks for the response.

Is there any license needed for using the MCP?

Anyone, please help to clarify.

[thangarun]

Thanks @kiran_panchavat .

Anyone tried MCP in Splunk On-Prem instances?

[kiran_panchavat]

@thangarun 

Splunk MCP Server is supported on both Splunk Enterprise and Splunk Cloud platforms. Please refer to the details provided below.

https://splunkbase.splunk.com/app/7931 

https://help.splunk.com/en/splunk-cloud-platform/mcp-server-for-splunk-platform/configure-the-server