Hi @senmng  You problably want to look at the Splunk MCP app/server if you are wanting to query Splunk from your AI tooling, if its supported. The search you provided - Thats possibly the most inefficient search Ive ever seen - I'm assuming this is just an example?? 🌟 Did this answer help you? If so, please consider: Adding karma to show it was useful Marking it as the solution if it resolved your issue Commenting if you need any clarification Your feedback encourages the volunteers in this community to continue contributing ... View more