Splunk MCP Server

Overview

Splunk announced the controlled availability of MCP (Model Context Protocol) server in Splunk Cloud Platform, a groundbreaking tool that bridges the gap between Splunk's data analytics capabilities and AI reasoning. The MCP server is a specialized implementation of the Model Context Protocol that enables secure, two-way communication between AI systems and Splunk Cloud Platform.

Features

• Execute Searches: Run powerful Splunk queries to extract insights and drive intelligent workflows
• SPL Query Management: Generate, explain, and optimize SPL queries using AI tools
• Saved Search Management: Manage and execute saved searches programmatically
• Report Creation: Automate report generation and analysis
• Multi-Source Integration: Combine Splunk data with other sources like Atlassian, cloud APIs, or Kubernetes clusters
• Natural Language Interface: Interact with Splunk data through conversational AI

Security & Access Control

• Enterprise-grade authentication and authorization
• Built-in RBAC (Role-Based Access Control)
• Adherence to existing Splunk authentication and access controls
• Prevention of unauthorized data exposure

Benefits

• Automate repetitive tasks and save valuable time
• Enable AI to execute searches, manage saved searches, and create reports
• Create unified operational views by integrating multiple data sources
• AI-driven IT operations and security investigations

Availability

Available in Splunk Cloud Platform in controlled availability. Also listed in the AI Agents and Tools storefront in AWS Marketplace and Azure Marketplace.

Pricing

Enterprise pricing for Splunk Cloud Platform customers. Contact Splunk for details.