Splunk Intelligence MCP Server
MCPReferenceby debaditya-mohankudo
Indexed by Glama. No runnable package is published via Glama's API — open the repository for install instructions.
mcplocal-only
MCP configuration
stdio
Environment
LOG_LEVELLog verbosity
SPLUNK_URLSplunk base URL (required for live queries)
SPLUNK_USE_LLMSet 'true' to enable standalone Ollama agent (requires uv sync --extra llm)
SPLUNK_AUTH_PATHCookie persist path
SPLUNK_LLM_MODELOllama model — only used when SPLUNK_USE_LLM=true
SPLUNK_COOKIE_NAMESplunk session cookie name
SPLUNK_SPIKE_WINDOWSpike detection window (seconds)
SPLUNK_AGENT_MAX_ITERReAct loop cap — only used when SPLUNK_USE_LLM=true
SPLUNK_SPIKE_THRESHOLDEvents/window to trigger a spike
Install in one click with Zurek
Browse here, install from the native macOS app — pick targets, fill env vars, and write configs safely.