Splunk Intelligence MCP Server

MCPReference

by debaditya-mohankudo

Indexed by Glama. No runnable package is published via Glama's API — open the repository for install instructions.

mcplocal-only

MCP configuration

stdio

Environment

  • LOG_LEVEL

    Log verbosity

  • SPLUNK_URL

    Splunk base URL (required for live queries)

  • SPLUNK_USE_LLM

    Set 'true' to enable standalone Ollama agent (requires uv sync --extra llm)

  • SPLUNK_AUTH_PATH

    Cookie persist path

  • SPLUNK_LLM_MODEL

    Ollama model — only used when SPLUNK_USE_LLM=true

  • SPLUNK_COOKIE_NAME

    Splunk session cookie name

  • SPLUNK_SPIKE_WINDOW

    Spike detection window (seconds)

  • SPLUNK_AGENT_MAX_ITER

    ReAct loop cap — only used when SPLUNK_USE_LLM=true

  • SPLUNK_SPIKE_THRESHOLD

    Events/window to trigger a spike

Install in one click with Zurek

Browse here, install from the native macOS app — pick targets, fill env vars, and write configs safely.