automateyournetwork/splunk-search
workspace/skills/splunk-search/SKILL.md
Execute and validate SPL (Search Processing Language) queries.
$ install --global
skillsauthnpx skillsauth add automateyournetwork/netclaw splunk-searchInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 10:35 PM1.5s1 file scanned
SKILL.md
- name:
- splunk-search
- description:
- Execute and validate SPL (Search Processing Language) queries.
- version:
- 1.0.0
- license:
- Apache-2.0
- author:
- netclaw
- tags:
- []
Splunk Search Skill
Execute and validate SPL (Search Processing Language) queries.
Tools
| Tool | Description |
|------|-------------|
| validate_spl | Validate SPL syntax without executing |
| search_oneshot | Execute SPL query and return results |
| search_export | Execute SPL query and export to file |
Output Format
Results are formatted as Markdown tables for easy reading. Sensitive fields are automatically sanitized.
Example Queries
Validate this SPL: index=network sourcetype=syslog | stats count by host
Search for all firewall denies in the last hour
Export BGP peer events from the network index
SPL Tips
- Use
earliest=-1hfor time ranges - Use
| table field1, field2to select columns - Use
| stats count by fieldfor aggregations
Prerequisites
SPLUNK_HOSTSplunk server hostnameSPLUNK_PORTManagement port (default: 8089)SPLUNK_USERNAMEService account usernameSPLUNK_PASSWORDService account password
Server
This skill uses the splunk-mcp server via npx.
Related Skills
automateyournetwork/zoom-meeting-context
tools
VerifiedTrustedCommunity
Zoom meeting intelligence — correlates a live or referenced Zoom meeting discussion against NetClaw's historical meeting record (via the official Zoom Meetings MCP) and today's actual network state. Use when someone in a Zoom meeting references a past discussion or incident ('didn't we have this issue before?'), or asks to search prior meetings for a topic. Does not itself recognize live in-meeting questions — that happens automatically inside zoom-rtms-mcp's own extractor (spec 118) before this skill is ever invoked.
644SKILL.mdUpdated Aug 27, 2026
automateyournetwork/percepxion-oob
tools
VerifiedTrustedCommunity
Manage Lantronix out-of-band (OOB) infrastructure via Percepxion central management platform: device inventory, serial port inspection via SLC CLI, firmware compliance, config management, security auditing, and closed-loop incident remediation. Use during outages, maintenance windows, compliance cycles, and AI-assisted automation workflows.
644SKILL.mdUpdated Aug 13, 2026
automateyournetwork/n2n-federation
tools
VerifiedTrustedCommunity
Federate your NetClaw with other NetClaw operators over the BGP mesh — exchange capability inventories and ask your claw what a peer can do. (US1; remote invocation and chat land in later phases.)
638SKILL.mdUpdated Jul 11, 2026
automateyournetwork/token-tracker
tools
VerifiedTrustedCommunity
Track token consumption, enforce session budgets, and display cost for every NetClaw interaction.
638SKILL.mdUpdated Apr 3, 2026