chambear2809/splunk-cisco-skills
Command Claude Code
Plan, render, bootstrap, and operate a Splunk Enterprise Search Head Cluster. Covers deployer config push, member server.conf generation, sequenced bootstrap, rolling restarts, captain transfer, KV Store replication, member add/decommission/remove, migration, and failure mode runbooks.
chambear2809/splunk-cisco-skills
Command Claude Code
Apply only Enterprise Secure Gateway app state; render the egress check, endpoint/instance-ID skeleton, and MDM/registration runbooks, with a no-probe/no-REST Cloud support handoff.
chambear2809/splunk-cisco-skills
Command Claude Code
Render, install, and validate package-verified Carbon Black and Symantec Endpoint Protection supported add-ons with file/syslog transport ownership and source-type readiness.
chambear2809/splunk-cisco-skills
Command Claude Code
Render and validate Splunk Enterprise Security Content Update readiness, including ESCU install or upgrade planning, story inventory, correlation-search activation review, and ES configuration handoffs.
chambear2809/splunk-cisco-skills
Command Claude Code
Install, configure readiness, and validate Splunk Security Essentials.
chambear2809/splunk-cisco-skills
Command Claude Code
Resolve Splunk security products to the correct local setup skill, install-only path, ES bundled workflow, or manual handoff.
chambear2809/splunk-cisco-skills
Command Claude Code
Install, render, configure, and validate the Splunk Add-on for ServiceNow (SplunkTAsnow): per-table snow:// inputs, basic-auth or OAuth account setup, the snow index, table source types, and ingestion validation.
chambear2809/splunk-cisco-skills
Command Claude Code
Install and operate the full Splunk SOAR lifecycle: SOAR On-prem (single instance and cluster with external PostgreSQL/GlusterFS/Elasticsearch/HAProxy), SOAR Cloud onboarding helper, Automation Broker on Docker or Podman, Splunk-side apps (Splunk App for SOAR 6361, Splunk App for SOAR Export 3411), and ES integration…
chambear2809/splunk-cisco-skills
Command Claude Code
Render and lint reusable SPL2 pipeline templates for Splunk Ingest Processor and Edge Processor.
chambear2809/splunk-cisco-skills
Command Claude Code
Install and configure the Splunk Stream stack components, including hybrid Splunk Cloud support, NetFlow receiver configuration, and protocol stream enablement.
chambear2809/splunk-cisco-skills
Command Claude Code
Resolve Splunk Supported Add-ons coverage and render first-class profile plans, starting with Unix/Linux.
chambear2809/splunk-cisco-skills
Command Claude Code
Render transport and parser profiles for supported Apache, NGINX, IIS, Tomcat, HAProxy, Squid, Blue Coat, Forcepoint, Check Point, F5, Citrix, and Infoblox add-ons.
chambear2809/splunk-cisco-skills
Command Claude Code
Install, render, configure, and validate the Splunk Add-on for Microsoft Sysmon (SplunkTAmicrosoftsysmon): endpoint or WEC Sysmon inputs, duplicate-ingest guardrails, UF rollout handoff, the sysmon index, and source-constrained validation.
chambear2809/splunk-cisco-skills
Command Claude Code
Validate Splunk UBA and UEBA readiness, optional UBA Kafka app placement, and migration guidance.
chambear2809/splunk-cisco-skills
Command Claude Code
Bootstrap, enroll, and validate Splunk Universal Forwarder runtimes.
chambear2809/splunk-cisco-skills
Command Claude Code
Install, render, configure, and validate Splunk VMware Supported Add-on coverage: vCenter collection, ESXi syslog, indexes, metrics indexes, package placement, and ITSI readiness.
chambear2809/splunk-cisco-skills
Command Claude Code
Install, render, configure, and validate the Splunk Add-on for Microsoft Windows (SplunkTAwindows): WinEventLog/Perfmon/WinHostMon inputs, the wineventlog and perfmon indexes, UF/HF/search-tier placement, and CIM mapping.
chambear2809/splunk-cisco-skills
Command Claude Code
Render, apply, and validate Splunk Enterprise Workload Management pools, workload rules, and admission-rule guardrails.
chambear2809/splunk-cisco-skills
Command Claude Code
Render Google SecOps feed, webhook, parser, and evidence assets for WideField Security log type WIDEFIELDSECURITY.
chambear2809/splunk-cisco-skills
Command Claude Code
Diagnose OAuth token abuse, rogue app, non-human identity, AI-agent identity, and session-anomaly coverage for WideField Security using read-only checks.
chambear2809/splunk-cisco-skills
Command Claude Code
Render, validate, and safely apply Okta-side WideField Security integration assets, including documented event hook actions and shared-signal evidence handoffs.
chambear2809/splunk-cisco-skills
Command Claude Code
Render Saviynt remediation mappings and evidence handoffs for WideField Security findings while failing closed for unsupported live Saviynt mutation.
chambear2809/splunk-cisco-skills
Command Claude Code
Render, route, validate, and delegate a WideField Security adoption workflow across Okta, Saviynt, Splunk SIEM, Google SecOps, and identity-threat doctor skills.
chambear2809/splunk-cisco-skills
Command Claude Code
Render, apply, and validate Splunk SIEM HEC, index, search, and dashboard readiness for WideField Security events.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: