splunk-app

Splunk Universal Forwarder Agent 2026 — DevOps toolkit for Windows. DevOps visibility for engineers running services on Windows. Business-class build with pro settings switched on by default.

URL Toolbox (UTBox) is a set of building blocks for Splunk specially created for URL manipulation. UTBox has been created to be modular, easy to use and easy to deploy in any Splunk environments.

Analyzing FDS Data through Criminal IP

A secure, governable AI gateway for Splunk with operational guardrails. An alternative to Splunk AI Assistant focused on safety, compliance, and predictable results using a 'Configuration as Code' approach."

Scheduled Search Analyzer for Splunk

Track your trips and visualize them in Splunk

This app provide assistance in yearly compliance to the Data Security and Protection Toolkit (DSPT)

Bitsight Security Ratings for Splunk App provides prebuilt dashboards, modular input collection, lookup-backed enrichment, workflow actions, setup pages, alert actions, additional functionality that is not found in the BitSight Security Ratings UI and documentation views for BitSight data in Splunk.

A calendar with pie charts showing the distribution of different categories for each day.

A tree chart for Splunk

Splunk visualization

Provides visualizations for the OPNsense Firewall.

Self-hosted SIEM alert enrichment microservice for Splunk — auto-enriches IOCs via VirusTotal, Shodan & AbuseIPDB, scores risk 0–100, and cuts SOC analyst triage time from ~8 min to <90 sec. FastAPI + Redis, Docker-ready.

Splunk app for managing detection-rule CSV whitelists with inline editing, approval workflows, version control, and diff-based audit trail

SOC Alert Manager - Covers all your SOC's needs for the analysts to get to work.

General tools and scripts for Splunk, packaged as an app.

Governed AI assistant for Splunk: NL prompt to grounded answer via intent routing, bounded evidence gathering, and Claude reasoning — with quota, guardrail, and correction-loop layers.

Incomplete attempt at dnsmasq log parsing

A splunk technical add-on template

A Splunk App that sends alerts to a Mattermost Instance