Splunk integration for AI agents
Run SPL searches and manage saved searches and alerts in Splunk
Splunk is a Sim integration in the Observability category. Sim is the AI workspace where teams build and deploy AI agents. Sim's Splunk integration provides 12 tools that AI agents can use inside Sim's visual workflow builder. Splunk connects with an API key. Free to start at sim.ai.
Last updated
What Sim agents can do with Splunk
Run SPL searches synchronously or as asynchronous jobs, fetch results, dispatch saved searches, and inspect fired alerts and indexes.
- Category
- Observability
- Authentication
- API key
- Tools
- 12
- Triggers
- 0
- Documentation
- Splunk docs
How to automate Splunk with Sim
Create a free account
Sign up at sim.ai in seconds. No credit card required. Your workspace is ready immediately.
Add a Splunk block
Open your workspace, drag a Splunk block onto the workflow builder, and paste in your Splunk API key.
Configure, connect, and run
Pick the tool you need, wire in an AI agent for reasoning or data transformation, and run. Your Splunk automation is live.
Agent templates
Ready-to-use templates featuring Splunk. Click any to build it instantly.
Splunk tools
12 Splunk tools available to Sim agents.
Run Search
Run an SPL search synchronously and return its results in a single call (oneshot mode). A oneshot search buffers the whole result set in one response with no paging, so use it for short searches; for anything large use Create Search Job with Get Search Results, which defaults to 100 rows and pages with offset.
Create Search Job
Start a Splunk search job and return its search ID (sid). The search runs asynchronously — poll its status and fetch results separately.
Get Search Job
Get the status and progress of a Splunk search job by search ID, including dispatch state, completion progress, and event/result counts.
Get Search Results
Fetch the transformed results of a completed Splunk search job by search ID, with pagination.
Cancel Search Job
Cancel a running Splunk search job and delete its result cache.
List Saved Searches
List saved searches and reports configured in Splunk, including their SPL, schedule, and alert configuration.
Get Saved Search
Get the configuration of a single Splunk saved search by name, including its SPL, schedule, and alert settings.
Dispatch Saved Search
Run a Splunk saved search immediately and return the search ID (sid) of the dispatched job.
List Fired Alerts
List the saved searches with currently triggered (unexpired) Splunk alerts and how many times each has fired.
Get Fired Alerts
List the unexpired triggered instances of a Splunk alert by saved search name, including severity, trigger time, and the search ID of each firing.
List Indexes
List the indexes configured on the Splunk instance with their size, event count, and retention settings.
List Apps
List the apps installed on the Splunk instance with their label, version, author, and enabled state.
Frequently asked questions
Sim's Splunk integration adds 12 tools to the AI agents you build in Sim's visual workflow builder. Run SPL searches and manage saved searches and alerts in Splunk.
