splunk

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

Splunk Security Content

A repository of curated datasets from various attacks

Splunk Software Development Kit for Python

Splunk Docker GitHub Repository

Splunk Boss of the SOC version 3 dataset.

Splunk Boss of the SOC version 2 dataset.

Ansible playbooks for configuring and managing Splunk Enterprise and Universal Forwarder deployments

Splunk Event Generator: Eventgen

Helm charts associated with kubernetes plug-ins

Docker Splunk *** LEGACY IMAGES - PLEASE SEE https://github.com/splunk/docker-splunk INSTEAD ***

Pion Network Library (Boost licensed open source)

Splunk Operator for Kubernetes

Splunk Software Development Kit for JavaScript

configure kubernetes objects on multiple clusters using jsonnet

Splunk@Splunk's Ansible role for installing Splunk, upgrading Splunk, and installing apps/addons on Splunk deployments (VM/bare metal)

ShellSweeping the evil.

Splunk Connect for Syslog

A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object

Splunk Software Development Kit for Java

App examples for Splunk Enterprise

Open-source, local-first AI coding agent usage and cost dashboard for Claude Code, Codex, Cursor, OpenCode, Kiro, and Pi.

Home for Splunk security datasets.

Splunk logging appenders for popular Java Logging frameworks

Splunk Content Control Tool

Ansible framework providing a fast and simple way to spin up complex Splunk environments.

Build a attack range in your local machine

Terraform Provider for Splunk

To get started, please proceed to The Splunk Observability Cloud Workshop Homepage.

Kafka connector for Splunk

Visual Studio Code Extension for Splunk

Synthetic Adversarial Log Objects: A Framework for synthentic log generation

Example Node.js based backend collector for client-side data

Splunk HTTP Event Collector logging interface for JavaScript

Universal Configuration Console (UCC) is a developer toolkit that simplifies creating Technology Add-ons. UCC provides a comprehensive solution for add-on development, including auto-generation of...

This is the Fluentd output plugin for sending events to Splunk via HEC.

Splunk Resource Kit for Powershell

This project includes an app that allows users to visualize and analyze information about COVID-19 using data made publicly-available by Johns Hopkins University. For more information on legal...

Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique

Get Started with Streaming your Docker Logs and Stats in Splunk!

Splunk Connect for Docker is a Docker logging plugin that allows docker containers to send their logs directly to Splunk Enterprise or a Splunk Cloud deployment.

A Dynamic test tool for Splunk Technology Add-ons

RBA is Splunk's method to aggregate low-fidelity security events as interesting observations tagged with security metadata to create high-fidelity, low-volume alerts.

Open source, enterprise-ready AI skills for Splunk use cases, built for secure discovery, consistent execution, and production-grade customer workflows.

Splunk App for Data Science and Deep Learning - container images repository

Vault Plugin for Gitlab Project Access Token

Splunk's next generation C# SDK

Splunk AWS Serverless applications and Lambda blueprints

Splunk Web Framework

GitHub App