Splunk Python Packages

splunk-sdk

Splunk Software Development Kit for Python

splunk-handler

Python logging handler for sending logs to Splunk Enterprise

splunk-hec-handler

A Python Logging Handler for Splunk HTTP Event Collector (HEC).

sigmatools

Main Sigma Rule Repository

addonfactory-splunk-conf-parser-lib

Library to parse Splunk-specific .conf files.

splunk-add-on-ucc-framework

Universal Configuration Console (UCC) is a developer toolkit that simplifies creating Technology Add-ons. UCC provides a comprehensive solution for add-on development, including auto-generation of UI, Rest handlers, modular inputs, monitoring dashboards. See more: https://dev.splunk.com/enterprise/docs/devtools/universal-configuration-console/

solnlib

SDK for Developing Solutions in Splunk Enterprise with Python

splunk-soar-sdk

Splunk SOAR SDK - the official tool for Splunk SOAR app development

graphistry

PyGraphistry is a Python library to quickly load, shape, embed, and explore big graphs with the GPU-accelerated Graphistry visual graph analyzer

kintyre-splunk-conf

Kintyre's Splunk Configuration tool

ksconf

Kintyre's Splunk Configuration tool

splunkctl

CLI tool for Splunk Enterprise SIEM operations — operate Splunk as code

spylunking

Drill down into your python logs using JSON logs stored in Splunk - supports sending over TCP or the Splunk HEC REST API handlers (using threads or multiprocessing) - includes a pre-configured Splunk sandbox in a docker container

mcp-server-splunk-oncall

MCP server for Splunk On-Call (VictorOps) incident management

eis-sigmatools

Tools for the Generic Signature Format for SIEM Systems

parse-ioc

Parse a list of indicators into a dictionary or JSON structure for programmatic use.

cypresspoint

Python helper bits for Splunk add-on development

splint-spl

A fast, zero-dependency linter for Splunk SPL — catch slow searches before they hit production.

dataxi

Dataxi is a cross-DBMS server tool with credential management that can help you centralize the data extraction and transfer from different data sources.

splunk-log-handler

Output logs to a splunk automatically by splunk-log-handler

lqmt

Flexible framework that allows automation to process cyber threat information and update endpoint defense tools.

splunk-app-packager

A packaging tool for Splunk apps. Package up your Splunk app configuration files, get them validated and push them to splunkcloud with a cli tool or github actions

cloudmarker

Cloudmarker - Cloud security monitoring framework.

ksconf-jinja-markdown

Kintyre's Splunk Configuration tool