Splunk Python Packages

splunk-sdk

Splunk Software Development Kit for Python

splunk-handler

Python logging handler for sending logs to Splunk Enterprise

splunk-hec-handler

A Python Logging Handler for Splunk HTTP Event Collector (HEC).

addonfactory-splunk-conf-parser-lib

Library to parse Splunk-specific .conf files.

sigmatools

Main Sigma Rule Repository

solnlib

SDK for Developing Solutions in Splunk Enterprise with Python

splunk-add-on-ucc-framework

Universal Configuration Console (UCC) is a developer toolkit that simplifies creating Technology Add-ons. UCC provides a comprehensive solution for add-on development, including auto-generation of UI, Rest handlers, modular inputs, monitoring dashboards. See more: https://dev.splunk.com/enterprise/docs/devtools/universal-configuration-console/

graphistry

PyGraphistry is a Python library to quickly load, shape, embed, and explore big graphs with the GPU-accelerated Graphistry visual graph analyzer

splunk-soar-sdk

Splunk SOAR SDK - the official tool for Splunk SOAR app development

kintyre-splunk-conf

Kintyre's Splunk Configuration tool

ksconf

Kintyre's Splunk Configuration tool

spylunking

Drill down into your python logs using JSON logs stored in Splunk - supports sending over TCP or the Splunk HEC REST API handlers (using threads or multiprocessing) - includes a pre-configured Splunk sandbox in a docker container

mcp-server-splunk-oncall

MCP server for Splunk On-Call (VictorOps) - 45 tools for incident management, on-call, maintenance, teams, and routing

eis-sigmatools

Main Sigma Rule Repository

splunkctl

Operate Splunk Enterprise and Splunk SOAR as code with a safety-first CLI and MCP server for humans and AI agents.

cypresspoint

Python helper bits for Splunk add-on development

dataxi

Dataxi is a cross-DBMS server tool with credential management that can help you centralize the data extraction and transfer from different data sources.

splunkapi3

Splunk API for Python 3.5

lqmt

Flexible framework that allows automation to process cyber threat information and update endpoint defense tools.

parse-ioc

Parse a list of indicators into a dictionary or JSON structure for programmatic use.

splunk-app-packager

A packaging tool for Splunk apps. Package up your Splunk app configuration files, get them validated and push them to splunkcloud with a cli tool or github actions

splunk-log-handler

Output logs to a splunk automatically by splunk-log-handler

cloudmarker

Cloud security monitoring tool and framework

ksconf-jinja-markdown

Kintyre's Splunk Configuration tool