splunk-metadata
starsforks
How to install splunk-metadata?
grandcamel/splunk-assistant-skills/splunk-metadata
$npx -y skills add grandcamel/Splunk-Assistant-Skills --skill splunk-metadataQuery index, source, and sourcetype configurations for Splunk.
SKILL.md
| 1 | # splunk-metadata |
| 2 | |
| 3 | Query index, source, and sourcetype configurations for Splunk. |
| 4 | |
| 5 | ## Purpose |
| 6 | |
| 7 | Discover and explore metadata about indexes, sources, sourcetypes, and fields. |
| 8 | |
| 9 | ## Risk Levels |
| 10 | |
| 11 | | Operation | Risk | Notes | |
| 12 | |-----------|------|-------| |
| 13 | | List indexes | - | Read-only | |
| 14 | | Get index info | - | Read-only | |
| 15 | | List sources | - | Read-only | |
| 16 | | List sourcetypes | - | Read-only | |
| 17 | | Get field summary | - | Read-only | |
| 18 | | Metadata search | - | Read-only | |
| 19 | |
| 20 | ## Triggers |
| 21 | |
| 22 | - "metadata", "index", "source", "sourcetype" |
| 23 | - "fields", "discovery", "catalog" |
| 24 | |
| 25 | ## CLI Commands |
| 26 | |
| 27 | | Command | Description | |
| 28 | |---------|-------------| |
| 29 | | `metadata indexes` | List available indexes | |
| 30 | | `metadata index-info` | Index size, event count, time range | |
| 31 | | `metadata sources` | Unique sources per index | |
| 32 | | `metadata sourcetypes` | Sourcetypes in use | |
| 33 | | `metadata search` | Execute `\| metadata` search (supports hosts, sources, sourcetypes) | |
| 34 | | `metadata fields` | Field summary for index/sourcetype | |
| 35 | |
| 36 | ## Options |
| 37 | |
| 38 | | Option | Commands | Description | |
| 39 | |--------|----------|-------------| |
| 40 | | `-f`, `--filter` | indexes | Filter indexes by name pattern | |
| 41 | | `-o`, `--output` | indexes, sources, sourcetypes, search, fields | Output format (text, json) | |
| 42 | | `-i`, `--index` | sources, sourcetypes, search | Filter by index | |
| 43 | | `-e`, `--earliest` | search, fields | Earliest time | |
| 44 | | `-s`, `--sourcetype` | fields | Filter by sourcetype | |
| 45 | |
| 46 | ## Examples |
| 47 | |
| 48 | ```bash |
| 49 | # List all indexes (with filter and output options) |
| 50 | splunk-as metadata indexes |
| 51 | splunk-as metadata indexes -f "main*" -o json |
| 52 | |
| 53 | # Get index details |
| 54 | splunk-as metadata index-info main |
| 55 | |
| 56 | # List sourcetypes (with output format) |
| 57 | splunk-as metadata sourcetypes -i main |
| 58 | splunk-as metadata sourcetypes -i main -o json |
| 59 | |
| 60 | # List sources |
| 61 | splunk-as metadata sources -i main |
| 62 | splunk-as metadata sources -i main -o json |
| 63 | |
| 64 | # Field summary (with earliest time) |
| 65 | splunk-as metadata fields main -s access_combined |
| 66 | splunk-as metadata fields main -s access_combined -e -24h -o json |
| 67 | |
| 68 | # Metadata search (with time range) |
| 69 | splunk-as metadata search sourcetypes -i main |
| 70 | splunk-as metadata search hosts -i main -e -7d |
| 71 | splunk-as metadata search sources -i main -o json |
| 72 | ``` |
| 73 | |
| 74 | ## SPL Patterns |
| 75 | |
| 76 | ```spl |
| 77 | # Metadata command |
| 78 | | metadata type=sourcetypes index=main |
| 79 | |
| 80 | # Metasearch |
| 81 | | metasearch index=* sourcetype=access_combined |
| 82 | |
| 83 | # Field summary |
| 84 | | fieldsummary maxvals=100 |
| 85 | ``` |
| 86 | |
| 87 | ## Related Skills |
| 88 | |
| 89 | - [splunk-search](../splunk-search/SKILL.md) - Query execution |
People who liked this also viewed
6 picksType
- azure-kustoQuery and analyze data in Azure Data Explorer (Kusto/ADX) using KQL for log analytics, telemetry, and time series analysis. WHEN: KQL queries, Kusto database queries, Azure Data Explorer, ADX clustersSkillsJul 2026
- lark-base飞书多维表格（Base）操作：建表、字段、记录、视图、统计、公式/lookup、表单、仪表盘、workflow、角色权限；遇到 Base/多维表格/bitable 或 /base/ 链接时使用。文件导入转 lark-drive，认证/授权转 lark-shared。SkillsJul 2026
- lark-calendar飞书日历：管理日历日程和会议室。查看/搜索日程、创建/更新日程、管理参会人、查询忙闲和推荐时段、预定会议室。当用户需要查看日程安排、创建/修改会议、查询/预定会议室时使用。不负责：查询过去的视频会议记录（走 lark-vc）、待办任务（走 lark-task）。SkillsJul 2026
- shadcnManages shadcn components and projects — adding, searching, fixing, debugging, styling, and composing UI, including chat interfaces. Provides project context, component docs, and usage examples. AppliSkillsJul 2026
- xlsxUse this skill any time a spreadsheet file is the primary input or output. This means any task where the user wants to: open, read, edit, or fix an existing .xlsx, .xlsm, .xltx, .csv, or .tsv file (e.SkillsJul 2026
- firebase-data-connectAgent Skills for FirebaseSkillsJul 2026
