splunk-tag
starsforks
How to install splunk-tag?
grandcamel/splunk-assistant-skills/splunk-tag
$npx -y skills add grandcamel/Splunk-Assistant-Skills --skill splunk-tagKnowledge object tags and field/value associations for Splunk.
SKILL.md
| 1 | # splunk-tag |
| 2 | |
| 3 | Knowledge object tags and field/value associations for Splunk. |
| 4 | |
| 5 | ## Purpose |
| 6 | |
| 7 | Add, remove, and manage tags associated with field values for easier searching. |
| 8 | |
| 9 | ## Risk Levels |
| 10 | |
| 11 | | Operation | Risk | Notes | |
| 12 | |-----------|------|-------| |
| 13 | | List tags | - | Read-only | |
| 14 | | Search by tag | - | Read-only | |
| 15 | | Add tag | ⚠️ | Easily reversible | |
| 16 | | Remove tag | ⚠️ | Easily reversible | |
| 17 | |
| 18 | ## Triggers |
| 19 | |
| 20 | - "tag", "label", "classify" |
| 21 | - "tag field", "add tag" |
| 22 | |
| 23 | ## CLI Commands |
| 24 | |
| 25 | | Command | Description | |
| 26 | |---------|-------------| |
| 27 | | `tag add` | Add tag to field value | |
| 28 | | `tag remove` | Remove tag from field value | |
| 29 | | `tag list` | List all tags | |
| 30 | | `tag search` | Search using tag= syntax | |
| 31 | |
| 32 | ## Options |
| 33 | |
| 34 | | Option | Commands | Description | |
| 35 | |--------|----------|-------------| |
| 36 | | `-a`, `--app` | list, add, remove | App context (defaults to "search") | |
| 37 | | `-o`, `--output` | list, search | Output format (text, json) | |
| 38 | | `-i`, `--index` | search | Filter by index | |
| 39 | | `-e`, `--earliest` | search | Earliest time (defaults to -24h) | |
| 40 | |
| 41 | ## Examples |
| 42 | |
| 43 | ```bash |
| 44 | # List all tags (with short flags) |
| 45 | splunk-as tag list |
| 46 | splunk-as tag list -a search -o json |
| 47 | |
| 48 | # Add tag to field value (format: field::value tag_name) |
| 49 | splunk-as tag add host::webserver01 production |
| 50 | splunk-as tag add host::webserver01 production -a my_app |
| 51 | |
| 52 | # Remove tag from field value |
| 53 | splunk-as tag remove host::webserver01 production |
| 54 | splunk-as tag remove host::webserver01 production -a my_app |
| 55 | |
| 56 | # Search by tag (with short flags) |
| 57 | splunk-as tag search production |
| 58 | splunk-as tag search production -e -1h -i main |
| 59 | splunk-as tag search production -e -1h -o json |
| 60 | ``` |
| 61 | |
| 62 | ## SPL Patterns |
| 63 | |
| 64 | ```spl |
| 65 | tag=web_traffic |
| 66 | tag::src_ip=internal |
| 67 | ``` |
People who liked this also viewed
6 picksType
- azure-kustoQuery and analyze data in Azure Data Explorer (Kusto/ADX) using KQL for log analytics, telemetry, and time series analysis. WHEN: KQL queries, Kusto database queries, Azure Data Explorer, ADX clustersSkillsJul 2026
- lark-base飞书多维表格（Base）操作：建表、字段、记录、视图、统计、公式/lookup、表单、仪表盘、workflow、角色权限；遇到 Base/多维表格/bitable 或 /base/ 链接时使用。文件导入转 lark-drive，认证/授权转 lark-shared。SkillsJul 2026
- lark-calendar飞书日历：管理日历日程和会议室。查看/搜索日程、创建/更新日程、管理参会人、查询忙闲和推荐时段、预定会议室。当用户需要查看日程安排、创建/修改会议、查询/预定会议室时使用。不负责：查询过去的视频会议记录（走 lark-vc）、待办任务（走 lark-task）。SkillsJul 2026
- shadcnManages shadcn components and projects — adding, searching, fixing, debugging, styling, and composing UI, including chat interfaces. Provides project context, component docs, and usage examples. AppliSkillsJul 2026
- xlsxUse this skill any time a spreadsheet file is the primary input or output. This means any task where the user wants to: open, read, edit, or fix an existing .xlsx, .xlsm, .xltx, .csv, or .tsv file (e.SkillsJul 2026
- firebase-data-connectAgent Skills for FirebaseSkillsJul 2026
