rsfl/splunk-mcp-llm-siemulator-linux
Linux version of Splunk MCP LLM MCP SIEMulator . A Docker lab integrating Splunk SIEM with Ollama LLM via Model Context Protocol for AI-powered security operations. Features Promptfoo evaluation, OpenWebUI chat interface, Splunk UF and Raw HEC logging for real-time event ingestion and LLM-assisted incident response testing.
Platform-specific configuration:
{
"mcpServers": {
"splunk-mcp-llm-siemulator-linux": {
"command": "npx",
"args": [
"-y",
"splunk-mcp-llm-siemulator-linux"
]
}
}
}Add the config above to .claude/settings.json under the mcpServers key.
Loading reviews...