Splunk Natural Language

Edit Splunk search queries from natural language using Ollama, Docker Model Runner, or Google Gemini Flash.

Splunk natural language query editor is a Chrome extension that adds a natural-language textarea to Splunk search pages. It lets you describe a query in plain English, which gets converted to SPL (Splunk's query language), and vice versa — edit the SPL directly and the natural-language field updates automatically. It supports three AI backends: - Ollama — local LLM server - Docker Model Runner — local models via Docker - Google Gemini Flash — cloud-based via API key It only activates on splunk-operations.ocset.net pages whose URL or title contains "search", and works by reading/writing the Ace editor Splunk uses for its search bar.