autoMETA.

autoMETA Operator for Splunk

autoMETA Operator for Splunk

The dashboard factory: describe what you need in plain English and a team of agents builds it.

The dashboard factory: describe what you need in plain English and a team of agents builds it.

1 / 7

AI agents that build dashboards, monitor ML, and tame your Splunk telemetry

What autoMETA Operator for Splunk does

autoMETA Operator for Splunk turns natural-language requests into production Dashboard Studio dashboards and continuously suggests telemetry optimisations. It runs as a hosted SaaS on top of your Splunk. Your search data stays in Splunk. We orchestrate the agents.

Dashboard Studio Builder

Describe what you want to see. A team of agents takes it from there, each one owning a slice of the build:

  • Builder discovers the right indexes, sourcetypes, and fields over MCP, writes the SPL, and lays out the panels.
  • vizTuner picks the visualisation that actually fits each query. A trend gets a line chart, a breakdown gets bars, a single number gets a single-value tile.
  • Optimizer rewrites the SPL behind every panel so it runs lean: less data scanned, lower cardinality, faster loads.
  • Validator checks the whole thing against 9.4-safe Dashboard Studio JSON before it ships, so you never deploy a broken panel.

The output is a validated Dashboard Studio JSON file, ready to deploy.

And it learns. Every time you retheme, swap a chart, or rename a panel, the agents remember. Approve a handful of dashboards and the next ones come back looking like you built them: your colours, your layout, your idea of a good chart. That's the self-learning loop. Your taste, reflected back, getting sharper with every build.

Telemetry Optimisation

Continuous review of your search workloads with concrete recommendations to lower SPL cost, cardinality, and TCO.

How it works

You connect autoMETA Operator for Splunk to your Splunk over HTTPS using a service-account token. The agents run on autoMETA's infrastructure. The only data ever sent over the wire is the search results the agent explicitly needs to do its job. Nothing is persisted outside your Splunk except workflow telemetry (token counts, audit records).

For environments that cannot allow inbound network access, the Enterprise plan ships the entire stack as a Docker package you run inside your own VPC.

FAQ

Does autoMETA Operator for Splunk need my Splunk to be internet-reachable? For the hosted plans, yes. Over HTTPS, with a token you control. The Enterprise plan removes this requirement: same agents, your network, your infrastructure.

Which versions of Splunk are supported? Splunk 9.4 and newer (Splunk Cloud and Splunk Enterprise). The dashboards we build use 9.4-safe Dashboard Studio JSON so they remain compatible with future versions.

Can I export everything I build? Yes. Dashboards, themes, optimisations: everything is owned by you, exportable as JSON/XML, and continues to work if you cancel.