splunk-skill

TRIGGER when: 사용자가 Splunk 환경 메타데이터 설정을 요청할 때. /splunk-env-ko, "내 인덱스", "우리 소스타입", "Splunk 환경 설정", "인덱스 등록", "소스타입 저장", env-config.md 편집 언급 시 트리거. DO NOT TRIGGER when: SPL 문법, 검색 명령어, 쿼리 최적화, 베스트 프랙티스 질문 (splunk-spl이 처리). DO NOT TRIGGER when: 영어로 입력 (use splunk-env for English). env-config.md에 저장된 Splunk 환경 메타데이터를 관리하여 splunk-spl 스킬이 환경 맞춤 SPL을 생성하도록 지원.

TRIGGER when: user wants to configure Splunk environment metadata, mentions /splunk-env, "my indexes", "our sourcetypes", "configure Splunk environment", or asks to save/register their Splunk deployment's index names, sourcetype names, hosts, lookups, or macros. Also trigger when: user asks to edit env-config.md or update their Splunk environment settings. DO NOT TRIGGER when: user asks about SPL syntax, search commands, query optimization, or best practices (handled by splunk-spl). DO NOT TRIGGER when: user writes in Korean (use splunk-env-ko). Manages Splunk environment metadata in env-config.md so the splunk-spl skill generates environment-specific SPL.

TRIGGER when: user mentions Splunk, SPL, SPL2, or any Splunk search command (stats, eval, rex, where, transaction, foreach, join, lookup, tstats, datamodel, collect, map, subsearch, eventstats, streamstats). Also trigger for: Splunk search optimization, Splunk field extraction, Splunk REST API, Splunk CLI, SPL-to-SPL2 migration, or troubleshooting Splunk search behavior. DO NOT TRIGGER when: user asks about other log/search platforms (Elasticsearch, OpenSearch, Datadog, Sumo Logic, Sentinel/KQL, Logstash, Grafana) even if the concepts overlap. DO NOT TRIGGER when: user wants to configure/save their Splunk environment metadata or import conf files (handled by splunk-env). Provides Splunk Enterprise 9.4 best practices — 86 rules covering all SPL/SPL2 commands, performance patterns, and migration guides.