splunk
Installation
SKILL.md
Splunk
Query Mozilla's Splunk Cloud (security-mozilla.splunkcloud.com) for Azure
activity logs covering Taskcluster worker VM lifecycle.
Auth model: Splunk REST API is disabled
Mozilla's Splunk Cloud has port 8089 / token auth turned off, so splunk-sdk
and curl-with-bearer-token both fail. This skill instead drives Splunk Web
via browser-harness: it fetches /en-US/splunkd/__raw/services/search/jobs
from the user's already-authenticated Chrome tab, using the
splunkweb_csrf_token_* cookie + X-Splunk-Form-Key header.
Prerequisite: the user must have
https://security-mozilla.splunkcloud.comopen in Chrome and signed in via SSO. The skill auto-switches to that tab.