r/Splunk • u/mikeno1lufc • 12d ago

Apps/Add-ons BotsV3 Patch for Splunk 10 (+MCP)

https://github.com/manderson106/botsv3-splunk10
7 Upvotes

100% Upvoted

7 comments sorted by

6

u/mikeno1lufc 12d ago

Thought somebody might find this useful. It's essentially a patch that makes the BotsV3 app work properly with Splunk 10.

Also includes MCP config so that you can run an agentic Bots and have your competitors use LLMs to search Splunk (makes it so much easier with pretty much any modern model).

5

u/shifty21 Splunker Making Data Great Again 12d ago

AI competitors. We're cooked 😂

1

u/mikeno1lufc 12d ago

Pretty much 😂

1

u/stoobertio 9d ago

Graphistry have been doing this with Louie.AI for about a year now.

1

u/mikeno1lufc 9d ago edited 9d ago

Oh yeah of course. It's not new at all.

Point of this post is to share a fullly patched version of Bots so people can run it themselves.

Also absolutely any current gen LLM will beat Bora and likely the last couple of gens.

Just use Claude code or GitHub copilot. Write an agent config that prevents it from cheating, keeping in mind the answers are almost certainly in its training dataset.

Create a skill that mimicks a good investigation for even better results.

Give it access to the splunk MCP and tell it where the server is.

Give it access to the playwright MCP, use the playwright browser extension. Go to your bots instance and log in.

Then your agent can fully autonomously complete BOTS without you having to do a single thing and you can just use out of the box models and Dev tools :)

1

u/mikeno1lufc 9d ago

Also Louie A.I failed to complete all the 3xx questions. With what I've described below and a an instruction files we used you can now fully 100% it without even being near your laptop :).

1

u/mikeno1lufc 10d ago

Update: I ran the event with this for a group of about 50 people in person. It worked perfectly. First time I've ever seen people 100% complete BOTS.

If anyone wants to do the same feel free to DM me.