Weavz
Splunk On-Call

Splunk On-Call

Splunk On-Call incidents, alerts, escalation policies, teams, routing keys, schedules, and webhooks

16 tools
2 triggers

Tools

Name
list_current_incidents

List currently open, acknowledged, and recently resolved Splunk On-Call incidents.

search_incident_history

Search incident history with pagination. The reporting endpoint is rate limited to once per minute.

get_incident

Get detailed data for one Splunk On-Call incident by incident number.

create_incident

Create a manual Splunk On-Call incident for exact users or escalation policies. Requires explicit confirmation.

acknowledge_incident

Acknowledge exact Splunk On-Call incident numbers. Requires explicit confirmation.

resolve_incident

Resolve exact Splunk On-Call incident numbers. Requires explicit confirmation.

get_alert

Retrieve Splunk On-Call alert details by alert UUID.

list_on_call_users

Get current on-call users across the organization.

get_team_schedule

Get a team on-call schedule.

list_teams

List Splunk On-Call teams.

list_escalation_policies

List escalation policy summaries and associated teams.

list_routing_keys

List routing keys with associated teams and escalation policies.

list_alert_rules

List Splunk On-Call alert rules.

create_alert_rule

Create a Splunk On-Call alert rule from a raw official API payload. Requires explicit confirmation.

update_alert_rule

Update one Splunk On-Call alert rule by exact rule ID. Requires explicit confirmation.

delete_alert_rule

Delete one Splunk On-Call alert rule by exact rule ID. Requires explicit confirmation.

Triggers

Name
incident_webhook_received

Receive Splunk On-Call outgoing incident webhook payloads. Configure this URL in Splunk On-Call outgoing webhooks.

new_or_updated_incident

Poll current Splunk On-Call incidents for new or changed incident phase/alert count.

Quick Start

TypeScript
import { WeavzClient } from '@weavz-io/sdk'

const weavz = new WeavzClient({ apiKey: 'wvz_...' })

const result = await weavz.actions.execute('splunk-on-call', 'list_current_incidents', {
  workspaceId: '550e8400-e29b-41d4-a716-446655440000',
  integrationAlias: 'splunk-on-call',
  input: { /* ... */ },
})

Related Integrations

Works well with

Frequently Asked Questions

How do I connect Splunk On-Call to my app?

Use Weavz Hosted Connect for Custom authentication. Install the SDK, create a connection through the connect portal or API, then execute tools programmatically.

What tools does Splunk On-Call support?

Splunk On-Call supports 16 tools including List Current Incidents, Search Incident History, Get Incident, Create Incident, Acknowledge Incident, and more.

Can I use Splunk On-Call with AI agents?

Yes. Add Splunk On-Call to an MCP server in Tool Mode or Code Mode. Code Mode provides 3 meta-tools with on-demand API discovery so agents can compose stateful workflows without loading every action schema up front.

Can Splunk On-Call be used in stateful agent workflows?

Yes. Agents can combine Splunk On-Call tools with Filesystem, State KV, Human Gates, input partials, and other workspace integrations while keeping execution scoped to the selected workspace or end user.

What authentication does Splunk On-Call use?

Splunk On-Call uses Custom. Weavz stores credentials securely and uses them for authorized action execution.

How much does the Splunk On-Call integration cost?

The Splunk On-Call integration is included on all Weavz plans including the free tier with 20,000 actions per month. No credit card required.

What triggers does Splunk On-Call support?

Splunk On-Call supports 2 triggers including Incident Webhook Received, New or Updated Incident.

Connect Splunk On-Call in minutes

Get 20,000 free action executions every month. No credit card required.