engineering / skill

Splunk Custom Visualizations

A skill for Claude Code, Cursor and Codex, with examples and a local harness, for building Canvas 2D custom visualizations for Splunk Dashboard Studio.

Repository owner rcastley

Not rated yet
0 comments

Like 0 Save

Published 11 Oct 2026Listing updated 12 Oct 2026

At a glance

Purpose: A skill for Claude Code, Cursor and Codex, with examples and a local harness, for building Canvas 2D custom visualizations for Splunk Dashboard Studio.
Runs in: Local agent with shell, Web service
Operating systems: Not stated
Needs: Runtime: Node.js 22+, Yarn 1.22+; Splunk 10.4+ or Cloud; Needs internet: Not stated; Needs accounts or API keys beyond your agent: Not stated
Files and data: Reads files: Yes; Writes files: Yes; Sends data to other services: Not stated
Tool type: Skill
Delivery: From GitHub
Version: Latest on the main branch
Access: Code on GitHub
Compatibility: According to the README, the skill works in Claude Code and Cursor, where you invoke /splunk-viz, and in Codex, where you invoke $splunk-viz. The README lists Splunk Enterprise 10.4 or later or Splunk Cloud for native Studio extensions, and Splunk Enterprise 10.2 or later for legacy apps. The README lists Node.js 22 or later.
External costs: The repository is Apache-2.0 licensed and states no pricing. It needs Splunk Enterprise or Splunk Cloud, and the README says nothing about their cost. Your coding agent or model provider may charge for usage.
Permissions: The skill acts through your coding agent with the access you give it. According to the README, the install script installs the skill to ~/.claude/skills/splunk-viz, ~/.cursor/skills/splunk-viz and ~/.codex/skills/splunk-viz, or makes a project-local copy. It says esbuild bundles each Studio visualization and package.mjs produces a .spl app package, and the harness runs from a local web server on port 8080.
Usage terms: Apache License 2.0, as stated in the repository. See its LICENSE file for the exact terms.

Code on GitHub

rcastley/splunk-custom-visualizations

Apache-2.0

JavaScript58 stars20 forksLast pushed 14 Sept 2026 UTC

Public GitHub data fetched 13 Oct 2026 UTC · 0 days old

Skill folders in this repository (3)

Folders that contain a SKILL.md file, from GitHub's file list on 13 Oct 2026 UTC.

View on GitHub ↗

What it does

Splunk Custom Visualizations is a repository for building Canvas 2D custom visualizations for Splunk Dashboard Studio. According to the README, its splunk-viz skill supports Claude Code, Cursor and Codex and covers scaffolding, rendering logic, testing and packaging. The README says legacy Simple XML visualizations remain in legacy/examples.

The README lists native Studio example projects, archived legacy examples, a bundled legacy health app and a locally served harness. The README features Custom Single Value, Index Health, Gauge and Component Status Board.

The README describes each native visualization as an extension project: visualization.ts draws on a canvas, config.json holds Format-panel options, esbuild bundles an iframe-loaded module, and package.mjs produces a .spl app package.

Who it is for

People who build custom visualizations for Splunk Dashboard Studio and use Claude Code, Cursor or Codex.

Example tasks

Ask your agent to use splunk-viz to create a donut chart visualization with a center label that accepts label and value columns.
Install the splunk-viz skill for your detected agents, or into one project, with the install script.
Build the native Studio example projects with the build script.
Open the Studio harness to view a built visualization with fixture data and option controls.
Package a Studio visualization as a .spl app.

Getting started

The README's Quick Start is to clone the repository, open it in Claude Code, Cursor or Codex, and ask your agent to build a visualization with splunk-viz. To use the skill in another project it shows ./install-skill.sh (user-global for detected agents) and ./install-skill.sh --project /path/to/repo (project-local copy). For the Studio harness, the README says to build a Studio project first so its visualization.js output exists, then serve the repository with python3 -m http.server 8080 and open harness/studio/. INSTRUCTIONS.md has the full setup guide. The README has the exact commands.

Limitations

According to the README, native Studio extensions need Splunk Enterprise 10.4 or later or Splunk Cloud, and the legacy apps need Splunk Enterprise 10.2 or later. It lists Node.js 22 or later, and Claude Code, Cursor or Codex for the skill. Yarn 1.22 or later is listed for a new official @splunk/create scaffold, while this repository's examples use npm. The README names Splunk's official Studio-only skill, custom-visualization-builder, and says to use that workflow when scaffolding outside this repository. The README says the splunk_health bundle is archived legacy code and is not a native Studio extension. The repository can change at any time; check its README before you install.

Data practices

The README describes rendering Splunk search results on a canvas and a local harness with fixture data and an editable data grid. It does not describe telemetry or data sent to coding-agent or model providers. What is sent where depends on your coding agent and model provider.