Watch the tooling work.
Free Splunk apps, Cribl packs, and Chrome extensions — built by a practitioner for the work, each with a two-minute demo.
Join 580+ practitioners across the Splunk & Cribl Innovators Networks.
Splunk Apps
splunkbase + trials · 08
1:47 · walkthrough
Innovators Toolkit for Splunk
A UI component library for Splunk dashboards — modals, toasts, form controls, progress bars, and data tables.
0:39 · blast radius
Attack Analyzer
Animated blast radius, MITRE ATT&CK coverage, kill-chain reconstruction, and IOC enrichment across 9+ ES data models.
Asset Tracker
Discover, classify, and track every asset across your Splunk environment. Real-time inventory, ownership, and lifecycle visibility.
Ellington Cyber Academy
A SIEM training platform for entry-level analysts — 150 SPL challenges, sample security data, and hands-on threat-detection exercises.
0:51 · gap detection
Data Heartbeat
Know the second a Splunk source type goes silent. Watches for data gaps and flags them against configurable thresholds.
Cost Governance
Monitor license usage, search cost, and resource consumption — and apply governance policies automatically.
PII Detection
Automatically detect and flag personally identifiable information in your Splunk data. Maintain compliance with privacy regulations.
Topology Analyzer
Dynamic topology visualization for Splunk infrastructure. Interactive node mapping for system dependencies and health.
Cribl Packs
request access · 02
1:18 · before / after
Cardinality Reduction Pack
Drop high-cardinality labels and aggregate noisy metrics before they hit your TSDB. Typical environments cut volume by 60–90%.
Data Tap
Live-capture pack for Cribl Stream. Sample and inspect data in-flight without disrupting your pipelines or touching destinations.
Browser Extensions
chrome web store · 02
0:19 · autocomplete
Tab Complete for Splunk
Terminal-style tab completion for SPL with fish-style ghost text from your search history, plus 40+ built-in abbreviations.
0:49 · live scoring
SPL Judge for Splunk
Score your SPL against 70+ best-practice rules. Real-time feedback, optimization tips, achievements, and efficiency tracking.
Let's compare notes.
Built and maintained by Steve Koelpin — a Splunk practitioner who ships these tools for the work he does every day. Every tool here is free to use. Questions, a feature request, or war stories from production? Drop a line.