---
title: Splunk MCP
description: >-
  Bits queries Splunk logs and telemetry to surface relevant events during
  investigations.
breadcrumbs: Docs > Integrations > Splunk MCP
---

# Splunk MCP
Integration version1.0.0
## Overview{% #overview %}

The Datadog–Splunk integration is an MCP-based integration that enables Datadog to securely access a [Splunk MCP server instance](https://splunkbase.splunk.com/app/7931). Through this integration, the Bits AI SRE agent is granted access to designated Splunk indexes and data sources that are exposed via the available MCP tools.

During the Preview period, Bits AI SRE investigations that include one or more Splunk tool calls will not be billed.

## Setup{% #setup %}

### Prerequisites{% #prerequisites %}

Your Splunk MCP Server must be hosted on Splunk Cloud and available from the public internet. See the Splunk instructions for [enabling the MCP in your Splunk configuration](https://help.splunk.com/en/splunk-cloud-platform/mcp-server-for-splunk-platform/configure-the-splunk-mcp-server).

### Create an encrypted authentication token{% #create-an-encrypted-authentication-token %}

Follow the Splunk instructions to [create an encrypted authentication token](https://help.splunk.com/en/splunk-cloud-platform/mcp-server-for-splunk-platform/connecting-to-the-mcp-server-and-settings#step-1-create-an-encrypted-authentication-token-for-your-client-0).

### Connect your Splunk MCP Server account to Datadog{% #connect-your-splunk-mcp-server-account-to-datadog %}

1. Add your Splunk MCP server URL and encrypted token
| Parameters                                                         | Description                                                                                                                |
| ------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------- |
| Account name                                                       | Choose a name that will help you identify this account later.                                                              |
| Splunk MCP Server URL                                              | This is the URL for your MCP server. Example: https://{stack-name}.splunkcloud.com/services/mcp                            |
| Description of the account scope                                   | Provide additional context that will help Bits AI SRE understand which aspects of your infrastructure this account covers. |
| The Splunk MCP Encrypted Token used to connect to your MCP server. | The token value from above.                                                                                                |
1. Click the **Save** button to save your settings.

## Data Collected{% #data-collected %}

### Metrics{% #metrics %}

TBD

### Service Checks{% #service-checks %}

TBD

### Events{% #events %}

TBD

## Troubleshooting{% #troubleshooting %}

Need help? Contact [Datadog support](https://docs.datadoghq.com/help/).