Skip to main content
Glama
Wasim-Shaikh25

splunk-dashboard-mcp

create_dashboard

Create a private Splunk dashboard in your profile using Studio JSON or Classic XML, after confirming you have consulted the official docs.

Instructions

Create a NEW dashboard under YOUR profile (owner = your Splunk user, private by default). Supports Dashboard Studio (JSON) and Classic (Simple XML). Requires docsConsulted=true. DOCUMENTATION-FIRST: read the official Splunk docs (use the splunk_docs tool) before writing SPL or a dashboard definition; do not guess syntax or schema.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
appNoApp namespace to create in. Default search.
nameYesNew dashboard name/id (unique within the app).
labelNoOptional display label (Studio).
formatNostudio (JSON) or classic (XML). Auto-detected if omitted.
definitionYesFull dashboard definition: Studio JSON or Classic Simple XML.
docsConsultedYesMust be true — confirms you read the Splunk docs for this format.
docsReferenceNoThe doc URL/section you used (recommended for the audit trail).

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.1

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the burden and covers important behavior: it is a mutating create operation, the dashboard is owned by the caller's Splunk user, the default visibility is private, and documentation consultation is mandatory. It doesn't detail failure modes or overwrite behavior, but 'NEW' implies non-overwrite and the core side effects are disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three front-loaded sentences with no filler. The core purpose, key constraints, supported formats, and documentation-first requirement are all stated directly and efficiently.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a create action with no output schema, the description covers ownership, privacy default, supported definition formats, and the required docsConsulted flag. It omits only minor details such as the app namespace default, which the schema already documents, so an agent has enough context to invoke this correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline applies. The description reinforces the format mapping (Studio JSON vs Classic XML) and emphasizes docsConsulted=true, but these details are also present in the input schema. Little new parameter-level meaning is added beyond emphasis.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description starts with a specific verb and resource ('Create a NEW dashboard') and adds distinguishing details: it is scoped to the caller's profile, private by default, and supports both Dashboard Studio JSON and Classic Simple XML. This makes it easy to separate from sibling tools like update_dashboard or create_report.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly indicates when this tool is appropriate — when creating a new dashboard owned by the calling user — and explicitly instructs the agent to consult Splunk docs first via the splunk_docs tool. It doesn't explicitly enumerate exclusions or contrast with update_dashboard, but the 'NEW' and ownership language provides sufficient routing context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.