splunk_preview_change
Preview the impact of Splunk configuration or administrative changes before execution by specifying the operation, target, and proposed settings.
Instructions
Preview the impact of a configuration or administrative modification before executing it.
Args: operation: Operation type (e.g. 'update_index', 'delete_saved_search', 'modify_role'). target: Target resource identifier. proposed_settings: Proposed parameter values to evaluate.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| target | Yes | ||
| operation | Yes | ||
| proposed_settings | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | Output payload or results | |
| error | No | Error message if execution failed | |
| success | No | Whether the tool execution succeeded | |
| metadata | No | Execution timing, pagination and environment details | |
| warnings | No | Operational warnings or notices | |
| request_id | No | Correlation ID for audit trail and observability |