splunk-apps-public

Public distribution of DataDay Technology Solutions Splunk apps — early-access releases for the Splunk community before apps are live on Splunkbase.

Apps in this repo

Blast Radius — Attack Replay (SA-attack-replay)

DVR-style attack replay that scrubs multi-phase kill chains (APT, Ransomware, Insider Threat) across a host-swimlane incident timeline — plus a quantified Detection Coverage Score and a per-tactic MITRE ATT&CK gap table that pinpoint which observed techniques have no detection. CIM-compliant and queried via | tstats, so the same dashboard runs on bundled demo data or your real CIM-tagged production data.

Status: Community early-access (Splunk Community Dashboard Contest 2026). Coming to Splunkbase.

Latest release: v1.9.6

Splunk Innovators Toolkit

Add professional polish to Classic Simple XML dashboards — 87 drop-in CSS/JS components, 12 premium themes, 14 animated backgrounds, and a visual Design Studio. Import existing dashboards, add polish, export. No front-end code required.

Status: Coming to Splunkbase soon. Install from this repo for early access.

Latest release: v2.0.2

Installation

Splunk Web (recommended)

1. Download the latest .tar.gz from the Releases page
2. In Splunk Web, navigate to Apps → Manage Apps
3. Click Install app from file
4. Upload the downloaded tarball
5. Restart Splunk when prompted

Splunk CLI

splunk install app /path/to/splunk-innovators-toolkit-2.0.2.tar.gz
splunk restart

Manual install

Extract the tarball into $SPLUNK_HOME/etc/apps/ and restart Splunk:

tar -xzf splunk-innovators-toolkit-2.0.2.tar.gz -C $SPLUNK_HOME/etc/apps/
$SPLUNK_HOME/bin/splunk restart

Compatibility

• Splunk Enterprise 9.0+
• Splunk Cloud (Classic and Victoria stacks)
• Requires Classic Simple XML (not Dashboard Studio)

Author

Steve Koelpin — DataDay Technology Solutions linkedin.com/in/skoelpin

Feedback

Found a bug or have a feature request? Open an issue on this repo.