Splunk Strawberry

Hand the Splunk events to a companion

A companion works the 3 operations your Splunk account exposes. It can run a search and create an event, and every one of those waits on an approval card showing the event before it changes.

Open the event. Check it against something else. Write the change. Move to the next one. That is the Splunk afternoon nobody can hand off, and a companion does the whole pass and gives you back the batch, with nothing landing on a event until you approve it.

What it can do is exactly what Splunk exposes to an account you authorise and nothing beyond it: 3 operations, 1 read and 2 writes. In practice that means it can run a search and create an event, and work across the events, searches and search job statuses.

The Splunk API stops at Splunk. A companion does not. The same run opens the customer's website, the supplier portal, the internal tool somebody built in 2019, because it is working the browser you are already signed into rather than calling in from outside it.

Where do the events come from?

1 of the 3 operations is a read.

Your account, not a guess at it: a companion can get search job status, and the full list below is the whole list, with nothing inferred from Splunk's documentation.

The events are what most of this inventory is about, alongside the searches. A companion can hold all 3 of these operations and forty open tabs in the same pass, which is how an afternoon of Splunk admin becomes a queue you review.

  • Get Search Job Status

Which events wait for your approval?

All 2 write operations wait for you.

A companion can run a search and create an event, and each one is staged on an approval card first: you see the event, the field and the new value before it lands in Splunk.

Nothing in Splunk is sent, changed or deleted on your behalf without that click, and a rejected card leaves the event exactly as it was. The gate is the same one on every surface, described at security.

  • Run Search
  • Create Event

What does the recurring events pass look like?

Yes.

Saved as a routine, the Splunk events pass runs at the hour you pick: the Monday sweep, the overnight refresh, the Friday check. Keep Awake holds the machine awake for the length of a run, so a scheduled pass finishes with the lid closed.

The research and analysis playbook catalogues the other recurring shapes of the reporting, the Splunk events sweep among them, and finished runs are published at real runs.

Experience Strawberry for free

Download

Trusted by fast-growing companies worldwide

Frequently asked questions

Yes. Connect your Splunk account and a companion works 3 operations in it, with every change staged for your approval. You authorise the connection yourself and the credential is held encrypted where Strawberry never receives it.

Strawberry is free to download and includes AI credits to start. Paid plans begin at $20/month. See pricing. · Reviewed · Canonical facts for AI agents

Experience Strawberry for free

Download

Trusted by fast-growing companies worldwide