slug: splunk provider: Splunk generated_by: planning/capability-mapping/scripts/classify_capabilities.py model: claude-opus-5 frame: - Software & Technology min_confidence: 0.7 capability_model: source: https://github.com/vincentmakes/turbo-ea-capabilities license: CC-BY-4.0 attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0 notice: NOTICE edge_count: 1 edges: - tag: Search spec_file: splunk-search-api-openapi.yml capability_id: BC-4220.20 capability_id_l1: BC-4220 capability_name: Observability Management confidence: 0.7 evidence: POST /services/search/jobs — Create a Search Job; GET /services/search/jobs/{search_id}/events — Get Search Events reason: Search jobs run queries over indexed machine data and return events/results — the analysis half of log-based observability for a platform described as 'searching, monitoring, and analyzing machine-generated big data'. Some ambiguity with general analytics/BI, hence 0.7.