---
title: "Splunk On-Call integration for LuumenAI"
url: "https://www.luumen.ai/integrations/splunk-on-call/"
entity: SoftwareIntegration
category: "Incident response"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# Splunk On-Call integration for LuumenAI

On-call, escalation, and timelines from Splunk On-Call beside the fix.

## What LuumenAI can do with Splunk On-Call

LuumenAI connects to Splunk On-Call with OAuth 2.0 and exposes 16 tools (8 read-only · 8 write). Reads answer immediately; writes are shown as a plan and require approval by default, configurable per tool by an administrator.

## Key facts

- Authentication: OAuth 2.0
- Tools available: 16 tools (8 read-only · 8 write)
- Plan: available on all plans
- Category: Incident response

## About Splunk On-Call with LuumenAI

Keep Splunk On-Call in step with the fix. LuumenAI sees open incidents and who is on call, escalates with context attached, and keeps the timeline updated as governed actions run — so the record matches what actually happened.

## Example tools

Read-only (8 in total):

- `List open incidents` — Current incidents with severity, responders, and timelines.
- `Who is on call` — Resolve the schedule for a service before you page anyone.
- `Get incident timeline` — Every event on an incident, in order.
- `List services` — Services and their current status.
- `Get escalation policy` — Who gets paged, in what order.
- `List schedules` — On-call rotations and overrides.
- `Get responder status` — Who has acknowledged and who has not.
- `Search past incidents` — Similar incidents and how they were resolved.

Write and destructive (8 in total, approval required by default):

- `Acknowledge incident` — Take ownership of an incident from the session.
- `Page a responder` — Escalate to a person or team with the context attached.
- `Post timeline note` — Append findings and actions to the incident timeline.
- `Resolve incident` — Close an incident with the summary attached.
- `Reassign incident` — Hand off to another responder or team.
- `Add responder` — Pull another person into the incident.
- `Create maintenance window` — Suppress paging for planned work.
- `Override on-call` — Swap the on-call for a bounded period.

## Frequently asked questions

### How does LuumenAI connect to Splunk On-Call?

Authorize once with OAuth 2.0. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in Splunk On-Call on its own?

Read actions answer immediately. Anything that writes is shown as a plan and requires approval by default. Administrators configure that per tool.

### Is there an audit trail?

Every call to Splunk On-Call — read or write, approved or declined — is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/splunk-on-call/