Skip to main content
false

Feature overview

Splunk AI Assistant for SPL is a generative AI-powered assistive app that accelerates end user day-to-day tasks by generating Splunk Search Processing Language (SPL) with a natural language prompt and increases the user's knowledge by explaining SPL as well as concepts and functionality of Splunk products.

Splunk AI Assistant for SPL runs on AI Service, a multi-tenant, cloud service hosted in Splunk Cloud Platform. AI Service makes GPUs available for generating responses to customer prompts. All the AI compute is offloaded to AI Service. No AI compute is running on the customer’s search head.

Model overview

Splunk AI Assistant for SPL offers bi-directional translation between natural language (NL) and Splunk Search Processing Language (SPL).

Splunk AI Assistant for SPL uses an open-source transformer-based large language model (LLM) that is fine-tuned by Splunk.

Splunk AI Assistant for SPL runs as a separate component of Splunk Cloud Platform (SCP). A primary use of the Assistant is to generate SPL which can then be executed as a Splunk search. SPL generated by the Assistant that is executed in the Search app works like any other Splunk search, and consumes SVC resources accordingly.

Model evaluation and performance

Splunk AI Assistant for SPL model has been trained by Splunk. It is hosted in Splunk Cloud Platform which means your data is not being sent to a third-party LLM service.

The model is fine-tuned using a combination of manually created and synthetically-generated data, Splunk documents, Splunk training materials, and other Splunk resources.

Data sources for model training

In addition to what is noted under “Model Evaluation and Performance” above, Splunk may use information from customers’ interaction with Splunk AI Assistant for SPL in accordance with Specific Terms for Splunk Offerings and Documentation unless customers opt-out of this data sharing.

Data privacy and security

When you use Splunk AI Assistant for SPL your data is not sent to or used with any third-party genAI service. Data input into Splunk Assistant for SPL to power the service and the related outputs, stay within Splunk compliance boundary for customer’s underlying Splunk Cloud Platform offering. Data sources used for research and development may reside outside such compliance boundary or be shared in accordance with the Specific Terms for Splunk Offerings and Documentation unless customers opt-out of this data sharing.

Fairness

Splunk AI Assistant for SPL results are unique to each customer and should be reviewed for accuracy and fairness by a human prior to use.