ARTIFICAL INTELLIGENCE
Splunk AI Assistant
Transform data analysis from manual, multi-step processes into intelligent agentic workflows.
Accelerate investigations using Agent Mode
With Agent Mode enabled, users enter a prompt, and Splunk AI Assistant will decompose it into a list of parallel tools and skill calls. This includes running event scans, discovering existing content like dashboards, and executing searches within the assistant with summarized findings.
Discover relevant context quickly
Splunk AI Assistant uses semantic search to help users easily find knowledge objects like dashboards, reports, and datasets in natural language. It uses a vector database to store and retrieve relevant context, such as index metadata, sourcetypes, and user search history, to personalize query generation.
Route prompts to the best-fit model
Model Runtime allows Splunk to determine the best model for each prompt, including models hosted outside of Splunk Cloud Platform. AI inferencing done via this method remains free. Users can limit the model to only use Splunk-hosted models, but doing so will disable Agent Mode.
Gain more control of the data you collect
Context settings and customization provide more control and visibility into the data that is collected from deployments and allows users to toggle certain collection options for index and sourcetype metadata, user search logs, and knowledge objects.
USE CASES
Your AI-powered companion for getting answers from your data
A real-time agentic teammate
With Agent Mode, the assistant reasons through your requests, takes action on your behalf, and leverages a rich set of tools and skills — all from a single chat window.
Results you can rely on
The assistant decomposes complex questions into parallel steps, exposes its reasoning to build trust, and asks clarifying questions for ambiguous prompts.
Turn operational data into business excellence
Accelerate insights by correlating business metrics and context with Splunk data and other data sources to control usage and costs.
Data discovery
Don't know where your data lives? The assistant scans your environment and identifies the right data sources for your question.
Intelligent SPL generation, editing, and optimization
Describe what you want to search in plain English, and the assistant translates it into accurate SPL. It can modify existing queries based on your instructions without rewriting them from scratch, leading to faster queries and insights!
Resources
Explore more from Splunk
Splunk AI Assistant FAQs
Splunk AI Assistant is our agentic AI-powered user experience that is designed to enhance productivity, effectiveness, and overall digital resilience with the full power of the Splunk Platform.
Splunk AI Assistant helps users with any level of Splunk proficiency find answers from their data in Splunk. The assistant offers bi-directional translation between natural language (NL) and Splunk Search Processing Language (SPL), and can help create searches, understand searches, learn SPL, learn more about Splunk platform products and features, and complete entire tasks.
Splunk AI Assistant collects different data depending on what specific personalization features that the customer has opted into. Opting into the context feature allows Splunk AI Assistant to generate responses that are better tailored to the customer’s specific environment. For full details on what is collected and how that data is stored, please see the AI service data in Splunk AI Assistant page.
If you want to share your thoughts on Splunk AI Assistant or suggest things you'd like to see in future updates to our team, please submit your ideas at ideas.splunk.com.
Splunk AI Assistant is available at no additional fee to Splunk Cloud Platform and Splunk Enterprise customers, aside from standard subscription fees.
Splunk MCP Server
Deploy native agents that plan and execute triage or troubleshoot with human oversight.
AI Toolkit
Build, train, and apply ML, AI, and foundation models quickly to your Splunk data.
Splunk AI Assistant in Observability Cloud
Easily troubleshoot and optimize your applications — from monoliths to microservices.
Splunk Cloud Platform
Get cloud-powered insights for petabyte-scale data analytics across the hybrid cloud.
Splunk Enterprise
Gain actionable insights from all your data using search, analysis, and visualization.
Splunk Enterprise Security
Deliver better, faster security outcomes and reduce risk with the AI-powered SecOps platform.
