Decision API Search Command

The OpenAI Decisions Add-on extends Splunk search capabilities by providing three streaming commands that leverage the OpenAI Decisions API to evaluate events against natural language prompts. The add-on enables analysts to classify, score, and route events using conversational queries rather than complex search logic. The decide command evaluates yes/no questions and assigns a probability score to each event. The choose command selects from multiple labeled options and returns both the chosen option and the probability distribution across all choices. The grade command rates events against ordered severity or priority levels and provides probabilities for each level. All commands operate as streaming processors that enrich events with decision metadata, allowing downstream filtering, alerting, or routing based on AI-assisted classification. The add-on requires an OpenAI API key and outbound HTTPS connectivity to the OpenAI Decisions API endpoint.