Splunk AI Assistant

Splunk AI Assistant is your AI-powered Agentic companion for getting answers from your data in Splunk. Whether you're a seasoned expert or just starting out, it helps you discover, analyze, and act on your data through natural conversation — going far beyond writing and explaining SPL. https://youtu.be/ynRBiepXVw4?si=eua38GwP0nwuvk3m With Agent Mode, the assistant reasons through your requests, takes actions on your behalf, and leverages a growing set of tools and skills from a single chat window. It decomposes complex questions into parallel steps, exposes its reasoning to build trust, and asks clarifying questions when prompts are ambiguous. What it can do for you: 🚀 SPL Generation, Editing & Optimization: Describe your search in plain English and get accurate SPL — or modify existing queries without rewriting, while making them faster. 📖 SPL Explanation: Understand any search in plain English, with a detailed breakdown of its logic. 🔍 Data Discovery: Don't know where your data lives? The assistant scans your environment to find the right sources. ⚡ Search Execution & Analysis: With your permission, it runs searches and summarizes results in chat — so you get answers, not just queries. 📊 Content Discovery: Semantically search across dashboards, saved searches, reports, and lookups — the assistant finds and reuses the best-matching content through natural language. 📚 Knowledge Retrieval: Get answers about Splunk documentation, platform terms, and products. 🎯 ITSI Integration (Read-Only): Bring IT Service Intelligence into the conversation — retrieve service health, KPIs, episodes, and related insights without leaving chat. 🌐 SPL2 & Federated Search (Beta): The assistant now supports SPL2 and Federated Search, including the Machine Data Lake, so you can query data across multiple sources and tiers. 🧰 More Tools in Agent Mode: This release expands Agent Mode with additional tools and skills, so the assistant can handle more of your workflows end to end. Teach AI (Beta): Admins can provide custom instructions via a markdown file to teach the assistant their org's best practices, data catalog, and guardrails — for smarter, more relevant results. Context Settings: Formerly Personalization, this generates more contextual results using non-personal metadata while honoring role-based access controls. Admins have full visibility into data collected. Model Runtime Choices: The assistant leverages Azure OpenAI models alongside Splunk-hosted LLMs for the best response quality. Availability: Splunk Cloud customers in AWS and Azure commercial regions, FedRAMP IL2, and Enterprise customers via Cloud Connected. Agent Mode is available to AWS commercial Splunk Cloud customers with this release. (c) Splunk 2026. All rights reserved.