Splunk AI Assistant

Splunk AI Assistant is your AI-powered companion for getting answers from your data in Splunk. Whether you're a seasoned Splunk expert or just getting started, the assistant helps you discover, analyze, and act on your data through natural conversation — going far beyond just writing and explaining SPL. https://youtu.be/ynRBiepXVw4?si=eua38GwP0nwuvk3m What Splunk AI Assistant can do for you: With Agent Mode, the assistant can now reason through your requests, take actions on your behalf, and leverage a rich set of tools and skills — all from a single chat window. The assistant decomposes complex questions into parallel steps, exposes its reasoning to build trust, and asks clarifying questions for ambiguous prompts. 🚀 Intelligent SPL Generation, Editing & Optimization: Describe what you want to search in plain English, and the assistant translates it into accurate SPL — or modifies existing queries based on your instructions without rewriting from scratch, while making them faster – leading to quicker insights! 📖SPL Explanation: Understand any SPL search in plain English, complete with a detailed breakdown of its logic and purpose. 🔍Data Discovery: Don't know where your data lives? The assistant scans your environment and identifies the right data sources for your question. ⚡Search Execution & Analysis: The assistant executes searches on your behalf (with your explicit permission) and summarizes results directly in chat — so you get answers, not just queries. 📊Knowledge Object Discovery: Find and reuse existing dashboards, saved searches, reports, and lookups through natural language. The assistant retrieves the best-matching content so you can build on what your team has already created. 📚Knowledge Retrieval: Get answers to questions about Splunk documentation, platform terms, or products. Teach AI (Beta) Administrators can provide custom instructions via a markdown file to teach Splunk AI Assistant about their organization's best practices, data catalog, and custom guardrails. This makes the assistant smarter and more relevant to your environment — and gives admins greater control over how AI operates in their deployment. Context Settings Formerly known as Personalization, Context Settings generate more accurate and contextual results by considering your unique data and environment, while only using non-personal contextual metadata and honoring role-based access controls. Administrators have full visibility into the data collected from their deployment. Model Runtime Choices Splunk AI Assistant leverages models in Azure OpenAI in addition to Splunk-hosted LLMs for the best available response quality. Availability Splunk AI Assistant is available to Splunk Cloud customers in AWS and Azure commercial regions, FedRAMP IL2, and Enterprise customers through Cloud Connected. Agent Mode is available to AWS commercial Splunk Cloud customers with this release. (c) Splunk 2026. All rights reserved.