AI tier

AI tier 1.0 — General Availability AI tier is Splunk's Kubernetes-native AI services layer that brings selected Splunk AI capabilities — including the Splunk AI Assistant and hosted foundation models — directly into on-premises, private-cloud, and air-gapped environments. For organizations that need AI requests, model execution, and platform data to remain under their operational control, AI tier delivers a cloud-like AI experience while keeping data local. Overview Unlike Splunk Cloud AI features which require cloud connectivity, AI tier is purpose-built for customers in highly regulated industries, government, defense, financial services, and security-sensitive sectors that cannot — or prefer not to — move sensitive workloads to the cloud. This GA release is designed for production-ready, on-premises AI deployment for Security, IT Ops, and SRE teams. AI tier 1.0 GA includes: * Splunk AI Assistant (SAIA) on-premises — Run the full conversational and agentic AI assistant locally, powered by the Gemma 4 model, for security and observability workflows * Bring Your Own LLM (BYOLLM) — Connect your own large language models via OpenAI-compatible endpoints, giving customers flexibility over model choice, cost, and data residency ⚠️ [see note below] * Splunk Hosted Foundation Models — Foundation models available locally on AI tier for inference without cloud connectivity * AI Toolkit capabilities on AI tier — Core AITK commands and hosted model access available in on-prem environments * Kubernetes-native deployment via SOK — Operator-driven lifecycle management through the Splunk-AI-Operator for Kubernetes and the AI Platform custom resource (optional) * Air-gapped and disconnected environment support — Designed from the ground up for network-isolated deployments; once set up, AI tier operates completely offline * Bare-metal environment support — Deploy on existing on-prem infrastructure meeting validated hardware requirements * Simplified installation — Largely script-driven deployment with ~70–80% automation, including support for internal registries and repositories Customer Value AI tier enables organizations to harness the same AI capabilities available in Splunk Cloud while maintaining full data sovereignty. Target customers include on-premises, bare-metal, and air-gapped Splunk customers — particularly government agencies, defense organizations, financial institutions, and other regulated industries. With AI tier, customers get dedicated AI runtime capacity that doesn't compete with Search Head workloads, enabling faster and more reliable AI-driven operational workflows.