Splunk AI Assistants help you write SPL, explain existing SPL, assist in your Observability and Security investigations, and even help with after-action reports. While at Cisco Live, I had a quick chat with Yan DeLucena and Matthew J Joseff, CFE about Splunk’s AI Assistants and how they help lower the bar of entry, save time, and help organizations be more resilient.

Transcript

Auto-generated captions, lightly cleaned. Speakers are not separately labeled.

Hey everyone, we’re out here at Cisco Live and I’ve been talking to Yan and Matthew about our Splunk AI assistants. Now, we have a SPL assistant. Can you give me some more information about what we’re doing there? Yeah, for sure. So the SPL assistant is was created mostly to simplify how users interact with the platform and hopefully also shorten time to value for customers by really simplifying the way that they ask questions about their data, help them explain queries to create queries, but also explain more about the data that they have in their own environments. Yeah. So, we’re helping you write the SPL, but if you get some really weird, complicated SPL out there, we’re explaining it to you as well. Is that right? Yeah, that’s correct. So, someone that really doesn’t have knowledge of the Splunk processing language, they can just ask Splunk to break it down, explain what was the intent intent of the author when creating that query, right? And really break down line by line what it is doing for them. So shorten that time to value like I said help educate the customer way faster but also uh allow new users to start getting answers for their questions way faster without having to know SPL. That’s fantastic. So I imagine there’s a lot of different use cases that you can start using these SPL assistants like the observability and security that are built into our platform. Is that right? That’s right. So the demo that we have here is for the SPL assistant, but we have also an AI assistant for observability and security. Yeah. So can we learn some more about maybe the security aspect of it? Great. So the security aspect of it, it’s all about time. Time is our only nonrenewable resource. And so if time is money, how do you spend your time writing reports, researching stuff? We are making the the entry into cyber security even easier because now what you can do is things like just open up the AI assistant and like for for writing SPL you can tell it to write your SPL but also I don’t know what um what this process was. So now I can ask what is this process? What does it do? What port does it run on? And what I love about this is at the end they can say write my shift report and it will accurately write the shift report based on the activity it sees. So no longer am I fat fingering something or missing uh that one incident that I worked on because I don’t know I forgot it. We’re taking out human error and reducing risk. Yeah. So it sounds like it’s saving that security analyst a lot of time like you said. Oh yeah. And this is going to help with churn. This is going to help with with uh alert fatigue, with analysts just getting bored. Why? Because they’re doing boring stuff. Writing a report is kind of boring. You know, having to research something kind of boring. Let’s let the machines do it. They do it more accurately. They do it consistently and they do it without getting tired. Yeah, that sounds really incredible. So, where can I go get some more information about this? Definitely splunk.com. Also, if you’re already a Splunk customer, reach out to your local friendly sales engineer or uh regional salesperson and they will be happy to talk to you about it as well. Thanks so much. Absolutely. [Music]