About Splunk AI Assistant for SPL
Splunk platform users interact with Splunk products using the domain-specific Search Processing Language (SPL). Splunk AI Assistant for SPL improves this interaction, offering bi-directional translation between natural language (NL) and Splunk Search Processing Language (SPL).
The Splunk AI Assistant for SPL is a generative AI-powered assistive app. Splunk AI Assistant for SPL leverages generative AI to improve your productivity and outcomes by making SPL more accessible.
You can use the Splunk AI Assistant for SPL to help create searches, understand searches, and learn SPL. As an advanced user you can use the Splunk AI Assistant for SPL to make more efficient SPL searches and use with detailed breakdowns to learn more about current SPL searches.
Splunk AI Assistant for SPL does not share private company data with public AI and chatbot offerings. The assistant keeps customer data within the Splunk platform environment while running the service.
Data collected by Splunk for research and development goes into a separate, Splunk-controlled environment, as outlined in the Splunk AI Assistant for SPL terms. Data is not sent to third-party LLM service providers, and customers can opt out of data collection for research and development through the assistant's user settings at any time. See Splunk Protects for full details on data privacy at Splunk.
Use of Splunk AI Assistant for SPL is subject to Splunk's Acceptable Use Policy.
Requirements for Splunk AI Assistant for SPL
Splunk AI Assistant for SPL version 1.3.0 and higher is available to both Splunk Cloud Platform and Splunk Enterprise customers. For more details, see Install Splunk AI Assistant for SPL or Activate Splunk AI Assistant for SPL through cloud connected.
Both Splunk Cloud Platform and Splunk Enterprise customers must sign a specialized End-User License Agreement (EULA) covering data use before you can access the app or activate the cloud connected solution.
Limitations
- Splunk AI Assistant for SPL is not compatible with Splunk Trial stacks.
- Splunk AI Assistant for SPL is not supported on FedRAMP stacks.
Supported languages
Splunk AI Assistant for SPL is available to Splunk Cloud Platform (SCP) customers supports the following languages:
- English
- French
- German
- Italian
- Japanese
- Korean
- Spanish
- Simplified Chinese
- Traditional Chinese inputs are supported, but output is in Simplified Chinese
Supported regions
Splunk AI Assistant for SPL is available to Splunk Cloud Platform (SCP) customers on AWS and Azure commercial stacks in the following regions. Splunk AI Assistant for SPL runs as a completely separate service in each AWS or Azure region.
| Region | Service availability date |
|---|---|
| AWS - AP Singapore | June 28, 2024 |
| AWS - AP Sydney | June 28, 2024 |
| AWS - AP Tokyo | June 28, 2024 |
| AWS - Canada Central | June 15, 2024 |
| AWS - EU Dublin | June 28, 2024 |
| AWS - EU Frankfurt | June 28, 2024 |
| AWS - EU London | June 28, 2024 |
| AWS - EU Paris | June 28, 2024 |
| AWS - US East Virginia | June 11, 2024 |
| AWS - US West Oregon | June 15, 2024 |
| Azure - AP Japan | September 2, 2025 |
| Azure - UK South | September 2, 2025 |
| Azure - US East | September 2, 2025 |
| Azure - US West | September 2, 2025 |
| Azure - Milan | October 20, 2025 |
| Azure - UAE | October 20, 2025 |
| Azure - Seoul | October 20, 2025 |
| Azure - Mumbai | October 20, 2025 |
Splunk AI Assistant for SPL features
You can complete the following tasks with Splunk AI Assistant for SPL:
- Write a task in plain, natural language and convert this task into a usable SPL search.
- Copy and paste an SPL search and convert this search into a detailed breakdown in plain language.
- Optimize a new or existing SPL search by applying the best Splunk practices in the context of your environment.
- Input a plain, natural language question, or a Splunk platform term or product name and have the app provide information on Splunk product concepts and product functionality, sourced from Splunk documentation, community forums, and other Splunk training materials and resources.
- Iterate on task responses with a conversational user experience.
- Accelerate these tasks within a familiar Splunk interface.
Where Splunk AI Assistant for SPL runs
For Splunk Cloud Platform (SCP) users, Splunk AI Assistant for SPL runs as a separate component which is not metered like searches are against data indexed by Splunk.
Splunk AI Assistant for SPL for Splunk Cloud Platform runs on AI Service, which is a multi-tenant cloud service hosted in Splunk Cloud Platform. This AI Service makes GPUs available for generating responses to customer prompts. AI compute data is offloaded to this AI Service.
For Splunk Enterprise users, the cloud connected solution leverages Splunk platform-managed AI services in the cloud, with on-premises environments connecting to it. This solution offers a secure connection between your environment and Splunk managed cloud, with no GPU requirements.
The SPL generated by the assistant requires a separate step to Open in Search. Searches executed in the Search app work like any other Splunk search, and consume resources accordingly.