About Splunk AI Assistant for SPL
Splunk AI Assistant is a generative AI-powered assistive app. Splunk AI Assistant leverages generative AI to improve your productivity and outcomes by making both SPL and all your Splunk data more accessible.
Splunk AI Assistant helps users with any level of Splunk proficiency find answers from their data in Splunk. The assistant can find the right data in your tenant, write and optimize domain-specific Search Processing Language (SPL, validate results by running searches, and troubleshoot ingestion and configuration issues.
Splunk AI Assistant does not share private company data with public AI and chatbot offerings. The assistant keeps customer data within the Splunk platform environment while running the service.
Service data collected by Splunk for training and fine-tuning goes into a separate, Splunk-controlled environment, as outlined in the Splunk AI Assistant terms. Service data is not sent to third-party LLM service providers, and customers can opt out of data collection for training and fine-tuning through the assistant's user settings at any time. See Splunk Protects for full details on data privacy at Splunk.
Use of Splunk AI Assistant is subject to Splunk's Acceptable Use Policy.
Requirements for Splunk AI Assistant
Splunk AI Assistant version 1.3.0 and higher is available to both Splunk Cloud Platform and Splunk Enterprise customers. For more details, see Install Splunk AI Assistant or Activate Splunk AI Assistant through cloud connected.
Splunk Cloud Platform and Splunk Enterprise customers using version 1.4 0 and lower must sign a specialized End-User License Agreement (EULA) covering data use before you can access the app or activate the cloud connected solution.
Limitations
- Splunk AI Assistant is not compatible with Splunk Trial stacks.
- Splunk AI Assistant has limited support on IL 2 FedRAMP deployments.
Supported languages
Splunk AI Assistant is available to Splunk Cloud Platform (SCP) customers supports the following languages:
- English
- French
- German
- Italian
- Japanese
- Korean
- Spanish
- Simplified Chinese
- Traditional Chinese inputs are supported, but output is in Simplified Chinese
Supported regions
Splunk AI Assistant is available to Splunk Cloud Platform (SCP) customers on AWS and Azure commercial stacks in the following regions.
Splunk AI Assistant runs as a completely separate service in each AWS or Azure region.
| Region | Service availability date |
|---|---|
| AWS - AP Mumbai | September 28, 2025 |
| AWS - Dubai | September 28, 2025 |
| AWS - AP Seoul | September 28, 2025 |
| AWS - AP Singapore | June 28, 2024 |
| AWS - AP Sydney | June 28, 2024 |
| AWS - AP Tokyo | June 28, 2024 |
| AWS - Canada Central | June 15, 2024 |
| AWS - EU Dublin | June 28, 2024 |
| AWS - EU Frankfurt | June 28, 2024 |
| AWS - EU London | June 28, 2024 |
| AWS - EU Paris | June 28, 2024 |
| AWS - US East Virginia | June 11, 2024 |
| AWS - US West Oregon | June 15, 2024 |
| AWS - EU Milan | September 28, 2025 |
| AWS - SA São Paulo | December 10, 2025 |
| AWS - AP Jakarta | December 10, 2025 |
| Azure - AP Japan | September 2, 2025 |
| Azure - UK South | September 2, 2025 |
| Azure - US East | September 2, 2025 |
| Azure - US West | September 2, 2025 |
Splunk AI Assistant features
You can complete the following tasks with Splunk AI Assistant:
- Write a task in plain, natural language and convert this task into a usable SPL search.
- Copy and paste an SPL search and convert this search into a detailed breakdown in plain language.
- Optimize a new or existing SPL search by applying the best Splunk practices in the context of your environment.
- Input a plain, natural language question, or a Splunk platform term or product name and have the app provide information on Splunk product concepts and product functionality, sourced from Splunk documentation, community forums, and other Splunk training materials and resources.
- Iterate on task responses with a conversational user experience.
- Accelerate these tasks within a familiar Splunk interface.
Where Splunk AI Assistant runs
For Splunk Cloud Platform (SCP) users, Splunk AI Assistant runs as a separate component which is not metered like searches are against data indexed by Splunk.
Splunk AI Assistant for Splunk Cloud Platform runs on AI Service, which is a multi-tenant cloud service hosted in Splunk Cloud Platform. This AI Service makes GPUs available for generating responses to customer prompts. AI compute data is offloaded to this AI Service.
For Splunk Enterprise users, the cloud connected solution leverages Splunk platform-managed AI services in the cloud, with on-premises environments connecting to it. This solution offers a secure connection between your environment and Splunk managed cloud, with no GPU requirements.
Cloud Customer and cloud connected customer prompts are sent to an LLM located in the same region as their tenant when generating responses if they are using <Splunk hosted model>. For customers who leverage the Model Runtime choice feature, those prompts are sent to the third-party model as described in Using the Model Runtime choice feature.
The SPL generated by the assistant requires a separate step to Open in Search. Searches executed in the Search app work like any other Splunk search, and consume resources accordingly.