Opt in or out of AI training and fine-turning in Splunk Enterprise Security

Note: AI features for Splunk Enterprise Security must be turned on by an administrator on the Security AI Assistant settings page. The AI features in Splunk Enterprise Security are subject to Microsoft's Azure OpenAI

Acceptable Use Policy

and Code of Conduct Content requirements.

The AI Assistant can collect telemetry and prompt feedback in Splunk Enterprise Security to help improve the product and train models. By default, Splunk does not use this AI service data for training or fine-tuning, but you can choose to opt in or opt out at any time.

Opting out gives you greater control over your data and helps support compliance with privacy regulations. When you opt out, Splunk immediately stops using new telemetry and feedback for training and fine-tuning, but does not delete any previously collected data. Opt in to allow Splunk to use your AI service data to improve the product and train models.

To opt in or opt out, follow these steps:

  1. In Splunk Enterprise Security, select Configure then All configurations and then Security AI Assistant settings.
  2. In the Use of Data for Training and Fine-Tuning section, deselect the check box for Allow Splunk to use your AI Service Data to opt out. To opt in, select the check box.
  3. Select Save.