Create a board and add cards
Create AI Canvas boards in Splunk, add visualization, image, or text cards from multiple sources, and manage cards using the AI Canvas assistant and card controls.
The following provides an overview of how to create a board in AI Canvas in Splunk and add cards. It assumes that the prerequisites described in Onboarding to AI Canvas in Splunk have been met.
Create a board
To create a board, from the AI Canvas landing page, click Create canvas in the top right. A new board opens.
Add a new card to a board using the AI Canvas assistant
In a board, enter a prompt into the AI Canvas assistant on the left. Select a sample prompt or your own prompt into the AI Canvas assistant. The assistant displays a selection of sample prompts under categories such as Network Intelligence and Security & Compliance.
The AI Canvas assistant processes the prompt. If applicable, the AI Canvas assistant adds a card to the canvas that contains a visualization to answer your prompt. The AI Canvas assistant also explains the data in the visualization, including the SPL query used to generate the visualization. You can ask further questions or add clarifying details to generate more SPL queries and visualizations. The following shows an example of the AI Canvas assistant generating a single value visualization for a prompt.
When you enter a prompt into the AI Canvas assistant, the prompt is added to the queue at the bottom of the pane. The assistant displays its progress as it processes your prompt. If you enter multiple prompts, they are added to the queue. You can use the X icon to stop the AI Canvas assistant from processing a prompt and remove the prompt from the queue.
Add a new card to a board from Search, Reports, Alerts, or Dashboards
-
Add a card to an AI Canvas board from the Splunk Search, Reports, Alerts, or Dashboards page:
-
In Search, run a search. When the search finishes running, click Save As > AI Canvas card in the upper right corner.
-
In Reports, open the desired report. Click Edit > Add to AI Canvas in the upper right corner.
-
In Alerts, open the desired alert. Under Trigger History, click Add to AI Canvas for the desired event. You can only add an alert as an AI Canvas card if the alert has fired events. If an alert has no fired events, the option to add it as an AI Canvas card is not available.
-
In Dashboards, open the desired Dashboard Studio dashboard. Hover over the desired visualization, then click Add to AI Canvas. This option is not available in Edit mode or for Classic Simple XML dashboards.
-
- An Add to AI Canvas dialog opens. Do one of the following:
- Add the card to a new AI Canvas board. Enter the desired AI Canvas board title and description and card title. The card title may be prepopulated based on how you accessed the dialog.
- Add the card to an existing AI Canvas board. Select the desired AI Canvas board from the dropdown and enter the desired card title. The card title may be prepopulated based on how you accessed the dialog.
-
Click Add to AI Canvas. The board with the new card added opens in a new browser tab. You can modify the card if needed.
Add an image or text card to the board
In addition to visualization cards, you can also upload an image or add text to your canvas by using the relevant buttons in the right panel on the board.
Edit a card
You can edit a visualization card.
At the top of a card, you can access the following options:
-
Minimize or maximize the card.
-
View the card in full-screen.
-
View the message in the AI Canvas assistant that generated this card. This is not available for cards added from Search, Reports, Alerts, or Dashboards.
-
View card details, including when it was last updated.
-
Export the card as a CSV or PDF. Not all card types support export as CSV.
-
Rename the card.
-
Remove the card from the board.
At the bottom of a card, you can access the following options:
- Refresh the search to run it again.
- Change the visualization type. Select a visualization type that is compatible with the data.
- Modify the SPL query for the visualization by clicking Edit SPL, modifying the query, and clicking Save. The visualization updates using the results from the new query.
- Open in search to view the SPL query in the Search page.
Each card displays when it was generated in the bottom right corner.