Generate an investigation report with the AI Assistant

How to create and export an investigation report with the AI Assistant

Note: The AI Assistant for Splunk Enterprise Security is not automatically available by default. An administrator must reach out to their account team to get started.
Generate full investigation reports to help document or escalate your investigation. You can download the report as a PDF, add it to the investigation in a note, or attach it to the investigation as a file.
  1. Select an investigation from the analyst queue.
  2. Select View details to open the investigation Overview page.
  3. Select the AI Assistant icon ()to open the chat box and get started.
  4. Splunk Enterprise Security provides a few default requests to ask the AI Assistant. Select Generate investigation report.
    Note: If the AI Assistant is generating too long of a response, you can select the stop icon () to stop the AI Assistant.
  5. To save the report, select from the following icon options:
    1. Attach as file ()
    2. Add as note ()
    3. Download as PDF ()
The AI Assistant generates a report summary and adds it to the investigation. To see an example scenario using the AI Assistant, see Scenario: Jordan uses the AI Assistant to summarize an investigation and generate SPL.