Community Blog
Get the latest updates on the Splunk Community, including member experiences, product education, events, and more!

Accelerating Observability as Code with the Splunk AI Assistant

CaitlinHalla
Splunk Employee
Splunk Employee

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing observability resources at scale (Self-Service Observability: How To Scale Observability Adoption Through Self-Service, How To Build a Self-Service Observability Practice with Splunk Observability Cloud). We also saw how to build out an OpenTofu/Terraform repository to successfully start the OaC practice (Splunk Observability as Code: From Zero to Dashboard). But what if it could be even easier?

What is the Splunk Observability Cloud AI Assistant?

If you haven’t seen our series on Splunk Observability Cloud’s AI Assistant in Action (find the first post here), we’ll give you a bit of background. The AI Assistant is backed by Agentic AI and is built directly into Splunk Observability Cloud. It helps you quickly and easily tap into the health of your applications and infrastructure and can even do cool things like generate Terraform code for your observability resources. Instead of manually writing HCL syntax from scratch, you can describe what you want to build in natural language and get production ready Terraform code in seconds.

Creating a Dashboard using the Splunk Observability Cloud AI Assistant

Let’s walk through the simple steps of building a dashboard using the Splunk AI Assistant. Let’s say we want a dashboard for monitoring our Kubernetes cluster’s health (side note:  Splunk Observability Cloud comes with out-of-the-box Kubernetes navigators so we can monitor Kubernetes environments with no manual configuration, but stick with us here).

Step 1: access the AI Assistant

Navigate to Splunk Observability Cloud and look for the AI Assistant icon. Select it to open the assistant:

CaitlinHalla_0-1765206040121.png

Step 2: describe your dashboard

In the AI Assistant, describe what you want in natural language:

CaitlinHalla_1-1765206040123.png

The assistant will generate Terraform code, which you can then plug into your Observability as Code repository:

CaitlinHalla_2-1765206040129.png

Don’t yet have an OaC repo template that communicates with Splunk Observability Cloud? Here you go: http://cs.co/self-service-observability

Building Charts with the AI Assistant

We can then populate our Dashboard with charts by generating chart configurations via Terraform using the AI Assistant. In our prompt, we can specify parameters like the dashboard we’d like the chart to live on, the metrics we’d like to monitor, the time range we’d like to focus on, the way we would like our data grouped, etc.:

CaitlinHalla_3-1765206040130.png

We can then take that Terraform generated by the Assistant, and once again plug that into our Observability as Code repository.

Once we’ve deployed those new resources, along with any others we wish to create, we can use them to monitor our application from within Splunk Observability Cloud:

CaitlinHalla_4-1765206040139.png

Best Practices

When using the AI Assistant for Terraform generation:

  1. Be specific and include as much detail as possible – metric names, filters, aggregation methods, time range,  etc.
  2. Iterate. Start with a basic dashboard and chart, then refine to add more specific details  
  3. Always review generated code to validate configurations.
  4. Dashboard groups require a dashboard_group resource, so make sure to create one of those first.
  5. Ask the Assistant to use variables and parameterize common values like namespaces or clusters.

Next steps

Ready to try it for yourself? Head over to Splunk Observability Cloud, open the AI Assistant, and start building. Don’t yet have Splunk Observability Cloud? Try it free for 14 days.

Resources

Never miss a new post. Check out this short guide on how to subscribe to the blog and get updates. 

Contributors
Get Updates on the Splunk Community!

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...