Getting Data In

Open AI Compliance API to Splunk

Cerum
Loves-to-Learn

Has anyone had any luck getting Open AI Compliance API logs into Splunk Cloud? This API ships logs that provide visibility into prompts / replies with Chat GPT. Looking to ingest this data to monitor for possible sensitive / confidential data being uploaded. Open AI has built in integrations with several applications https://help.openai.com/en/articles/9261474-compliance-api-for-enterprise-customers.

Surprisingly, Splunk is not one of these applications. My question is, has anyone had any luck getting these logs into Splunk. I have the API key from Open AI - but I'm struggling with creating a solution to ingest these logs into Splunk - and honestly surprised their isn't a native application built by Splunk for this. 

Labels (1)
Tags (3)
0 Karma

skeedunt
New Member

I am trying to do this now. I built a lambda function in AWS that queries the compliance api and sends the data to splunk.

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @Cerum 

At this time there isnt a Splunk app for OpenAI Enterprise Compliance - If you already have access to the OpenAI Compliance API (https://chatgpt.com/admin/api-reference) then you could look at using the Splunk UCC Framework to build a custom app to poll the logs. UCC gives a good starting point so if you're familiar with Python then you may be able to get something running quite quickly.

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

 

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...