Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater SPL Accuracy!

[adepp]

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to generate and understand searches. Now, with the latest 1.1.0 release, we’re taking it even further – helping users get up to speed faster with personalized SPL generation tailored to your specific environment. 

Check out what’s new with the Splunk AI Assistant for SPL app (v1.1.0) and learn how to get started below. Whether you're new to Splunk or a seasoned expert, the Splunk AI Assistant for SPL app streamlines the process of writing and understanding Splunk Search Processing Language (SPL) queries, saving time and improving productivity. 

Why use the AI Assistant?

Empower New SPL Users

Splunk Admins can now onboard new users to learn Splunk quickly, while reducing the burden on Admins to answer questions. The AI Assistant also accelerates the learning curve by surfacing relevant documentation and guidance, making it easier for beginners to become experts. 

Work Smarter, Not Harder

Let the AI Assistant streamline your production workflows and assist with administrative tasks. Need to create a new dashboard to troubleshoot an issue? Let AI handle the SPL so you can focus on solving the problem. Simply describe your search goal, and the AI Assistant will generate the necessary SPL. 

Key Features

Generate and Explain SPL Instantly with Natural Language

No need to memorize complex SPL syntax! The AI Assistant translates your natural language prompts into working SPL queries, significantly reducing the time and effort required to craft searches. 

Understand SPL with Ease 

Confused by a long and intricate SPL query? The Assistant provides detailed breakdowns, explaining each component of the query and its expected results in an easy-to-digest format.

Integrated Interactive Help from Splunk Docs

Ask questions and get AI-powered responses backed by Splunk Docs integration. Whether you need clarification on SPL functions or syntax, the assistant provides relevant information instantly.

SPL Personalized to Your Environment (NEW)

The personalization feature allows the AI Assistant to provide better results that are more contextual to the unique aspects of your environment (index names, source types, field names, and past searches). The Assistant analyzes your accessible index data and previous searches to enhance search relevance and improve AI-driven suggestions with more personalization. This means less tweaking and faster insights. 

What’s New in Splunk AI Assistant for SPL 1.1.0

We are excited to announce the availability of Splunk AI Assistant for SPL 1.1.0, which includes the following key updates and bug fixes: 

• Personalization feature GA: The Assistant can now use metadata from your environment to generate more relevant and accurate SPL. Splunk Admins can opt-in to the personalization feature via the Settings tab in the Splunk AI Assistant for SPL app.
• New Suggested Prompts: Discover new use cases and get started quickly with new prompts categorized by Data Discovery, Security Investigations, and Administrative tasks. Check out the Lantern article to learn more about these prompts.
• Refined data sharing: Changes have been made to what data Splunk AI Assistant for SPL sends Splunk. For details, see Share data in Splunk AI Assistant for SPL.

Check out the 1.1.0 announcement blog to learn more. Please refer to the Release Notes in Splunk Docs for additional details. 

Availability: Splunk AI Assistant for SPL 1.1.0 is available for Splunk Cloud Platform customers in all AWS commercial regions.

Additional Resources

• AI Resources: Splunk AI Adoption Hub: Access curated resources to get started and maximize value with AI at Splunk.
• Webinar (on-demand): Splunk AI: Ask me Anything: Learn what Splunk is doing around AI in this Community Office Hours session hosted by technical Splunk experts.

Ready to get started?

Simply complete the user agreement here to get provisioned for the app, then head to Splunkbase to download the app and install it on your activated cloud stack.

Happy SPL-ing!

– Baylie Depp, Customer Success Product Marketing