Security

Integrating LLM's into Splunk Dashboard

syaganti
Loves-to-Learn Everything

I finetuned LLM and I want to integrate that with Splunk. In Splunk Dashboard, I am going to include Question/Answering mechanism where my model going to answer the question user has. 

For that, I have created an app "customApp" in src/etc/apps and added user-queries.py file in apps/customApp/bin folder and command.conf file in apps/myapp/default folder. 
I loaded the finetuned model and generated response in user-queries.py 

I am getting the following error on Splunk dashboard when calling this command. Btw, it worked when I hardcoded instead of loading the model and asking model to generate responses.

<Error in 'userquery' command: External search command exited unexpectedly with non-zero error code 1.>

Am I following the correct approach to integrate LLM to Splunk? I checked my splunkd.logs, it shows some disk space issue.


Can you someone please save me from this, Thanks in advance!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...

Global Splunk User Group Events: May + June 2026

Your Splunk Community Awaits: Discover Upcoming User Group Events Worldwide    Staying ahead in the fast-paced ...