Splunk AI Assistant for SPL

[uhrichspk]

Can the Splunkbase app - "Splunk AI assistant for SPL", be installed on an on-prem deployment of Splunk enterprise, or is the app only for public cloud deployments of Splunk Enterprise.  If this is not for on-prem, are there plans to build and app for on-prem, and what are the current timelines.

[marnall]

The app itself seems to be downloadable and usable on on-prem Splunk Enterprise, but it sends data to an offsite service which does the AI processing work.

Src: https://docs.splunk.com/Documentation/AIAssistant/1.0.3/User/AboutAIAssistant

Where Splunk AI Assistant for SPL runs

Splunk AI Assistant for SPL runs as a separate component of Splunk Cloud Platform (SCP) which is not metered like searches are against data indexed by Splunk.

For version 1.0.0 and higher the SPL generated by the assistant requires a separate step to Open in Search. Searches executed in the Search app work like any other Splunk search, and consume SVC resources accordingly.

Splunk AI Assistant for SPL runs on AI Service, a multi-tenant, cloud service, hosted in Splunk Cloud Platform. This AI Service makes GPUs available for generating responses to customer prompts. All the AI compute is offloaded to AI Service and no AI compute is running on the customer's search head.

---

I don't know whether Splunk plans to release a fully on-prem version. The Splunk company used to provide a preview version which was fully on-prem, but that program is no longer available. https://www.splunk.com/en_us/blog/platform/flatten-the-spl-learning-curve-introducing-splunk-ai-assi...