As autonomous agents and multi-cloud architectures reshape modern IT, data platforms have to do far more than just store telemetry, they must empower you to turn machine data into agentic action. At .conf26, our platform breakout sessions are engineered around clear, practical outcomes: eliminating costly data silos with federated queries, establishing strict context windows and governance for enterprise AI, and scaling detection pipelines at machine speed. Whether you are building low-code agents from scratch, safeguarding sensitive data with dynamic field filters, or unifying your telemetry across cloud lakehouses, these curated sessions across Novice, Intermediate, and Advanced levels provide the architectural blueprints you need to build your data foundation at .conf26 in Denver.  Novice  [PLA1423] Innovating at Speed with AI Canvas  When: Monday, September 14 | 1:30 PM – 1:50 PM MDT  Format: Theater Session (Not recorded)  Overview: AI Canvas is a collaborative, AI-native workspace that helps teams investigate faster. Use natural language to generate and refine searches, visualize data, uncover insights, and organize evidence on a shared, persistent canvas. See how AI Canvas brings people, data, and AI together to move from question to action.  [PLA1562] Unlocking Scale: Introducing the Splunk Machine Data Lake  When: Tuesday, September 15 | 2:30 PM – 2:50 PM MDT  Format: Theater Session (Not recorded)  Overview: Join us to unveil the Splunk Machine Data Lake, a core pillar of the Cisco Data Fabric. Learn how to build an AI-ready foundation for the AgenticOps era. We’ll showcase how AI-powered Data Management, Federated Search, AI Canvas, and the Machine Data Lake integrate to unify your telemetry. See a live end-to-end use case demonstrating how to automate remediation across complex environments. Discover our latest announcements and learn to turn massive data into your most powerful operational asset.  [PLA1912] Build and Deploy Low-Code AI Agents in Minutes with the New AITK Agent Launchpad  When: Tuesday, September 15 | 3:00 PM – 5:00 PM MDT  Format: Interactive Workshop (Not recorded; bring your laptop for hands-on labs)  Overview: AI agents are enabling SOC, NOC, and SRE teams to proactively detect, investigate, and respond to incidents. Participants will build and test an AI agent against realistic customer-driven scenarios using the new AITK Agent Launchpad, Cisco Foundation Models, and Splunk MCP Server. This session showcases the newly released Agent Launchpad feature, introducing customer scenario-driven templates engineered for rapid deployment. Attendees can leverage these templates or build their own from scratch.  [PLA1972] Agents Are Easy. Trust Is Hard.  When: Tuesday, September 15 | 3:00 PM – 5:00 PM MDT  Format: Theater Session (Not recorded)  Overview: You've been hearing about agents for a while, but implementing them in a way that scales for the enterprise has been hard. Come see how Cisco Data Fabric now introduces layers for cohesive agentic operations with governance and trust patterns built in so that you can finally step into this new era in confidence!  [PLA1332] What’s New in Dashboard Studio: Build High Impact Dashboards with Custom Visualizations and Rich Interactions  When: Wednesday, September 16 | 4:15 PM – 5:00 PM MDT  Format: Technical Session (Recorded; published to .conf Online post-event)  Overview: Great dashboards accelerate action. This technical session will cover how Dashboard Studio enables you to create clear and dynamic dashboards using new capabilities like the Token Manager for smarter interactions and Custom visualizations for tailored visuals—so stakeholders can move from data to decisions without delay.  Intermediate  [PLA2142] Become a Frontier Firm: AI, Digital Resilience, and Splunk on Microsoft Azure  When: Tuesday, September 15 | 1:30 PM – 2:15 PM MDT  Format: Technical Session (Recorded; published to .conf Online post-event)  Overview: Discover how Splunk and Microsoft help organizations become Frontier Firms by combining Splunk's AI-powered data platform with Microsoft Azure. Learn how to build a trusted data foundation, strengthen security and observability, improve digital resilience, and accelerate AI transformation. Through real-world examples, explore how enterprises are modernizing SecOps, operationalizing AI and agentic workflows, and maximizing the value of their Azure investments.  [PLA1212] From Questions to Answers: Using Generative AI to Unlock Splunk Data  When: Tuesday, September 15 | 3:30 PM – 4:15 PM MDT  Format: Technical Session (Recorded; published to .conf Online post-event)  Overview: Business leaders and IT teams ask critical questions every day—but answers often require Splunk experts to translate intent into complex searches. This session explores how generative AI, a business knowledge store, and Splunk’s MCP server can enable natural language queries over Splunk data. Participants will learn an architectural approach to reducing analysis time, improving self‑service access, and unlocking faster business insights from existing observability data.  [PLA1454] Agentic SOC in the Post Mythos Era - Perspectives from Nvidia, AWS, Splunk  When: Wednesday, September 16 | 10:30 AM – 11:30 AM MDT  Format: Panel Discussion (Recorded on-site and published to .conf Online post-event)  Overview: As security operations enter the post-Mythos era, SOCs must move from human-speed workflows to machine-speed response. In this panel, Splunk, NVIDIA, and AWS discuss the foundations for agentic SOCs: trusted data, governed telemetry, model choice, tokenomics, and architectures spanning cloud, on-prem, sovereign, and air-gapped environments. Hear how frontier models, purpose-built SLMs, and accelerated AI infrastructure can help teams build transparent, efficient, resilient security operations.  [PLA1891] Powering Agents with Machine Data Lake: Building the Right Data Context Window for Your AI Agents  When: Wednesday, September 16 | 10:45 AM – 11:30 AM MDT  Format: Technical Session (Recorded; published to .conf Online post-event)  Overview: Agentic AI workflows depend on agents being able to find, query, and trust the data they act on — without operating over your entire dataset. This session walks through how the Splunk MCP server queries promoted MDL datasets, and how Splunk's scoped RBAC model creates a precise context window for each agent. Participants will see how to create an agent user, scope it to specific indexes or promoted Lakehouse tables, and use that boundary to control exactly what data an agent can reason over.  [PLA1279] From Silos to Insights: Federated Search Across Splunk and Snowflake in Action  When: Wednesday, September 16 | 1:45 PM – 2:30 PM MDT  Format: Technical Session (Recorded; published to .conf Online post-event)  Overview: Splunk and Snowflake often leave operational and business data in silos that slow investigations, analytics, and compliance. Federated search trims re-ingestion, preserves warehouse ownership, and unifies correlation with Splunk-indexed events in one view, improving ROI. This session covers Splunk Federated Search for Snowflake: SPL2, remote filters, and cross-source joins. Participants will learn connection setup, dataset registration, pushdown execution, and governance through a live demo.  Advanced  [PLA1931] From Raw Data to Deployed Detections in 20 Minutes: Three Architecture Patterns for the Agentic SOC  When: Tuesday, September 15 | 11:15 AM – 12:00 PM MDT  Format: Technical Session (Recorded; published to .conf Online post-event)  Overview: A live demo takes raw data to deployed detections in 20 minutes. Then we unpack the three architecture patterns that made it possible. Human gates at deployment boundaries keep AI fast without losing control. Deterministic processing handles the predictable 90% while bounded AI tackles the ambiguous 10% at a fraction of the cost. Composable tools connected through MCP let agents emerge from production needs instead of grand design. Walk away with patterns to build your own agentic SOC workflows.  [PLA1227] Supercharge SecOps Investigations with the Splunk MCP Server  When: Wednesday, September 16 | 9:00 AM – 9:45 AM MDT  Format: Technical Session (Recorded; published to .conf Online post-event)  Overview: This session provides a practical blueprint for deploying Splunk’s Model Context Protocol (MCP) server to accelerate security operations workflows. Whether you're looking to deploy automated processes across a department or interact one-on-one with an agent, Splunk's MCP server can be integrated with your existing tools for seamless user experiences across your environment. Learn the configuration basics, governance strategies, querying tips, and how to take your vision from pilot to production.  [PLA1863] Mission Obfuscate! Protecting Data At Scale With Field Filters  When: Wednesday, September 16 | 9:30 AM – 10:15 AM MDT  Format: Technical Session (Recorded; published to .conf Online post-event)  Overview: In the world of financial services, ingesting "data from everywhere" is only half the battle. The challenge is securing data at scale! Join Vancity and Splunk to learn best-practices for setting up Field Filters for roles in a uniquely dynamic use case, ensuring data is protected at scale without the overhead of having to create and manage a plethora of different groups. See how Vancity leverages this to obfuscate PII/PCI, ensuring compliance without hindering security insights.  [PLA1381] Wiring Up Splunk AI: Build Custom Agentic Solutions at Warp Speed  When: Tuesday, September 15 | 10:30 AM – 12:00 PM MDT  Format: Interactive Workshop (Not recorded; bring your laptop for hands-on labs)  Overview: Agentic AI is reshaping how teams interact with Splunk — but building great agents requires more than just connecting a model. This hands-on lab provides a pre-configured cloud sandbox with Splunk's Model Context Protocol (MCP) server, custom skills, and subagents ready to go. Participants will build custom skills for their workflows, then assemble a complete agentic app. Attendees leave knowing how to replicate the environment and build production-ready Splunk AI tools.    Ready to turn machine data into agentic action and break down enterprise silos? Bring your toughest data and architecture questions to Denver. Secure your pass today, explore the catalog, and add these must-attend platform sessions to your official .conf26 agenda.  🌐 Lock in your pass for Splunk .conf26 and build your schedule!  ... View more

The agentic AI era is no longer a distant goal—it is the new standard for the modern enterprise. If you missed our premier three-day event, "Turning Data Chaos into AI Clarity", you can now access the series on-demand. Whether you are a business leader defining your strategy or a developer building the next generation of autonomous systems, these sessions provide the roadmap you need to succeed.  Here is why you should watch:  1. Master the Strategy   Move beyond reactive insights. Learn how to treat your data as a "force multiplier" for autonomous operations.  The Vision: Understand the leadership shift required to thrive in the AI era.  Real-World Proof: Hear how industry leaders like Autodesk leverage Cisco Data Fabric to solve complex data challenges.  Expert Insight: Gain perspective from S&P Global 451 Research on the trends separating AI leaders from laggards.  2. Build the Architecture   Vision requires a foundation that can scale. Discover how the Cisco Data Fabric, powered by the Splunk platform, operationalizes AI at scale.  Unified Intelligence: Learn to unify data across every domain without increasing complexity.  AI-Ready Foundations: Explore the Machine Data Lake approach to keeping data accessible and actionable.  Predictive Operations: See how tools like AI Canvas, Splunk AI Assistants, and the Time Series Foundation Module evolve your operations from fixing problems to prevent them.  3. Start Building Today   Stop theorizing and start innovating. Activate with AI: Guided Walkthroughs that are designed to bridge the gap between theory and deployment.  Practical Skills: Get exclusive access to demonstrations of the Splunk AI Toolkit (AITK), Data Science Development Language (DSDL), and the Model Context Protocol (MCP).  Build Your Own Workflows: Follow guided labs to construct AI-driven workflows and agentic systems that you can immediately apply in your environment.  End-to-End Enablement: See how these tools accelerate outcomes across both observability and security.  Ready to activate your AI journey? Don't wait for the next event to start building. Gain the knowledge, strategies, and hands-on skills needed to lead in the age of agentic AI.         Click here to watch the full "Turn Data Chaos into AI Clarity" series on-demand.  ... View more

Bridging Strategy and Architecture: Navigating the Agentic AI Era with Cisco and Splunk   Organizations today are struggling to bridge the gap between high-level AI ambition and the fragmented technical architecture required to execute it. To help practitioners navigate this shift, Cisco and Splunk are hosting a premier event: Data Transformed, AI Elevated.  Key Takeaway Strategic Vision: Learn how a unified data strategy acts as a force multiplier for autonomous AI "agency." Scalable Architecture: Explore the Cisco Data Fabric and Machine Data Lakes powered by Splunk. Predictive Execution: See how AI Canvas and MCP Server move operations from reactive to predictive.   Day 1: Strategy – Making Data a Force Multiplier The first day of the forum focuses on leadership and vision. To move beyond reactive insights, organizations must adopt a unified data strategy that powers predictive, AI-driven operations. Keynote: The Power of Strategy The opening keynote explores how a robust data strategy acts as a "force multiplier." In an era where AI systems are becoming increasingly autonomous, your data architecture determines the speed and accuracy of your AI’s "agency." Real-World Success: The Autodesk Perspective Theory meets practice as leadership from Autodesk shares their journey. Attendees will hear firsthand how the Cisco Data Fabric has enabled them to solve immense data complexity and drive breakthrough outcomes, proving that a unified foundation is the key to unlocking AI’s true potential. The Analyst View To round out the strategic discussion, industry experts from S&P Global 451 Research join Cisco for a fireside chat. They will dive into emerging trends, the challenges of scaling agentic AI, and the winning strategies that separate leaders from laggards. Day 2: Architecture – Unveiling the Cisco Data Fabric Turning AI ambition into real-world impact requires more than vision—it demands an architecture that can scale and adapt. Day 2 moves from strategy to execution, unpacking how the Cisco Data Fabric, powered by the Splunk platform, delivers the foundation needed to operationalize AI at scale. Unified Intelligence at "Ludicrous Scale" One of the biggest hurdles in AI is data fragmentation. Through Data Management and Federation, Cisco enables enterprises to unify intelligence across every domain without increasing cost or complexity. This allows you to bring analytics to where the data lives, rather than moving massive datasets. Building an AI-Ready Foundation A cost-effective data foundation is critical for long-term success. The sessions will explore the Machine Data Lake, a modern approach to storing and processing vast amounts of information while ensuring it remains accessible and "AI-ready" for governance and human oversight. From Reactive to Predictive Operations The ultimate goal of the Cisco Data Fabric is to evolve operations. By leveraging a suite of advanced tools, organizations can move from fixing problems to preventing them: AI Canvas & Splunk AI Assistants: Empowering users to interact with data through intuitive, natural language interfaces. Time Series Foundation Module & AITK: Providing the mathematical and machine learning backbone for deep analysis. Splunk MCP Server: Streamlining management and control across the entire ecosystem. Join the Evolution The agentic AI era is here, and the organizations that succeed will be those that treat their data as a strategic asset. Whether you are a business leader looking for a competitive edge or a technology professional building the next generation of infrastructure, this event provides the roadmap to move from strategy to execution. Event Dates: March 3 – March4, 2026 Are you ready to elevate your AI? Register today to secure your spot in the leadership forum and technical deep dives. ... View more

Building the Foundation for Scalable Intelligence: Join the 2026 AI Virtual Summit While AI adoption is accelerating, many organizations are finding that exploding data volumes create more noise than insight. The 2026 AI Virtual Summit is designed to help practitioners bridge the gap between "data chaos" and "AI clarity" through modernized architecture and governed data strategies. TL;DR / Key Takeaway Box Strategic Governance: Align your data foundations with AI innovation to ensure measurable mission impact. Unified Architecture: Deep dive into Cisco Data Fabric and Splunk to scale intelligence securely. Operational AI: Transition from theory to execution with hands-on workshops on AI Canvas and automated workflows. Logistics & High-Level Overview This 3-day virtual event is structured to help you modernize your data strategy and activate AI with confidence. Dates: March 3–5, 2026 Time: 11:00 AM – 12:30 PM PT (Daily) What You’ll Experience Over three focused sessions, you’ll move from strategy to architecture to hands-on activation. Day 1: Unlock Your Data Strategy Explore how AI-driven organizations are aligning governance, data, and innovation to create measurable impact. We will discuss the prerequisites for turning raw machine data into high-fidelity AI inputs. Day 2: Explore the Modern Data Fabric Dive into unified intelligence and secure data management. This session covers: Scalable Architectures: Leveraging Cisco Data Fabric and the Splunk platform. Unified Intelligence: Creating a single source of truth across distributed environments. Security: Maintaining data integrity while scaling AI initiatives. Day 3: Activate with AI Participate in hands-on workshops focused on: Real-world AI workflows and automation. Implementation strategies using AI Canvas. Machine Data Lakes: Optimizing storage and retrieval for AI-driven insights. Why Join the Summit? You’ll hear from industry leaders across Cisco and Splunk, gain practical guidance for building resilient, AI-ready systems, and explore emerging innovations that solve the problem of siloed data. Whether you’re shaping AI strategy, modernizing data infrastructure, or operationalizing machine data at scale — this summit is built for you. 👉 Register now and reserve your spot Keep the good stuff coming. Here’s how to subscribe to this blog — and stay in the loop on the topics that matter to you. ... View more

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive impact it has on their organizations, teams, and customers. At .conf25, we captured that magic on camera—recording real Splunk users as they shared why they love Splunk and how they’re using it to drive better outcomes.   🎥 Watch the New Splunk Love Videos Head over to the Splunk Love Community page to see the new videos featuring some of our amazing Community members sharing: 💬 “Describe Splunk in one word—what comes to mind, and why?” 🛠 “How are you using Splunk?” 🌍 “How are you improving your customers’ experiences with Splunk?” 📈 “What benefits or business outcomes has Splunk helped you unlock?” These stories span platform, security, and observability use cases—but they all share one thing: a lot of Splunk Love. ❤️   📣 Share Your Voice with Splunk Want to give feedback or suggest improvements? We’re listening. 🗣️ Voice of the Customer – Tell us how we’re doing via surveys and feedback programs. 💡 Splunk Ideas – Submit, vote on, and discuss product enhancements with the Community and Splunk teams. 🔄 Get More Involved There are tons of ways to connect with other customers and help shape the future of Splunk: 🧪 Join advisory programs or test early-stage features Participate in alpha/beta testing and help refine new technologies with our Product and Engineering teams. 💬 Join our Splunk Community Slack Chat with fellow practitioners, ask questions, and be part of real-time conversations. 👥 Find a User Group near you Connect with local Splunk users to swap stories, solve problems, and build skills together. Check out the Splunk Love Community page to see the videos and maybe even spot a familiar face or two. We’re proud to share these stories—and even prouder to be part of the community behind them. ... View more

Hi Splunkers, If you are not able to be at .conf25 in person, you can still learn about all the latest news and innovations going through the Global Broadcast program.  On September 9th, day 2 of the Global Broadcast, there will be an engaging virtual discussion on “Boosting Digital Resilience Through Splunk’s Customer Success Offerings”.  During this discussion  two of Splunk’s customer success leaders will highlight key offerings that support our customers digital transformation initiatives, enhance platform, security, and observability environments, and enable our customers to deliver better business outcomes and improved experiences across their environments. Joining in this discussion from a customer perspective is Ed Hubbard from Travelport. Travelport provides distribution, technology, and payment solutions for the travel and tourism industry. They have been using Splunk Observability and ITSI solutions to support their IT infrastructure. Like many organizations they were suffering from alert fatigue with fragmented monitoring tools, overwhelming alert volumes (up to 20,000/day), and difficulty identifying root causes, leading to longer mean time to detect (MTTD) and impacting service quality for its worldwide customers. By engaging with Splunk experts from our Professional Services team they were able to improve efficiency across their stack for better searches and dashboards. Their Splunk expert helped to build a roadmap for their team to use to continue to improve their responsiveness to their customers through their Observability applications.  Tune into this session to hear for yourself how Splunk Customer Success offerings and services can help your team achieve the same results for your organization. ... View more

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can still lean into the opening and product keynotes, as well as select sessions created for virtual viewers with the Global Broadcast program. Get a taste of the in-person experience and stay up to date on all things Splunk. On September 8th, Day 1 will start with the opening keynote session with Kamal Hathi, SVP and GM, Splunk Jeetu Patel, President and Chief Product Officer, Cisco. Join this session to be the first to hear exciting announcements and the latest Splunk news. On September 9th, Day 2 there is a full day of sessions ranging from the newest updates that will be announced in the product keynote as well as around all things Splunk for Security, Observability, Cloud, Platform and AI. Plus the power of the SOC, a Community recap, and an interactive discussion around how our customer success resources and offerings can help deliver improved outcomes for Splunk applications. To end the day, Cyber Games, where two teams of Splunk customers compete against each other in cybersecurity challenges throughout Boston — where there will only be one winner. Don’t miss these valuable sessions that bring the .conf experience right to you. Get your Splunk gear on and tune in. ... View more

For Splunk, Customer Experience (CX) is a company-wide mission - not just a customer success function. CX leads us to support your journey in driving better business outcomes across your organization. Understanding how all departments can contribute to delivering the best possible customer experiences is becoming something business leaders are looking to engage around and inspire their organizations to take a customer-first approach. On Wednesday, November 9th at 10 am PST, Splunk’s Chief Customer Officer, Katie Bianchi along with two renowned leaders in customer experience, Nick Mehta of Gainsight and Ellie Wu of Insight Partners, took part in a lively conversation on why and how CX is increasingly being viewed as a holistic business outcome.  In case you missed the LinkedIn Live Session, "How Going all-in on Customer Experience (CX) Drives Better Business Outcomes", you can watch the replay of this highly interactive discussion. They discussed their perspectives on how CX is evolving in today’s marketplace. Some awesome insights were shared during this session – don’t miss this opportunity to view this session to learn more. — Beverly Smart, Sr. Manager, Customer Success Marketing, Splunk       ... View more