Splunk Enterprise

Splunk AI Assistant for SPL

uhrichspk
New Member

Can the Splunkbase app - "Splunk AI assistant for SPL", be installed on an on-prem deployment of Splunk enterprise, or is the app only for public cloud deployments of Splunk Enterprise.  If this is not for on-prem, are there plans to build and app for on-prem, and what are the current timelines.

Labels (1)
0 Karma

marnall
Motivator

The app itself seems to be downloadable and usable on on-prem Splunk Enterprise, but it sends data to an offsite service which does the AI processing work.

Src: https://docs.splunk.com/Documentation/AIAssistant/1.0.3/User/AboutAIAssistant

Where Splunk AI Assistant for SPL runs

Splunk AI Assistant for SPL runs as a separate component of Splunk Cloud Platform (SCP) which is not metered like searches are against data indexed by Splunk.

For version 1.0.0 and higher the SPL generated by the assistant requires a separate step to Open in Search. Searches executed in the Search app work like any other Splunk search, and consume SVC resources accordingly.

Splunk AI Assistant for SPL runs on AI Service, a multi-tenant, cloud service, hosted in Splunk Cloud Platform. This AI Service makes GPUs available for generating responses to customer prompts. All the AI compute is offloaded to AI Service and no AI compute is running on the customer's search head.


 

I don't know whether Splunk plans to release a fully on-prem version. The Splunk company used to provide a preview version which was fully on-prem, but that program is no longer available. https://www.splunk.com/en_us/blog/platform/flatten-the-spl-learning-curve-introducing-splunk-ai-assi...

0 Karma
Get Updates on the Splunk Community!

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud  In today’s fast-paced digital ...

Observability protocols to know about

Observability protocols define the specifications or formats for collecting, encoding, transporting, and ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...