Splunk AI

What is Splunk AI?

Splunk AI is the set of AI assistants and machine learning features across Splunk's security and observability products, now part of Cisco. It supports threat detection, incident response and predictive operations for security and IT teams.

Key capabilities of Splunk AI

• SIEM threat detection: AI features in Enterprise Security.
• SOAR automation: Automate security response.
• UEBA behavior analytics: Detect anomalous behavior.
• Application Performance Monitoring: Trace and monitor applications.
• Infrastructure Monitoring: Monitor hosts and cloud.

How Splunk AI works

Splunk ingests logs, metrics and traces, then applies AI and machine learning inside its security and observability products to detect threats, predict incidents and optimize costs. Analysts work in Splunk Cloud Platform, Enterprise Security or Observability Cloud, with apps from Splunkbase extending coverage.

Who uses Splunk AI?

Security operations centers, SRE and IT operations teams, and large enterprises that run Splunk for security and observability use Splunk AI.

Splunk AI pricing

Splunk prices by activity, ingest, workload or entity depending on the product. The vendor lists samples such as Observability Cloud Infrastructure from $15 per host per month and AppDynamics Infrastructure at $6 per vCPU per month, both billed annually. Free trials exist for several products.

Splunk AI alternatives

Serval and Cleric apply AI agents to IT and incident work, and New Relic AI adds AI to observability. Splunk AI is distinguished by combining SIEM, SOAR and observability under one vendor with a large app marketplace.