RST Splunk AI Copilot

Most people who need an answer out of Splunk cannot write SPL, and the people who can spend their day writing it for everyone else.

RST Splunk AI Copilot sits beside Splunk rather than in front of it. It translates a question into SPL, explains a search someone else wrote, and previews the fields a query will return before it touches an index. Higher editions add a knowledge base of your own searches, saved conversations, and alert triage and investigation.

Licences are issued per Splunk instance and can be moved between hosts from the console. Nothing about your data leaves the instance unless you configure it to.