AI Assistant & Status Reports
Context-aware AI that investigates entity health, provides operational guidance, generates intelligent status reports in alert emails — and is the conversational front door to the new AI Agents.
Key Capabilities
Entity Investigation
Analyses why entities are in alert state, examines lag metrics, event counts, and ML results to provide actionable SPL investigation searches and threshold adjustment suggestions.
Operational Guidance
Get help on any TrackMe feature, REST API reference, backup/restore guidance, maintenance mode instructions, and license management assistance.
AI Status Reports in Emails
Stateful alert emails include AI-generated summaries that are lifecycle-aware — explaining on incident open, analysing changes on update, and confirming recovery on close.
Provider Agnostic
Supports OpenAI, Azure OpenAI, Anthropic, Google Gemini, Mistral AI, Ollama, Splunk Hosted (SLIM API), and custom OpenAI-compatible endpoints.
Security & Privacy First
Fully opt-in, RBAC enforced, encrypted credentials, optional data anonymisation. Your data stays under your control at all times.
Streaming Architecture
Real-time token delivery with asynchronous architecture, concurrency control, and automatic cleanup. 120-second execution cap to avoid email delays.
Deep Dive
Explore the key aspects of AI Assistant in detail.
Related Features
AI Agents
A fleet of AI advisors that inspect your monitored estate, propose grounded conf...
Feeds Tracking
Monitor your Splunk data sources availability, quality, and latency. Detect anom...
Stateful Alerting
Intelligent incident lifecycle management with state-aware alerts, rich HTML ema...
Impact & ML
Flexible scoring system replacing hardcoded rules, combined with ML-driven anoma...
Ready to get started?
Request a free 90-day trial with all features enabled. No restrictions.