Cortana (discontinued) vs. Splunk AI Assistant for SPL

It's easy for anyone who is expecting some simple AI problems like fetching the keywords, understanding the intent, language translation, etc. to be solved from an existing database and all they need is to connect to their APIs via a subscription model. But for complex use cases, there is still room for improvement like customization of underlying AI models for a specific use case like identifying some unique identifiers with respect to industry.

Incentivized

Splunk AI Assistant for SPL is well suited for people wanting to code on splunk but have limited or few knowledge on SPL requests. It can be good for people learning and training but also for business applying their own business case thanks to the AI, good for simple case scenario. However, for more complex scenario, involving for example multiple dashboard linked with workflow (get/post) and treillis, leading to other dashboard etc.. AI can be limited to the memory it can hold in.

Incentivized

• Being hosted in Azure solves a massive hosting problem
• The language understanding system has the ability to revolutionize many vertical markets
• Integrating with Cortana Analytics was really simple due to easy to understand documentation

Incentivized

• Create complex requests
• Optimize SPL requests
• learning and training

Incentivized

• More partnerships with colleges and schools to increase the workforce with technical knowledge (increase local workforce)
• Have more online training and documentation in other languages
• Have affordable prices for students

Incentivized

• more data awareness of the issue
• explain more about best practice and performance issue in some query
• can't be used for complex panel, where it requires to check multiple panels, with multiple sources and sourcetype and complex dashboarding linked

Incentivized

Splunk AI Assistant for SPL is good tool, as I said, it is really useful for educational purpose, taking in its hands small and simple tasks (ex:small query dashboard,...), but it's not a ten because the contextual memory for complex issues/dashboarding/reports etc can be limited, and can sometime suggets none optimized query which are not always checked by teammates and can cause issue on the long term.

Incentivized

IBM Watson Assistant has been early into this market and has improved a lot over time compared to Azure AI Cortana. More documentation related to the services. But Ease of integration Azure AI ranks over IBM Watson Assistant. And again in terms of services offered under the ecosystem, Azure AI precedes IBM Watson Assitant.

Incentivized

CoPilot AI and ChatGPT I think lacks context so compared to Splunk AI Assistant for SPL they almost always answer something that do not work. Gemini is better than those two but Splunk AI Assistant for SPL still have the most knowledge for SPL and suggets SPL query that always works but performance can be limited on some of these.

Incentivized

• Difficult to ascertain the ROI as we are a software house who have developed a module in our application using Cortana. However for companies that use our software I would say the use of sentiment analysis in our application could free up at least 1 full time resource to be used elsewhere in their organisation.

Incentivized

• Quicker training (so people are delivering way sooner) --> 2 weeks of training, now only 1 necessary
• Small and reduntant tasks done by AI, taking way much time, sometimes dividing by 2 the time
• People check less their query, which can lead to multiple rechecks and lost time

Incentivized