Splunk advancements help deliver trusted AI on premises

Splunk AI features are now available on-premises with the release of Cisco AI POD for Splunk, the newest addition to Cisco Secure AI Factory with NVIDIA.

As AI agents take on more of the work inside the enterprise, the biggest barrier to adoption isn’t capability — it’s confidence. Customers need to trust that AI is secure, governed and worth the cost before they let it run at scale. Cisco says it is closing that gap through new Splunk innovations, giving customers the ability to safely and cost-efficiently scale AI wherever their data already lives. This includes an expanded partnership with NVIDIA to bring Splunk AI to on-premises customers.

“One of the biggest roadblocks to enterprise AI today is that it’s too hard to deploy,” said Jeetu Patel, President and Chief Product Officer, Cisco. “Customers want to know: Can I trust it to do the job? Can I afford it? And, most importantly, can I secure it? By running Splunk AI on the infrastructure customers already trust, they can move faster to put AI to work in their business with confidence and control.”

For those who can’t move sensitive data to the cloud, Splunk AI has not been usable, so Cisco and NVIDIA are expanding their partnership to bring self-managed AI directly to Splunk Enterprise customers, across their own on-premises, private cloud and air-gapped environments.

Cisco Secure AI Factory with NVIDIA is the reference architecture that brings the full AI stack together, built from Cisco AI PODs. The newest of these configurations, Cisco AI POD for Splunk, brings Splunk AI to on-premises users with new AI runtime software, Cisco infrastructure, NVIDIA accelerated computing and Kubernetes-based architecture — pre-validated and optimised for Splunk AI workloads.

New observability innovations give Cisco customers one full-stack view into how their AI agents are actually performing.

The AI threat landscape and the SOC

The AI threat landscape is on track to outpace the human-led defence model. Never has it been more critical for organisations to be able to understand and address potential exposure and vulnerabilities across their entire IT landscape — from the infrastructure to the applications. Stopping these AI-era threats requires an agentic SOC capable of reasoning and defending at machine speed, without compromising the data sovereignty and human governance enterprise leaders demand.

Cisco says that Splunk is advancing the agentic SOC with new purpose-built agent capabilities that expand the Splunk Agentic SOC Workforce and mirror how elite security operations teams work across detection engineering, proactive threat hunting, autonomous investigation, coordinated response and policy governance. By correlating rich, full-stack machine data across network, cloud, application and identity environments, these agents are designed to offer deep reasoning and transparent, explainable verdicts that cut alert noise and accelerate mean time to remediate.

New capabilities in Splunk Enterprise Security Essentials also bring agentic security operations and greater autonomy to far more security teams. Splunk Enterprise Security Premier adds deeper agentic autonomy and the full power of Splunk Enterprise Security.

Image credit: iStock.com/luchezar

Originally published here.