{"slug": "cisco-makes-splunk-ai-token-bean-counter-with-galileo-gains", "title": "Cisco makes Splunk AI token bean counter with Galileo gains", "summary": "Cisco expanded Splunk Agent Observability with tokenomics tracking across Splunk Observability Cloud and Cisco Cloud Control, letting enterprises monitor AI token usage, costs, and productivity by team or user, the company announced at Splunk Conf26. Splunk SVP and GM Kamal Hathi said the capability integrates token consumption management with active cost control and business-priority alignment, while the Cisco Deep Time Series Model (CDTSM) predicts final billing before a cycle ends. The move builds on Cisco's Galileo acquisition, with former Galileo CEO Vikram Chatterji, now senior director for agent resilience at Splunk, calling the third-party integration \"a very low-lift\" effort.", "body_md": "Cisco amped Splunk observability powers to provide enterprise AI usage visibility, as utilizing spoils from its recent Galileo acquisition.\n\nSplunk Agent Observability was expanded to provide tokenomics tracking within both Splunk Observability Cloud and Cisco Cloud Control. The capability provides visibility into AI coding tools like Claude Code and Codex, allowing users to track usage, costs, and productivity by team or user, and combine spend across different vendors in one view. The Cisco Deep Time Series Model (CDTSM) tool also predicts final billing before the cycle ends.\n\nKamal Hathi, SVP and GM for Splunk, explained in a preview on the news and tied to this week's Splunk Conf26 event that AI costs were becoming critical for customers.\n\n“So what we are doing now is we're delivering a solution to optimize your AI token spend, what you call tokenomics, and we are able to integrate tokenomics both in terms of managing the consumption of tokens, but also controlling actively controlling those costs, and we can align these token usage with business priorities, and we get full visibility attribution into token usage, and then prescriptive tools to optimize spend without sacrificing quality,\" Hathi said.\n\nSplunk is spearheading Cisco's push into the tokenomics space, [adding onto talk from Cisco Chief Product Officer Jeetu Patel](https://www.sdxcentral.com/news/cisco-touts-ai-tokenomics-but-admits-the-market-is-still-in-phase-one/) at June’s Live 2026 event. While Patel noted the market then was still in early phases, he saw Cisco as pinning its flag to the agentic mast with [its Galileo acquisition](https://www.sdxcentral.com/news/cisco-to-grab-galileo-for-ai-observability-supercharge/) to help analyze agents down to the behavioral level. Splunk layers model and graphic processing unit (GPU) to assess performance and gauge the exact token count for AI actions.\n\nHathi claimed all his conversations with clients raised the AI token “tax,” implying some market movement since the summer.\n\n## Galileo meets Splunk\n\nThe token aspect comes as a by-product of the agentic pane of glass offered in Splunk, with Agent Observability generally evaluating agent behavior and performance across a firm’s entire AI stack, while guardrailing agents in real-time to prevent harmful actions and outputs.\n\nVikram Chatterji, senior director for agent resilience at Splunk and former Galileo CEO, touted a deft integration of these various metrics, commenting: \"The way we've thought through this is it should be the least amount of intrusion for our customers ... it's a very low-lift integration with each of these different third-party systems that we've heard from our customers take up most of the tokens.”\n\n[As noted by this title at the time](https://www.sdxcentral.com/news/cisco-to-grab-galileo-for-ai-observability-supercharge/), Hathi framed the Galileo deal as safeguarding AI agents to help ensure “a foundation of transparency and accuracy.”\n\nThis extends to the growing notion of sovereign AI, which [was talked up by Cisco in tandem with tokens](https://www.sdxcentral.com/news/cisco-cpo-predicts-telcos-to-become-inference-providers-by-mwc-2027/) at this year’s Mobile World Congress (MWC) event in Barcelona, Spain.\n\nHathi argued sovereignty was a “very important piece” that would now be better tracked through Splunk observability.\n\n“To make sure that you know these kinds of sovereign solutions have the same insights and ability, and they can compare costs between what is running ... I would say on local infrastructure versus cloud infrastructure and frontier models,” Hathi said.\n\n## Elsewhere at Splunk Conf26\n\nSplunk also introduced an Observability Studio for shift-left app development, ensuring each new application is measurable and operationally ready from launch via OpenTelemetry-compliant instrumentation.\n\nNetwork Intelligence App, meanwhile, brings Cisco network topology, device health, and events into the Splunk suite, which Hathi said would help network teams \"unlock the insights of the data and work on the problems that are described.\"\n\nSplunk Observability Cloud also now comes with a free tier providing full-stack observability for small environments, while a Simplified Editions version focuses on core observability use cases designed for teams getting started as opposed to the Premier edition, which is designed for teams already building AI agents at scale and need more capabilities. Both editions include Splunk Agent Observability, APM, Infrastructure Monitoring, and Observability Logs.", "url": "https://wpnews.pro/news/cisco-makes-splunk-ai-token-bean-counter-with-galileo-gains", "canonical_source": "https://www.sdxcentral.com/news/cisco-makes-splunk-ai-token-bean-counter-with-galileo-gains/", "published_at": "2026-09-15 14:30:34+00:00", "updated_at": "2026-09-15 14:52:24.012749+00:00", "lang": "en", "topics": ["ai-products", "ai-tools", "ai-agents", "ai-infrastructure"], "entities": ["Cisco", "Splunk", "Splunk Agent Observability", "Splunk Observability Cloud", "Cisco Cloud Control", "Kamal Hathi", "Vikram Chatterji", "Galileo"], "alternates": {"html": "https://wpnews.pro/news/cisco-makes-splunk-ai-token-bean-counter-with-galileo-gains", "markdown": "https://wpnews.pro/news/cisco-makes-splunk-ai-token-bean-counter-with-galileo-gains.md", "text": "https://wpnews.pro/news/cisco-makes-splunk-ai-token-bean-counter-with-galileo-gains.txt", "jsonld": "https://wpnews.pro/news/cisco-makes-splunk-ai-token-bean-counter-with-galileo-gains.jsonld"}}