{"slug": "splunk-moves-to-reduce-it-costs-in-the-agentic-ai-era", "title": "Splunk Moves to Reduce IT Costs in the Agentic AI Era", "summary": "Splunk, the Cisco business unit, announced at its .conf26 event that Splunk AI Assistant is now generally available, translating natural language into Search Processing Language (SPL) queries, alongside an Agent Launchpad framework that builds AI agents in four clicks and a new Activity-Based Pricing option that weights search and ingest equally. Splunk also launched a Splunk Agent Observability tool with runtime guardrails for the SRE AI platform, an AI-Powered Data Management tool now generally available, and Essentials, Premier and Free editions of its observability platform. Kamal Hathi, senior vice president and general manager for the Splunk business unit, told attendees the platform is being reimagined as a system of record for AI to let IT operations teams analyze more data without increasing costs.", "body_md": "TL;DR — Key Takeaways\n\n– Splunk is expanding its AI capabilities across observability, security and data management while introducing pricing options designed to better align costs with actual search and ingest activity.\n\n– New capabilities include Splunk AI Assistant, Agent Launchpad, AI-powered data management and expanded observability for monitoring AI agents, token consumption and runtime behavior.\n\n– Splunk is deepening its integration with Cisco infrastructure and management platforms, including Cisco Cloud Control, Cisco networking products and Cisco Secure AI Factory with NVIDIA.\n\nThe Splunk arm of Cisco today moved to reduce the total cost of applying analytics to IT operations while at the same time adding additional artificial intelligence (AI) capabilities to manage and analyze telemetry data at scale.\n\nAnnounced at the [.conf26](https://conf.splunk.com/) event, Splunk AI Assistant, now generally available, translates natural language queries into Search Processing Language (SPL) queries and an Agent Launchpad framework that makes it possible to create AI agents with four clicks. Splunk is also working on agent lifecycle management following its acquisition of Galileo earlier this year.\n\nAt the same time, Splunk is making available an Activity-Based Pricing option to enable IT teams to align cost to actual activity by weighting search and ingest equally. Splunk is also extending the federated search capability it provides to the AWS CloudWatch Lake service and later this year the data management platform provided by Databricks.\n\nThere are also now multiple editions of the observability platform, including Essentials, Premier and Free editions. The latter enables IT teams to get started without upfront cost or procurement barriers or time-bound trials.\n\nKamal Hathi, senior vice president and general manager for the Splunk business unit, told conference attendees that the Splunk platform is being reimagined to function as a system of record for AI. The goal is to increase the amount of data that IT operations teams can analyze without increasing costs, he added. For example, an AI-Powered Data Management tool, now generally available, optimizes the management of data pipelines to reduce costs.\n\nThere is also now a Splunk Agent Observability tool that will be added to the Splunk Site Reliability Engineer (SRE) AI platform that evaluates agent behavior, observes performance across the entire AI stack, enables token usage and cost optimization, and controls agents in real time via runtime guardrails that block harmful actions and outputs for every response.\n\nSplunk also extended its observability capabilities to provide deeper insights into the behavior of AI agents and how AI tokens are being consumed. Additionally, Splunk is tightening integration between its observability portfolio and Cisco Cloud Control, the framework that Cisco makes available to centralize the management of IT operations. There is also now a Network Intelligence App for Splunk that brings Cisco network topology, device health, and events into the Splunk IT analytics platform.\n\nThere is also an Observability Studio tool that makes it simpler to instrument applications using the Claude AI tools provided by Anthropic. Splunk is also now making it possible for IT teams to self-host both open and proprietary generative AI models on the Splunk Enterprise platform, including the Cisco Deep Time Series Model, Google Gemma 4, OpenAI GPT-OSS 20B and NVIDIA Nemotron that will be added in the months ahead.\n\nA Universal Collector, expected to be available in beta in 2027, also promises to streamline collection of all types of data using an instance of OpenTelemetry, while an Ingest Processor for streaming detections also due out next year streamlines investigations.\n\nAt the same time, Splunk is expanding its agentic security operations center (SOC) offering by adding specialized AI agents that have been trained to analyze telemetry data. There are also now additional AI agents for handling detection, threat hunting, autonomous investigation, coordinated response, and policy governance with others, including a knowledge graph, to follow in 2027.\n\nSplunk is also extending its Exposure Analytics offering to provide deeper visibility into additional assets, historical change tracking, and business-specific risk insights. Extensions to Splunk Enterprise Security Essentials, meanwhile, enable deeper agentic AI autonomy.\n\nFinally, Cisco unveiled [Cisco AI POD for Splunk](https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2026/m09/cisco-delivers-trusted-ai-at-scale-through-new-splunk-advancements.html), a configuration in Cisco Secure AI Factory with NVIDIA for running AI workloads in self-hosted IT environments.\n\nIt’s not clear to what degree IT teams are adopting the combined Splunk and Cisco portfolio, but as it continues, the roles and responsibilities of IT teams will evolve as various silos start to finally share access to a common data fabric. The challenge now is streamlining the portfolio of offerings that IT, DevOps and security teams need to navigate as the management of IT becomes more unified.", "url": "https://wpnews.pro/news/splunk-moves-to-reduce-it-costs-in-the-agentic-ai-era", "canonical_source": "https://techstrong.it/featured/splunk-moves-to-reduce-it-cost-in-the-agentic-ai-era/", "published_at": "2026-09-15 17:25:38+00:00", "updated_at": "2026-09-15 17:47:29.359473+00:00", "lang": "en", "topics": ["ai-agents", "ai-products", "ai-tools", "ai-infrastructure", "ai-policy"], "entities": ["Splunk", "Cisco", "Kamal Hathi", "Splunk AI Assistant", "Agent Launchpad", "Galileo", "NVIDIA", "Anthropic"], "alternates": {"html": "https://wpnews.pro/news/splunk-moves-to-reduce-it-costs-in-the-agentic-ai-era", "markdown": "https://wpnews.pro/news/splunk-moves-to-reduce-it-costs-in-the-agentic-ai-era.md", "text": "https://wpnews.pro/news/splunk-moves-to-reduce-it-costs-in-the-agentic-ai-era.txt", "jsonld": "https://wpnews.pro/news/splunk-moves-to-reduce-it-costs-in-the-agentic-ai-era.jsonld"}}