The Splunk AI Toolkit is a free app on Splunkbase that brings LLM-powered commands directly into SPL — but installing it is one thing, and knowing what it can actually do for your searches is another. This session is a live walkthrough on a Splunk Enterprise instance, from install to working results. I'll cover setup and LLM connection, show how to summarize a noisy set of events in plain language right in the search pipeline, and demonstrate anomaly detection and the outlier assistant running against real data. We'll keep it practical enough that you can repeat every step on your own instance, followed by open Q&A.

You will come away knowing:

1. How to install and configure the AI Toolkit app on Splunk Enterprise and connect an LLM backend.

2. How to use GenAI commands in your searches to summarize logs and events in plain language, right in your search results.

3. How to run anomaly detection and the outlier assistant against your own data to surface issues standard searches miss.