Cisco Launches Splunk Advancements to Deliver Trusted AI at Scale

Cisco is launching new Splunk innovations that give customers the ability to safely and cost-efficiently scale AI wherever their data already lives, along with expanding its partnership with NVIDIA to bring Splunk AI to on-premises customers.

“One of the biggest roadblocks to enterprise AI today is that it’s too hard to deploy,” said Jeetu Patel, president and chief product officer, Cisco. “Customers want to know: Can I trust it to do the job? Can I afford it? And, most importantly, can I secure it? By running Splunk AI on the infrastructure customers already trust, they can move faster to put AI to work in their business with confidence and control.”

According to the companies, Cisco and NVIDIA are expanding their partnership to bring self-managed AI directly to Splunk Enterprise customers, across their own on-premises, private cloud, and air-gapped environments.

Cisco Secure AI Factory with NVIDIA is the reference architecture that brings the full AI stack together, built from Cisco AI PODs. The newest of these configurations, Cisco AI POD for Splunk, brings Splunk AI to on-premises customers with new AI runtime software, Cisco infrastructure, NVIDIA accelerated computing, and Kubernetes-based architecture that is pre-validated and optimized for Splunk AI workloads. Cisco AI POD for Splunk is available now. Splunk AI Assistant (available now) and Agent Launchpad (coming later this year) also run on this layer. Together, they bring ad-hoc agentic investigations and custom agent building for a broad variety of use cases including the agentic SOC to teams that run Splunk in their own data centers, Cisco said.

Customers can also self-host a selection of open and proprietary generative AI models for their Splunk Enterprise workloads, including the Cisco Deep Time Series Model, Google Gemma 4, and OpenAI GPT-OSS 20B, with the NVIDIA Nemotron open models in the coming months. Teams can use the model best suited for the job without sending data outside their environment.

“Enterprises need to bring AI where their data lives, especially when security and sovereignty requirements require critical workloads to stay on-premises,” said Justin Boitano, vice president of enterprise AI at NVIDIA. “By enabling Splunk AI workloads to run with NVIDIA Nemotron open models on NVIDIA accelerated computing, Cisco and NVIDIA are working together to bring AI agents directly to Splunk and giving organizations a high-performance, full-stack foundation for agentic security operations wherever they run their infrastructure.”

New observability innovations give Cisco customers one full-stack view into how their AI agents are performing.

Splunk Agent Observability, with its new Tokenomics capabilities, closes the visibility gap and gives organizations a real-time view into agent performance and AI token spend.

This enables teams to see exactly where and why AI costs accumulate before they become a budget problem, the company said.

Splunk Agent Observability, announced initially as an on-premises offering, is now available in Splunk Observability Cloud and in Cisco Cloud Control, extending visibility to customers working across the Cisco portfolio. It evaluates agent and model behavior, observes performance across the AI stack, and applies runtime guardrails that block inaccurate or unsafe actions, like hallucinations or leaking sensitive data.

Splunk is advancing the agentic SOC by combining enterprise-wide telemetry with specialized AI agents powered by leading frontier and domain-specific models.

New purpose-built agent capabilities expand the Splunk Agentic SOC Workforce and mirror how elite security operations teams work across detection engineering, proactive threat hunting, autonomous investigation, coordinated response, and policy governance.

New Exposure Analytics enhancements deliver it with broader asset coverage, historical change tracking, and business-specific risk insights.

New capabilities in Splunk Enterprise Security Essentials bring agentic security operations and greater autonomy to far more security teams. Splunk Enterprise Security Premier adds deeper agentic autonomy and the full power of Splunk Enterprise Security.

Additionally, Splunk and AWS are expanding their long-standing relationship into joint product development through a multi-year agreement. The work advances the agentic SOC to match the speed of AI-driven attacks.

For more information about this news, visit www.cisco.com.