The most valuable features of Splunk Enterprise Security, according to the reviews, are:ġ. This can be done using AI tools like ChatGPT, which will understand the context of what the user is trying to approve and give suggestions based on it. It will be able to give more context to the user regarding how they should approach the query. Even if users have zero knowledge, they can get comfortable with Splunk much more easily if an AI tool helps them write a query or search for any indexes or data models. It can help in a way to understand the context of what the user is trying to write, which will be very helpful for ongoing operations. If a user is struggling, they can just ask an AI tool what they are trying to do with a query, and then it can suggest how a query can be written for a particular user. It would be great if I could have a certain dialogue box in Splunk that uses innovative AI tools like ChatGPT, which are available now in the tech department. The same thing happens with Sentinel, where you select certain things, and it will create a query for you.

I've recently started working for the past three months on Sentinel. I have seen users struggle with Splunk just because of the language they've used to create it. Splunk Enterprise Security has a learning curve that needs to be improved.

Splunk customer support