Configure Splunk AI Assistant for SPL

If you have administrator permissions, you can use the Settings tab of Splunk AI Assistant for SPL to configure both data sharing and the personalization preview.

The personalization preview is available beginning with version 1.0.5 of Splunk AI Assistant for SPL.

Configure share data settings

When you use Splunk AI Assistant for SPL, your Splunk platform administrator has the option to share chat history, in-product feedback, and other data with Splunk. This shared data is used to develop and improve the assistant, as well as for Splunk research and development.

Data sharing is turned on by default but you can turn data sharing off at any time. Whether data sharing is turned off or on, that setting applies at the app level, across all users, and not at the individual user level.

You must have data sharing turned on if you want to use the thumbs up or thumbs down icons and additional fields for in-product feedback on app results.

Data sharing configuration can only be changed by those users with write permissions for Splunk AI Assistant for SPL. Turn data sharing off or on from within Splunk AI Assistant for SPL on the Settings tab. Select the box next to Share my data with Splunk as shown in the following image:

If you opt-out of data sharing, the data collection stops, but any previously collected data remains.

To learn more about what data is collected, see Share data in Splunk AI Assistant for SPL.

Configure personalization preview settings

Beginning with version 1.0.5, the assistant offers a preview of a personalization feature. The personalization feature uses your data to provide better results from Splunk AI Assistant for SPL.

Participation in this preview feature is optional and the preview is turned off by default.

Only users with administrator privileges can opt-in or opt-out of this preview. You can opt-in or out at any time. If you want to opt-in or out of this preview feature, navigate to the Settings tab of the assistant. Select or de-select the Share search history with Splunk option, as shown in the following image:

Users without administrator privileges see the Personalization information on the Settings tab, and the setting chosen, but cannot change this setting.

If you opt-in for the personalization preview, collected data is stored in the vector database. If you opt-out of this personalization preview at a later date, a cleanup job runs weekly which deletes any collected data.

To learn more about this personalization preview, see Feature preview: Personalization.

Deleting data used by the assistant

Splunk AI Assistant for SPL keeps the data used to power the service within the Splunk platform environment while running the service. Regardless of if you stay opted in or choose to opt out of sharing data collected for research and development, the assistant uses your data to power the Splunk AI Assistant for SPL service.

For information on data collected for research and development, see Share data in Splunk AI Assistant for SPL.

The assistant does not view any event information, nor does it see logs.

If you need the data collected for research and development deleted, you must open a technical support ticket. Otherwise this data is deleted if your Splunk Cloud Platform subscription is de-provisioned.

Chat data is stored in the KVStore on the customer's stack. If you choose to delete a chat, that chat data is deleted from your local KVStore collection.