Cisco and Nvidia Partner to Launch On-Premises Version of Splunk AI

en.Wedoany.com Reported - Cisco has introduced multiple new advancements for its Splunk AI platform, helping enterprises securely adopt, observe, and scale AI alongside their machine data—wherever that data resides.

These advancements stem from Cisco's deepened collaboration with Nvidia, enabling on-premises deployment of Splunk AI through the newly launched Cisco AI POD for Splunk. With this solution, enterprise customers can now deploy Splunk AI capabilities directly in their own data centers, private clouds, or air-gapped environments. The solution integrates Cisco infrastructure, Nvidia accelerated computing, a new AI runtime, and a Kubernetes-based architecture, and has been pre-validated for Splunk AI workloads.

AI POD for Splunk is available immediately. Partners including Accenture, bitsIO, Wipro, and World Wide Technology are providing support from day one for customers with existing infrastructure.

Jeetu Patel, President and Chief Product Officer at Cisco, said that one of the biggest barriers to enterprise AI today is that deployment is too difficult: customers want to know whether they can trust it to do the job well, whether it is affordable, and most importantly, whether it can be secured. By running Splunk AI on infrastructure customers already trust, they can put AI to work in their business faster, with both confidence and control.

At the model level, customers can self-host a variety of open-source and proprietary generative AI models within their own Splunk Enterprise environments. Supported models include Cisco Deep Time Series Model, Google Gemma 4, and OpenAI GPT-OSS 20B, with Nvidia Nemotron open-source models expected to be added soon. Enterprises can therefore deploy the AI agents and models best suited to their needs while maintaining full control and data sovereignty.

The already available Splunk AI Assistant and the upcoming Agent Launchpad are designed to support instant, agentic investigations and the development of custom AI agents for diverse scenarios such as security operations centers.

To better oversee AI agent behavior and costs, Cisco has enhanced Splunk Agent Observability with new Tokenomics capabilities, providing real-time visibility into AI agent performance and tracking token spend across agents and coding tools. This feature is now available in Splunk Observability Cloud, Cisco Cloud Control, and on-premises deployments, enabling prediction of future usage and directly linking AI costs to business value. Cisco said the system also includes runtime guardrails that automatically intercept inaccurate or unsafe AI actions, such as hallucinations or accidental data leaks.

Other observability improvements include Observability Studio, which enables development teams to ensure new applications are "observable by birth," with measurability and production readiness from launch. The new Network Intelligence App brings Cisco network topology, device health status, and event data into Splunk, providing context-rich alerts and real-time network tracing capabilities. Cisco has also introduced new Essentials and Premier editions for Observability Cloud, aimed at simplifying procurement and supporting broader, more cost-effective adoption.

On the security front, Cisco is advancing agentic operations by expanding the Splunk Agentic SOC Workforce. This workforce leverages enterprise-wide telemetry data and specialized AI agents to replicate the functions of elite security teams, including detection engineering, proactive threat hunting, investigation, response, and policy governance. These agents deliver deep reasoning and explainable determinations by correlating data across network, cloud, application, and identity environments, reducing alert noise and accelerating response times.

Exposure Analytics has also been enhanced, offering broader asset coverage, historical change tracking, and business-aligned risk insights, connecting real-time exposure data across Splunk, Cisco, and third-party ecosystems. These updates are designed to give security operations centers the autonomous capabilities and contextual information needed to rapidly respond to AI-driven attacks.

Meanwhile, Cisco's Splunk division has reached a multi-year agreement with Amazon Web Services (AWS) to jointly develop new security solutions to mitigate the rapidly evolving threat landscape posed by AI-powered attacks. The collaboration will focus on providing agentic support for detection, investigation, and response, while preserving analyst oversight and governance. Splunk primarily operates in cybersecurity and observability, and Cisco acquired it in an all-cash transaction valued at approximately $28 billion, which was completed in 2024.