Splunk pushes observability story
Splunk and partners have been discussing observability as the foundation for AI and security use cases, with the company’s CTO and platform posts framing machine‑data unification as central to that agenda. Social posts flagged Splunk CTO Greg Ainslie‑Malik talking about observability and AI security with AWS, and Cisco/Splunk integration notes referenced Galileo for AI observability in IT operations. (x.com) (x.com) (x.com)
Observability is the practice of watching software systems through their telemetry — logs, metrics, traces, and events — and Splunk is pushing it as the base layer for artificial intelligence and security work. (splunk.com) In Splunk’s Q1 2026 observability update, the company said it is adding artificial intelligence agent monitoring, artificial intelligence infrastructure monitoring, and a troubleshooting agent that correlates metrics, events, logs, and traces across one workflow. (splunk.com) At Splunk.conf25 in Boston on September 9, 2025, Cisco said its enhanced Splunk Observability portfolio would unify observability across environments, add business context, and deploy artificial intelligence agents across incident response while also monitoring their performance and quality. (newsroom.cisco.com) Splunk’s own.conf25 recap used the same framing: the platform unifies machine data, Splunk Security powers an “agentic” security operations center, and Splunk Observability drives artificial intelligence-powered operations for information technology teams. (splunk.com) That pitch has widened beyond application monitoring. Splunk’s September 2025 launch of artificial intelligence infrastructure monitoring said operations teams now need visibility into large language models, vector databases, frameworks, graphics processing unit use, and other layers created by artificial intelligence workloads. (splunk.com) Cisco and Splunk have been building that stack together since at least June 5, 2024, when they announced an integrated full-stack observability experience that combined Cisco networking and application telemetry with Splunk’s monitoring tools in one interface. (newsroom.cisco.com) The newest step came on April 9, 2026, when Cisco announced plans to acquire Galileo, an artificial intelligence observability company. Cisco said Galileo would strengthen the Splunk Observability portfolio and extend real-time visibility and protection across the full agent development lifecycle. (blogs.cisco.com) Splunk and Amazon Web Services are also tying the message to cloud and model operations. Amazon Web Services’ partner page says Splunk Observability Cloud is used to monitor Amazon Web Services services, users, applications, and infrastructure, while a Splunk blog published April 14, 2026 described direct Amazon SageMaker inference and Amazon Bedrock retrieval-augmented generation integration in Splunk’s artificial intelligence toolkit. (aws.amazon.com) (splunk.com) Splunk’s platform team is making the same case from the data side. In a February 2026 post, the company said its hosted artificial intelligence models were built to understand machine data and plug into security and observability workflows without extra tuning. (splunk.com) The through line is that Splunk is no longer selling observability as a narrow tool for engineers to debug outages. In its 2025 and 2026 product and strategy posts, the company has recast observability as the system of record for how artificial intelligence apps, infrastructure, and security operations are watched in production. (splunk.com 1) (splunk.com 2)
