Cisco Systems Inc. has overhauled its Splunk platform to support the agentic enterprise, focusing on data governance and AI observability. The strategy centers on the Cisco Data Fabric, which analyzes data across cloud object stores, data lakes, and third-party platforms like Snowflake and Databricks without requiring data duplication.
The company introduced a universal collector for telemetry and domain-specific AI models for time-series forecasting and log analysis. These models are designed to complement frontier models. Additionally, the new Cisco AI POD for Splunk, developed with Nvidia, enables on-premises and private-cloud AI deployments for regulated sectors.
Splunk’s new security features include specialized agents for threat hunting and malware analysis, available in Enterprise Security Essentials and Premier editions. These agents allow organizations to set autonomy levels, requiring human approval for critical actions like disabling accounts.
The platform now includes Agent Observability to monitor agent behavior and runtime guardrails to prevent unsafe actions. A new Tokenomics tool tracks AI token consumption across teams and tools like Claude Code and Cursor, providing cost forecasting and attribution to help manage enterprise AI spending.
A multiyear agreement with AWS will facilitate joint development of agent-specific security products and sales initiatives. These updates integrate Splunk more deeply into Cisco’s broader portfolio of networking, security, and computing infrastructure.
