The Partner Advantage: Splunk .conf25 Unveils the Future of AI-Native Digital Resilience

Splunk .conf25 delivered a clear message to the partner ecosystem: we're entering a new era of AI-native digital resilience, and partners are at the center of this transformation. The announcements from this year's conference represent more than just product updates. They signal a fundamental shift in how organizations will manage, secure, and derive value from their machine data at unprecedented ludicrous scale.

As Splunk partners, these innovations create significant new opportunities to deliver transformative value to customers while expanding your service offerings into emerging areas of AI, security, observability, operational technology, and autonomous operations.

The Foundation: Cisco Data Fabric and Federated Search

What This Means for Partners:

The Cisco Data Fabric enables federated search capabilities that bring Splunk's analytics directly to data wherever it resides. Whether in Amazon S3, Snowflake, Microsoft Azure, or other platforms. This creates several immediate opportunities:

• Data Fabric Readiness Assessment: Guide organizations in architecting their data landscape using the new "data ponds" and "data puddles" approach
• Data Management Strategies: Help customers get the right data to the right place with the right analytics - whether in the cloud or on-prem.
• Integration Services: Leverage native integrations with Amazon, Snowflake, Azure, and others to unlock insights from existing data investments without complex migration projects

The Cisco Data Fabric model transforms how customers think about data accessibility. Instead of expensive, time-consuming data consolidation projects, partners can now offer solutions that provide unified analytics across distributed data sources breaking down digital silos.

Scaling Intelligence: AI Canvas and Machine Data Lake

The introduction of the Machine Data Lake represents Splunk's answer to AI's insatiable appetite for machine data. This purpose-built storage solution is designed to handle massive scale while maintaining the performance and accessibility required for AI workloads.

Combined with the new AI Canvas, partners gain powerful tools for:

• Custom AI Solution Development: Build and visualize AI-powered dashboards and workflows tailored to specific customer use cases
• Capitalize on "MachineGPT": Help customers unlock the value of their mission critical proprietary machine data with the pre-trained open-source model Time Series Foundation Model
• AI Model Training Services: Leverage the Time Series Foundation Model to create custom "Machine GPTs" for specialized industry applications

AI Canvas particularly stands out as it provides a visual interface for making AI outputs actionable and transforming complex AI insights into business-ready visualizations that drive decision making in a guided natural language interface for a generative UI to maximize operational speed and efficiency.

Advanced AI Capabilities: AI Toolkit and MCP Server

Splunk's AI Toolkit brings seamless integration with third-party LLMs directly into SPL with out-of-the-box connections for Ollama, OpenAI, Anthropic, Gemini, Amazon Bedrock, and more. This integration provides access to foundation models while maintaining the security and governance controls enterprise customers demand.

Partner Opportunities Include:

• AI Implementation Services: Help customers select and deploy the right AI models for their specific use cases while maintaining process knowledge and SPL skill in execution
• Custom AI Agent Development: Tap into the vast ecosystem AI Agents and provide holistic agentic AI with Splunk via the MCP Server
• AI Governance Consulting: Establish frameworks for responsible AI deployment with built-in observability and control

Splunk's advanced AI capabilities ensures partners can offer customers choice and flexibility in their AI strategies while maintaining enterprise-grade security and compliance requirements.

Edge Innovation: Edge Processor and Edge Hub OS

Edge Processor helps customers achieve greater efficiencies in data transformation close to the data source. With the introduction of Splunk Enterprise 10, Edge Processor is now available for on-premises customers - even in air-gapped deployments.

Edge Hub OS allows for the collection of physical data via popular protocols such as MQTT, OPC-UA, Modbus, and more. Customers can train ML models centrally with vast amounts of data in Splunk, while pushing inference to the edge for rapid response with Edge Hub OS.

For partners, Edge Processor and Edge Hub OS creates opportunities in:

• Data Management and Routing: Help customers assess their data and get the right parts to the right locations securely
• OT and Industrial Solutions: Serve manufacturing, energy, and transportation customers who need real-time insights from distributed assets
• Compliance and Data Residency: Support customers with regulatory requirements that limit data movement across boundaries

The Autonomous Future: Agentic Observability and Agentic SOC

Perhaps the most transformative announcements center on Agentic Observability and Agentic SOC capabilities. These represent the evolution from reactive monitoring to autonomous, intelligent operations.

Agentic Observability

This new paradigm uses autonomous software agents to collect telemetry and propose or enact fixes automatically. Partners can position themselves at the forefront by:

• Proactive Operations Services: Help customers transition from reactive troubleshooting to predictive issue prevention
• Custom Agent Development: Build specialized observability agents for unique customer environments
• Integration Services: Connect agentic observability with existing customer workflows and tools

Agentic SOC

The security operations center is evolving beyond human-centric workflows to incorporate AI agents that can investigate alerts, gather evidence, and even recommend responses. The new triage agent and Detection Studio provide partners with:

• SOC Modernization Services: Help customers build next-generation security operations capabilities
• Custom Detection Engineering: Leverage Detection Studio to create industry-specific security use cases
• AI-Powered Incident Response: Implement autonomous investigation and response capabilities that scale with customer needs

The Partner Advantage: Community as Superpower

Throughout .conf25, Splunk leadership emphasized that the community of customers, developers, and partners are Splunk's superpower. This isn't just marketing speak. It reflects a fundamental commitment to partner success in the AI era.

Your Path Forward:

1. Become AI Experts: Invest in understanding and implementing Splunk's new AI capabilities across the toolkit
2. Master the Data Fabric: Help customers adopt federated search models to maximize existing data investments
3. Lead with Integration: Leverage Cisco synergies to create more compelling, holistic solutions
4. Focus on Autonomous Operations: Position your services around agentic capabilities that deliver true business transformation
5. AI Resilience as a Service: Move beyond point solutions by integrating security and observability atop the unified data fabric

Conclusion: Seizing the Moment

Splunk .conf25 made clear that we're at an inflection point with the generational technology of AI. The combination of AI capabilities, Cisco Data Fabric, and autonomous operations creates unprecedented opportunities for partners who are ready to lead. The technologies announced aren't just incremental improvements. Instead, they represent a new foundation for how organizations will operate in an AI-driven world.

As partners, you're uniquely positioned to help customers navigate this transformation. The question isn't whether this change is coming - it's whether you'll lead it.

Ready to dive deeper into these capabilities? Visit the Cisco and Splunk partner page to access training, resources, and support for implementing these game-changing technologies with your customers.