Overview
- The new model moves away from centralized ingestion to "taking Splunk to the data," unifying machine and business sources for real‑time analysis.
- Cisco is deepening integrations across Splunk, AppDynamics, Isovalent and ThousandEyes and previewed Splunk Federated Search for Snowflake, targeted for July 2026.
- A virtual Machine Data Lake underpins AI use cases, with an open‑weight time‑series foundation model planned for November 2025 on Hugging Face for anomaly detection and forecasting.
- Planned capabilities include automated field extraction to handle format drift, self‑healing data pipelines, and a collaborative Cisco AI Canvas experience targeted for 2026.
- Features are entering preview and will be delivered incrementally to Splunk Enterprise and Splunk Cloud customers, while analysts note Cisco’s edge telemetry access as a potential advantage and customers watch for cost and implementation clarity.