Splunk .conf26: What Are We Excited About
Resilient & Trustworthy AI in Production
Last year at .conf25, Cisco and Splunk announced agentic AI-powered observability and a wave of AI agents that changed what was possible. Splunk announced a massive payload of agentic AI-powered observability capabilities: ITSI Event iQ for AI-driven alert correlation, AI Troubleshooting Agents in Observability Cloud and AppDynamics, AI Infrastructure Monitoring for GPUs and LLMs, AI Agent Monitoring with Cisco AI Defense integration, Business Insights connecting application performance to revenue, and the ThousandEyes plus RUM integration for network-to-user visibility.
But in 2026, the game has shifted. We're talking digital resilience in the agentic era. The digital resilience discussion has evolved. Today, companies need to be delivering AI that runs in production and can be trusted there, observable, provable, and protected. Digital resilience traditionally keeps the system running, it detects, explains, and recovers from failure and attack across the whole estate, and its question is "is it up, and can we fix it fast?" But in the agentic era, every decision needs to be defensible. Businesses need to establish what an AI agent is permitted to do, enforce that at runtime, and leave audit-grade evidence behind. Think "is this allowed?" and "how can we prove it?"
For OnStak customers, that means being able to Observe, Secure, and Assure your AI. And that's what we'll be demonstrating at Splunk .conf26 in Denver, September 14–17, 2026, at Booth O11.
AI in Production on Splunk Observability
The practical version of "where do you start," if you're already running Splunk: you don't start with the model. You start with a question your ops team already has to answer under pressure anyway, something like, when this service degrades, what actually caused it, and what else is about to go with it?
Turns out most enterprises already have the data to answer that. It's scattered across network, infrastructure, application, and security tools that were never built to agree on what's connected to what.
OnStak's services-led approach is powered by our AIOps engine, AI Correlation Fabric. We connect across the different tools and vendors that make up your technical estate, then we assure it and enable you to prove it, so your AI moves from pilot to production.
Apps-to-Observability Migrations That Actually Ship
One of the demos we'll walk you through at Booth O11 is how we support customers in cutting the time it takes to assess and plan a migration, from 6 to 12 weeks down to 12 to 24 hours. OnStak supports the move before, during, and after, we've worked with enough customers to optimize this path.
We know a migration decision is never taken lightly. We get you to that decision at pace, then make sure you have the visibility to map out how to make the shift confidently and strategically.
AI Assurance: The Yes Layer
If .conf25 was about surfacing the question, .conf26 is about shipping the answer. An incident hits, and you can't cleanly prove what happened. That's the problem AI Assurance is built to close. We call it the Yes Layer. It turns "we cannot deploy AI" into "yes, and here is the evidence."
OnStak's AI Assurance watches an AI system while it runs, so the evidence that it's behaving correctly is already there when someone asks for it, instead of something a team scrambles to assemble after the fact. And the person asking is rarely the engineer who built the thing.
Why Better Together: OnStak, Cisco & Splunk
Most partners work inside one vendor's stack, but no enterprise lives in one. OnStak reads the whole estate, Splunk, the Cisco ecosystem, and everything neither of them touches, and joins it into a single picture.
Splunk builds the capabilities. OnStak connects across your estate so you can see what models, agents, and calls actually do, protect your AI from attack and misuse, then prove it was allowed, and that it behaved. So you can keep the system running, and make your decisions defensible.
Let's start making resilient and trustworthy AI in production the run of business.
Meet the Team at Booth O11
Six OnStak team members will be at Booth O11 across all four days in Denver.
All six are on-site at Booth O11 for all four days. Come say hello.
There Is a Next Part
Meet OnStak at Splunk .conf26. September 14–17, 2026, at the Colorado Convention Center in Denver. Booth O11.
Bring the estate exactly as it is. No need to tidy up first. And coffee? Always coffee.