Our latest news

May 5th, 2022.


I am very excited to announce the start of the beta testing program for our new version of the Natural Language Interface for Splunk. 

This version 2.0 brings significant improvements to the interface and type of queries available and a new free natural language search bar.  This free natural language interface is capable to scale from simple queries like Give me the CPU time to sophisticated correlation and statistical queries. It also brings several significant innovations in the area of Natural Language Interfaces for Splunk, some of them subject to patent applications.
Our Natural Language Interface for Splunk is the first in the world:
•    to give full access to all Splunk data sources: standard and custom data models, events and lookups.
•    to generate most queries required for cyber and IT-Ops Use Cases.
•    to generate correlations between more than two events, data models and lookups. It also supports complex statistical transformations.
•    to provide an interactive, semantically driven approach for discovering and building valid natural language intent. Our system will automatically generate the closest intents from any phrase fragment. It also provides sophisticated wizards for incrementally building these intents.
•    to include a user interface enabling System Administrators to customise the natural language translation (hosted version only).  
Other capabilities include the generation of custom visualisation specific to the query. 

For more details, please check the following articles:

An interface to rule them all (part 1: dealing with ambiguity)

An interface to rule them all (part 2: a wizard to the rescue)

Challenges and Benefits of Natural Language Interfaces for Splunk

If you would like to participate, please send me an email to alonso.marquez@openintelligence.com.au and I will send you access credentials to the demo instance.

Alonso Marquez


Aug 29th, 2021.

It gives me great pride to announce the release of the initial production version (v1.0.2) of our Natural Language Interface Splunk App.

Our Splunk App is now available for downloading in Splunkbase (https://splunkbase.splunk.com/app/5706). We have also made available the App source code in GitHub (https://github.com/alonsom/openintelligence_nli_app).

This version provides two natural language wizards that allow both novices and experience Splunk users to easily compose complex natural language expressions addressing even the most complex problems faced in areas as different as threat hunting and IT operation. The App translates the generated natural language expression to a Splunk query on the fly by making a rest call to one of our specialized rules engines.

You will require a valid license to access any of these servers, but you could get free, temporal access  with our trial license. For long term access to our hosted (shared or dedicated) production rules engines, please visit our license pages where you will find details about the options available, associated support and cost.  You could also install our rules engine and tailor the generated queries to your Splunk environment.

Please feel free to contact me if you have any questions about this release.

Alonso Marquez



Aug 6th, 2021.

Many thanks to all involved in our beta trial for the Natural Language Interface Splunk App. Special thanks to our friends in Cirrus Networks, DPS and Splunk for their participation. We really appreciate all the support and feedback we have received during this trial. We are currently working in the release of our new initial production version.

Thanks again and please feel fee to drop us an email if you have any question or suggestion,

Alonso Marquez


July 6th, 2021

It gives me great pleasure to announce the Open Intelligence beta testing program for our new Natural Language Wizard Splunk App.


This version enables Splunk novices to incrementally build complex natural language queries (a subset with a precise and unambiguous semantic) and translate them to the Splunk query language. This version of the wizard has been designed for the generation of the complex and precise correlations required in cyber security/compliance. However, the logical rules engine managing the mapping from natural language to Splunk is completely generic and could be used for other areas/types of queries.


If you would like to participate, please send me an email to alonso.marquez@openintelligence.com.au and I will provide you with access credentials to the demo instance currently hosted in the Cloud.

Alonso Marquez