Overview
Splunk has a very mature language for data manipulation and dashboard creation however it is very expensive to run and operate. Clients are looking for alternatives to Splunk including OpenSearch, a cheaper Opensource alternative. However translation of Splunk functionality to OpenSearch is complex and there is not a lot of documentation on it available given that OpenSearch is a relatively new alternative to Splunk.
The APEX Splunk Migrator automates conversion of Splunk SPL queries into OpenSearch PPL (or other Opensearch based languages), allowing organisations to transition their existing dashboards, alerting, and data analysis pipelines without rewriting queries manually. The system uses AI agents to interpret SPL, generate equivalent OpenSearch queries, and validate accuracy through feedback loops, reducing manual effort and errors.
Highlights
- The APEX Splunk Migrator is built on - Amazon Bedrock (Models, Guardrails, Knowledge Base, Evals) - Amazon AgentCore (Runtime, Memory, Observability, Identity) - LangGraph - Strands SDK, MCP Protocols - S3 Vector, Cognito, Aurora PostgreSQL Serverless, Lambda, ECR
- Two common use cases for APEX Splunk Migrator are: • Bulk migration of existing dashboards and reports. • Optimisation of query performance and cost management post-migration using AI insights.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Pricing
Custom pricing options
How can we make this page better?
Legal
Content disclaimer
Resources
Vendor resources
Support
Vendor support
Get in Touch:
Yun Zhi Lin Partner, Deloitte Cloud & Engineering yzlin@deloitte.com.auÂ