Skip to content
Merged
Show file tree
Hide file tree
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 8 additions & 6 deletions explore-analyze/ai-assistant.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,31 +12,33 @@ applies_to:
products:
- id: kibana
- id: observability
- id: security
- id: cloud-serverless
---

# AI assistant

$$$token-limits$$$

**AI Assistant** is a chat-based interactive tool to help you with a variety of tasks related to Elasticsearch and Kibana, including:
**AI Assistant** is a chat-based interactive tool that can help with a variety of tasks throughout Elasticsearch and Kibana, including:

- **Constructing queries**: Assists you in building queries to search and analyze your data, including converting queries from other languages to [ES|QL](query-filter/languages/esql.md).
- **Indexing data**: Guides you on how to index data into Elasticsearch.
- **Using APIs**: Calls Elasticsearch APIs on your behalf if you need specific operations performed.
- **Generating sample data**: Helps you create sample data for testing and development purposes.
- **Visualizing and analyzing data**: Assists you in creating visualizations and analyzing your data using Kibana.
- **Troubleshooting**: Explains errors, messages, and suggests remediation.
- **Investigating threats**: Helps analyze potential attacks, provides threat research, and assists with alert triage.

AI Assistant requires specific privileges and a generative AI connector.

% Check [Configure AI Assistant](../deploy-manage/) for more details on how to enable and configure it.

The capabilities and ways to interact with AI Assistant can differ for each solution. Find more information in the respective solution docs:
AI Assistant requires specific privileges and a large language model (LLM) connector. The capabilities and ways to interact with AI Assistant can differ for each solution. To learn more about how it works in each solution, refer to:

- [{{obs-ai-assistant}}](../solutions/observability/observability-ai-assistant.md)
- [AI Assistant for Security](../solutions/security/ai/ai-assistant.md)

To learn more about configuring LLM connectors, refer to:

- [Enable LLM access](../solutions/security/ai/set-up-connectors-for-large-language-models-llm.md)

## Prompt best practices [rag-for-esql]
Elastic AI Assistant allows you to take full advantage of the Elastic platform to improve your operations. It can help you write an ES|QL query for a particular use case, or answer general questions about how to use the platform. Its ability to assist you depends on the specificity and detail of your questions. The more context and detail you provide, the more tailored and useful its responses will be.

Expand Down
5 changes: 5 additions & 0 deletions solutions/observability/observability-ai-assistant.md
Original file line number Diff line number Diff line change
Expand Up @@ -530,3 +530,8 @@ Anonymization has the following limitations:
### Token limits [obs-ai-token-limits]

Most LLMs have a set number of tokens they can manage in single a conversation. When you reach the token limit, the LLM will throw an error, and Elastic will display a "Token limit reached" error in Kibana. The exact number of tokens that the LLM can support depends on the LLM provider and model you’re using. If you use an OpenAI connector, monitor token utilization in **OpenAI Token Usage** dashboard. For more information, refer to the [OpenAI Connector documentation](kibana://reference/connectors-kibana/openai-action-type.md#openai-connector-token-dashboard).


## Learn more

- For more information about how AI Assistant works in {{elastic-sec}}, refer to [AI Assistant for Security](/solutions/security/ai/ai-assistant.md).
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe for these we could give a more meaningful heading to help users find the section if it's what they're looking for. I think we can make this just body text and not a list as well. Maybe something like:

Suggested change
## Learn more
- For more information about how AI Assistant works in {{elastic-sec}}, refer to [AI Assistant for Security](/solutions/security/ai/ai-assistant.md).
## AI Assistant for Security
The capabilities and ways to interact with AI Assistant can differ for each solution. For more information about how AI Assistant works in {{elastic-sec}}, refer to [AI Assistant for Security](/solutions/security/ai/ai-assistant.md).

And then similar for the Security AI Assistant page

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Love it, thanks Mike!

5 changes: 5 additions & 0 deletions solutions/security/ai/ai-assistant.md
Original file line number Diff line number Diff line change
Expand Up @@ -177,3 +177,8 @@ In addition to practical advice, AI Assistant can offer conceptual advice, tips,

* “How do I set up a {{ml}} job in {{elastic-sec}} to detect anomalies in network traffic volume over time?”
* “I need to monitor for unusual file creation patterns that could indicate ransomware activity. How would I construct this query using EQL?”


## Learn more

- For more information about how AI Assistant works in Observability and Search, refer to [{{obs-ai-assistant}}](/solutions/observability/observability-ai-assistant.md).
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,11 @@ products:
Different LLMs have varying performance when used to power different features and use-cases. For more information about how various models perform on different tasks in {{elastic-sec}}, refer to the [Large language model performance matrix](/solutions/security/ai/large-language-model-performance-matrix.md).
:::

## Elastic Managed LLM

:::{include} ../../_snippets/elastic-managed-llm.md
:::

## Connect to a third-party LLM

Follow these guides to connect to one or more third-party LLM providers:
Expand Down
Loading