AI Search Assistant FAQ

What is AI Search Assistant?

AI Search Assistant enables users to search for devices and records with questions and requests written in natural, everyday language to quickly build complex queries. RevealX 360 and RevealX Enterprise administrators must opt-in to this feature, which is disabled by default.

If AI Search Assistant is enabled, users initiate searches from the Assets page by typing a question or request about devices observed or records stores on the ExtraHop system. That question, or prompt, is mapped to filter criteria and the query output is displayed. For example, if the user types Which devices have HTTP traffic with TLS v1.0?, the following AI Search Assistant query is displayed:

(Activity = http_client or Activity = http_server) and (Detection Activity where Device Role = any and Type = weak_cipher_individual)

Users can modify query results to further refine filter criteria and improve search results.

What data is shared?

The ExtraHop Machine Learning Service leverages a third-party large language model (LLM) to generate asset and record search queries based on natural language prompts input by users. Prompts are not stored by the LLM or leveraged to train the LLM.

The Machine Learning Service retains and examines user prompts for quality assurance and to guide product improvement. We recommend that users do not include proprietary or confidential data in their prompts.

AI Search Assistant is not enabled by default on the ExtraHop system. RevealX 360 and RevealX Enterprise administrators must opt-in to share user prompts with the Machine Learning Service to enable AI Search Assistant.

What are the requirements for AI Search Assistant?

Here are the requirements to enable and access AI Search Assistant:

• Your ExtraHop system must be connected to ExtraHop Cloud Services.
• Only RevealX 360 and RevealX Enterprise administrators can enable AI Search Assistant.

Why should I enable AI Search Assistant?

Here are the ways that users benefit from AI Search Assistant:

• Simplifies searching for devices and records with multiple, complex criteria compared to building a standard search query with the same criteria.
• Accelerates the timeline for locating assets and records with anomalous behavior and detection activity.
• Displays the filter criteria of a query for easy refinement and better search performance.

Enable AI Search Assistant from RevealX 360 Administration settings or RevealX Enterprise Administration settings.

Can I disable AI Search Assistant?

From Administration settings, RevealX 360 and RevealX Enterprise administrators can opt out of the setting that enables AI Search Assistant.

The ExtraHop system displays an in-product reminder on the Assets and Records pages if no selection has been made for AI Search Assistant from the Administration settings. ExtraHop administrators can opt to disable AI Search Assistant and hide the in-product reminder.