topic What can Splunk Observability do that Splunk Platform (Cloud/Enterprise) can't? in Splunk Cloud Platform

What can Splunk Observability do that Splunk Platform (Cloud/Enterprise) can't?

northerngrowth — Tue, 22 Nov 2022 19:04:03 GMT

Having a hard time understanding what Splunk Observability does that you can't do with Splunk Platform (Cloud or Enterprise)? Aren't you able to take in logs, metrics, and traces and do real-time reporting, monitoring and visualizations with Splunk Platform? And isn't Splunk Platform used to detect and solve issues? Isn't that the same as what Observability does?

Thanks a lot for your help in advance!

Re: What can Splunk Observability do that Splunk Platform (Cloud/Enterprise) can't?

richgalloway — Wed, 23 Nov 2022 16:35:17 GMT

There are similarities between Splunk Enterprise (SE) and Splunk Observability (SO). The main distinguishing factor of SO is support for the OpenTelemetry protocol, which SE does not support.

Re: What can Splunk Observability do that Splunk Platform (Cloud/Enterprise) can't?

northerngrowth — Wed, 23 Nov 2022 19:14:47 GMT

Got it - so to confirm, does that mean that I can set up observability on Splunk Enterprise on my own without having to add on Splunk Observability? Thanks a lot!

Re: What can Splunk Observability do that Splunk Platform (Cloud/Enterprise) can't?

richgalloway — Wed, 23 Nov 2022 19:38:19 GMT

You can set up something similar, but it won't do everything SO can do. For instance, native Splunk Enterprise can't handle data coming in using the OpenTelemetry protocol. I suppose you could write an OTel collector that converts telemetry into Splunk metrics, but that could be a lot of work.

I'm not familiar enough with SO to know what analytics and visualizations it can do so I can't say if SE can replicate them or not.