Explore practical approaches to AI resilience, security operations, and machine data at Splunk Go San Jose on November 17, 2026.

You can now manage Edge Processor pipelines entirely through the Data Management APIs, with no clicking through the UI. This walkthrough takes you from an empty tenant to a verified pipeline: create an Edge Processor, onboard a Docker instance, apply an SPL2 pipeline, and confirm it works with a canary event.

Tokenized deposits, tokenized funds and stablecoins settle around the clock. The controls behind them still run in registries, policy engines and sync jobs that can fall behind. See where digital asset transfer controls tend to break, how the Splunk platform brings the evidence together, and how an analyst traces one exception with Splunk AI Assistant.

You can now manage Ingest Processor pipelines entirely through the Data Management APIs, with nothing to install or host. This walkthrough shows you how to create an SPL2 pipeline, deploy it to the Splunk-managed runtime, and confirm it works with a canary event sent through HEC.

Learn how you can use pre-built playbooks published by Splunk’s Global Security Organization to enable world-class, automated phishing response. 

This month, we’re starting with four new security articles that help you get more out of Splunk Enterprise Security and Federated Search, from loading your own threat intelligence feeds to spotting which specific user is behaving unusually. Next, we’re looking at how AI agents and assistants can work directly with your Splunk platform data, through Cisco Cloud Control, Google Antigravity, and an AI-powered approach to anti-money laundering triage. And finally, we’ve got two articles to help Splunk Cloud Platform admins diagnose performance problems and get comfortable with the new Workload dashboard before the legacy one goes away. Let’s get into it!

Ever want to be a little more proactive in monitoring the data sent to your Splunk environment to reduce outage durations? Look no further. The Splunk Security Center of Excellence team has you!

Looking to accelerate your Splunk deployment? From free tools like the Insights Suite to tailored cloud guidance and continuous community learning, explore how our Customer Experience ecosystem helps your team turn raw data into predictive, automated action.

Customer conversations in Denver showed how quickly Splunk AI Assistant gets entire teams investigating.

A successful response from an AI agent isn't always a good one. Latency, errors, and throughput won't tell us whether the model hallucinated, ignored the instructions it was given, called the wrong tools, or cost more than expected. This post walks through debugging that kind of bad response in a travel planning AI application with Agent Observability in Splunk Observability Cloud — from finding the trace, to reading why the evaluator flagged it, to setting up an alert so the next one doesn’t come from a customer complaint.

Takeaways:

• Splunk Enterprise Security brings Agentic SOC capabilities into the analyst workflow. Agents handle repeatable triage, investigation, and response tasks so analysts can review evidence sooner and focus on decisions that need their judgment.
• The

This puzzle series (first published here) is a SPL puzzle based on analysing words.

This article outlines an approach to solving the series of puzzles, demonstrating a fun way to look at words and letters.

We performance-tested Edge Processor in hybrid mode on all four ways data reaches it: S2S, HEC, TCP syslog, and UDP syslog. Here is what we measured, what limits each path, and the heavy forwarder and host settings that raise the ceiling.

This puzzle series (first published here) is a regex puzzle based on matching statements about well-known classic British Rock Bands.

This article outlines an approach to solving the series of puzzles, demonstrating different features of capture groups, how subroutines might be used, and techniques for optimising regular expressions.

Did you connect with us at .conf26? Keep the momentum going! Join the Splunk Community team for a virtual welcome session exploring User Groups, Slack, Answers, and our Champions program—plus a shot at a $100 Splunk store gift card.

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC transformation is not just about adding AI. It is about knowing where to apply autonomy, when to keep humans in the loop, and how to build trust through evidence, approvals, rollback, auditability, and accountability.

This series introduces a practical maturity journey for the Trusted Agentic SOC, helping organizations move from manual operations and AI assistance toward governed autonomous action. Attendees will learn how Splunk helps teams mature at their own pace across the core pillars of defending autonomously, stopping attacks at the source, and mitigating critical exposure.

Raw telemetry is often incomplete. A log line might record an IP address, but what you really want in your observability platform is the owner, environment tag, or threat classification that goes with it. The OpenTelemetry Collector's lookup processor lets you close that gap at collection time — before the data ever reaches your backend.

This post walks through a concrete example: enriching logs that contain an IP address by looking it up in a CSV file.

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents with Agent Launchpad. Using Splunk data, MCP tools and NVIDIA Nemotron AI model, participants built agents that troubleshoot searches, investigate incidents, generate threat intelligence and accelerate everyday workflows. Meet the five category winners and discover how they moved from operational challenges to practical, testable agents. Then explore the full submission gallery for inspiration to build your own. 

What can you do when automatic instrumentation misses the code you need to trace and changing the application isn’t an option? This article walks through translating AppDynamics POJO match rules into Splunk OpenTelemetry Java nocode configuration, with examples for class and method matching, inheritance, interfaces, and regular expressions.

Observability instrumentation usually loses out to feature work until an incident makes it urgent. Splunk Observability Studio, a free and open source toolkit, ends that trade-off by moving instrumentation into your IDE at code creation time. Its agent skills teach Claude Code, Codex, Cursor, or Kiro to audit a service for coverage gaps, add standard OpenTelemetry instrumentation, and verify the telemetry is real, all while a local Telemetry Explorer shows every span, metric, and log before the code leaves your laptop. Here's the whole workflow, from first audit to dashboards in Splunk Observability Cloud. 

Tired of Splunk indexers burning CPU parsing Windows XML logs?

 This month, we’re looking closely at Cisco Data Fabric - starting with a brand-new Getting Started Guide that explains how the architecture fits together and following it up with a hands-on series that puts federated search to work on three realistic security investigations. We’ve also got new guidance for SOC teams on Cisco Secure Firewall advanced logging and AI-assisted triage of Tenable Cloud Security findings. And finally, we’re looking at two articles that help you keep the Splunk platform itself running smoothly, from troubleshooting ingestion problems to measuring what an upgrade really does for search performance. Let’s get into it! 

At .conf26, the Builder Bar gave Splunk app developers a hands-on space to build, experiment, and connect. From vibe-coding observable agentic apps and exploring Splunk MCP Server through Minecraft to getting live technical help from Splunk experts, here’s a look back at how developers brought their ideas to life.

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of monitoring are shifting.

Register today for Webinar, Tech Talk, Interactive Lab, and Office Hours, to secure your spot and start building systems you can trust at scale.

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to mastering the latest Splunk Enterprise Security innovations. Join us to move from theory to practice as we explore how to defend faster and more autonomously than ever before.

A live air-traffic radar scope and analogue clock on a circular wall display, built entirely as a Splunk dashboard. How AirspaceWatch won the 2026 Splunk Dashboard Contest.

The rapid evolution of artificial intelligence is fundamentally changing how engineering teams build and operate modern digital services. As organizations increasingly adopt large language models (LLMs) and agentic AI, the demand for observability is reaching a critical inflection point.

Register now to join Webinar, Tech Talk, Interactive Lab, and Office Hours, and start building systems you can trust at scale.

Introduction

Splunk technical support is transitioning to Cisco’s support environment. This change brings Splunk support cases into Cisco’s support ecosystem, laying out the foundation for future improvements, while maintaining the support experience you

In the agentic era, AI is only as capable as the data foundation underneath it. At .conf26, our platform breakout sessions are designed around real outcomes, helping you analyze data wherever it lives at lower cost, correlate insights across domains in real time, and power resilient operations with custom AI. Explore our curated guide to technical sessions, hands-on architectural blueprints, and industry panels across Microsoft, Snowflake, NVIDIA, and AWS to start building your agenda today! 

What if the next app you build for yourself becomes the solution customers are looking for? In this Developer Spotlight, Denis Gladkikh shares how a personal project connecting Kubernetes and Docker with Splunk evolved into Monitoring Kubernetes - Metrics and Log Forwarding—an application used by customers around the world. Discover the tools, lessons, and practical advice behind his journey: find your niche, build what you know, and share what you create.