Hi, 

With the upcoming Splunk Cloud Developer edition, can you share any upcoming features upon release which will help with testing any admin changes or custom apps/add-ons before making the changes in a Splunk Cloud production environment? Are you able to share any information, such as the amount of test data we'd be allowed to ingest? 

Many thanks,

Sam Clark

Here are some of the questions from the session:

Q1: I recently enabled and configured ACS, but I’m not sure the best way to get started from here. What are the different ACS tools/features I should look into that will give me the highest ROI on the time it’ll take me to configure? 

• A: If you’re familiar with CURL command, you can use ACS directly
• ACS Manual Page: https://docs.splunk.com/Documentation/SplunkCloud/latest/Config/ACSIntro with CURL example
• Example of integrating ACS with your pipeline https://github.com/splunk/acs-privateapps-demo  
• If your team is using Terraform - ACS also supports terraform (Indexes, *HEC Tokens, *IP Allowlist) https://registry.terraform.io/providers/splunk/scp/latest 
• If you want something more interactive or easy to use, ACS supports the ACS CLI: https://docs.splunk.com/Documentation/SplunkCloud/9.0.2303/Config/ACSCLI  
• The CLI supports bulk operations for HEC Tokens, Indexes and Apps, which allows you to create or update multiple resources in just one line.

Q2: So if the graph is showing as red during a specific time frame, will we know exactly what is being impacted if the performance is degraded? For example, would it be ingestion? Would it be search runtime? Would it be any specific things? Or is it just performance in general? It's kind of a um difficult thing to interpret.

• A: Check out the “Monitoring system health” section of this Lantern article: Managing your Splunk Cloud Platform deployment

Q3: Are there any best practices for managing large numbers of users in Splunk Cloud? E.g., if I want to grant varying access permissions to specific indexes, apps, and data sources?

• A: Check out the Splunk Success Framework introduction on Lantern to get started with best practices
• Tips and Tricks to managing large number of users: https://www.conducivesi.com/splunk-blog/3-tips-to-maintaining-splunk-over-the-long-haul-users-roles
• Use the Admin Config Console to grant access to specific indexes.