Product News & Announcements
All the latest news and announcements about Splunk products. Subscribe and never miss an update!

May 2022 | Observability Newsletter

Splunk Employee
Splunk Employee



22-22471-Customer Success Monthly Account Newsletter-101-observ-01 (1).jpg


May 2022 | Highlights


Introducing the new Observability Suite home page

The new Observability home page will give users easy access to the content that matters most to the user.  See recents, favorites and content the user created all in one place. First time users will get additional assistance in seeing tutorial content as well as videos describing the suite.

Screen Shot 2022-04-13 at 3.50.20 PM.png


Splunk Observability will now support bursting for metrics time series creation to support spiky workload pattern

Splunk O11y will now allow bursting for metric time series creation (MTS) to better support bursty or spiky patterns in MTS creation traffic. Customers with the default MTS creations per minute limit (MTSMLimit, currently 6000) can now burst up to 10 times (60,000) in each minute. Note that each customer gets to use up to a maximum of 20 minutes worth of burst capacity in an hour, after which the default MTSM limit is enforced.

This allows customers previously limited to creating MTS @ 6000/min to do any of the following:

  1. Create MTS @ 60,000/min for consecutive/non-consecutive 20 minutes and then @ 6,000/min for the remaining 40 mins in the hour.
  2. Spread the burst capacity utilization over the entire hour by creating MTS at the rate less than or equal to 24,000/min.

If the customer has already established a higher MTSMLimit (> 6000), their MTS creations can burst up to 2X MTSMLimit or 60,000 whichever is higher.

Burst capacity is available only when our multi-tenant deployment is able to handle it. Therefore, it is not guaranteed, but applied on a best effort basis. This feature has been rolled out about a month ago and we have seen burst capacity being available 100% of the time. Our system monitoring will alert us when burst capacity becomes unavailable for more than an ideal amount of time.

If you constantly need to have a higher MTSM Limit, please work with your account teams to get your default limit (6000) raised to a higher number. Additionally bursting functionality does not change the ability to control MTS creations based on tokens, when you set an MTS creation limit for a token, creations from that token will be throttled when the limit is hit. Furthermore, you cannot define bursting limits per token, bursting functionality is controlled only at organizational level.


Infrastructure Monitoring

Throttling and System Limits Dashboard

Three new dashboards have been added to the Organization Overview Dashboard Group. With the Throttling, System Limits, and Entitlements dashboards, administrators can identify if any users in their organization are being throttled or limited. These dashboards are for troubleshooting purposes only. For accounting purposes, please see you billing and usage page and report. The new dashboards can be accessed by going to Settings, then Organization Overview.


Splunk Observability Cloud now removes the configuration dependency for viewing dependent services of an infrastructure entity

On December 7th 2021, a new right navigation experience was added to the navigators in the Infrastructure page of Splunk Observability Cloud. This allows you to see all of the services such as Kafka that are running on a collection of hosts such as AWS EC2, Azure Virtual Machines, GCP Compute Instances, or on-premise hosts and navigate i.e. pivot to the interested service instance, such as Kafka, with the click of a button. Now, you no longer have to configure the value in the configuration file to see these service dependencies in the navigator sidebar. More detailed documentation is available here.


Synthetic Monitoring

Support for New Network Authentication Protocols, and more, in Splunk Synthetic Monitoring

Splunk Synthetic Monitoring recently launched support for a range of new network authentication protocols including NTLM, Kerberos, and Digest. This functionality helps Splunk Synthetic Monitoring users who want to test their user experience on internal networks gated by any of these protocols. Adoption of more stringent security protocols on local networks is on the rise as enterprises around the world are fending off more cyber attacks than ever before. For more information on how to leverage this functionality please visit our help docs.

Also, we’ve released an API endpoint that enables you to programmatically rotate your Synthetic Global Variables to reduce manual maintenance in your Synthetic tests, while maintaining highly secure customer data. Documentation about this new endpoint can be found here.


Splunk Icon_press-release (1).png


Can't Miss Updates

All the latest events, news and announcements 



Screen Shot 2022-05-03 at 1.52.21 PM.png


Digital Happenings

Ready. Set. Innovate.


Splunk_Newsletter_Spacebar.pngSplunk Community.png


Global User Group Week Recap!

The second annual Global Splunk User Group week was another success! With 25 events and more than 200 attendees, Splunk Users all around the world gathered April 4-8 to connect, collaborate, and learn all things Splunk! For many User Groups, this was their first time meeting in-person in over 2 years. Thank you to all who participated! To join your local Splunk User Group, visit


Splunk_Newsletter_Spacebar.pngLantern Icon.png


It's here - a whole new way to navigate Splunk Lantern!

If you're new to Lantern and don't know what our site is all about, there's no better place to start than the About page. If you're one of the thousands of customers Lantern has helped in the past, head straight on over to our new homepage and explore how easy we've made it to help you find the use case and product guidance you need to put your data to work.

  • Are you a new Splunk customer? Select Getting Started on the homepage to find sequenced learning paths to help you onboard Platform, Security, and Observability products.
  • Have you passed the onboarding phase and are now searching for actionable tips written by Splunk experts to help you work with your data faster and better? Select a Product Tips link instead.
  • Already know what you want to do in your Splunk environment? Use the Select a Use Case drop-down menus for Security and Observability to find step-by-step guidance fast. And if what you click doesn't get you where you wanted to go, open up the left navigation to get an easy look at all the available use cases.
  • Ready to find new use cases? The Data Application section connects the most common data types and data sources to guidance on how you can use that data in Splunk today.
  • Simply curious what else is possible in Splunk? Review the high-value, Featured Articles on the top of the homepage or scroll to the bottom for a list of New Articles, updated in real time.

As always, be sure to tell us what you think by logging into Lantern with your account and sharing your thoughts in the feedback section at the bottom of every article.

Splunk_Newsletter_Spacebar.pngSplunk Icon_test.png


Go to school — for Splunk

Join us for Splunk University at the MGM Grand the weekend before .conf22 on June 11-13. View the course offerings here. Splunk Certification will be live in Las Vegas! For information on how to register for an on-site testing center appointment, view the .conf22 Exam Registration Tutorial here (hint: it’s a different process than the normal PearsonVUE exam registration!). Virtual .conf22 participants can also join the party with the discount code SEEYOUINVEGAS for a single discounted exam registration (standard registration process applies).


Splunk_Newsletter_Spacebar.pngSplunk Icon_splunkbase-apps-and-add-ons (2).png


More updates in the Splunkbase Preview:

Try the new search which has improved autocomplete that is more intuitive. Take a look, give it a try, and share your thoughts with us by clicking the Feedback button on the upper right corner of the page. 

New apps and recent updates:

Splunk Add-on for Amazon Web Services (AWS)

Splunk ES Content Update

Splunk Add-on for Unix and Linux

Splunk DB Connect

Splunk Add-on for Oracle Database




Get guidance at every step of your data journey with Customer Success

We can help you maximize your Splunk investment. Ready to get started? Learn more

Get Updates on the Splunk Community!

Streamline Data Ingestion With Deployment Server Essentials

REGISTER NOW!Every day the list of sources Admins are responsible for gets bigger and bigger, often making the ...

Remediate Threats Faster and Simplify Investigations With Splunk Enterprise Security ...

REGISTER NOW!Join us for a Tech Talk around our latest release of Splunk Enterprise Security 7.2! We’ll walk ...

Introduction to Splunk AI

WATCH NOWHow are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. ...