May 2022 | Highlights
Introducing the new Observability Suite home page
The new Observability home page will give users easy access to the content that matters most to the user. See recents, favorites and content the user created all in one place. First time users will get additional assistance in seeing tutorial content as well as videos describing the suite.
Splunk Observability will now support bursting for metrics time series creation to support spiky workload pattern
Splunk O11y will now allow bursting for metric time series creation (MTS) to better support bursty or spiky patterns in MTS creation traffic. Customers with the default MTS creations per minute limit (MTSMLimit, currently 6000) can now burst up to 10 times (60,000) in each minute. Note that each customer gets to use up to a maximum of 20 minutes worth of burst capacity in an hour, after which the default MTSM limit is enforced.
This allows customers previously limited to creating MTS @ 6000/min to do any of the following:
- Create MTS @ 60,000/min for consecutive/non-consecutive 20 minutes and then @ 6,000/min for the remaining 40 mins in the hour.
- Spread the burst capacity utilization over the entire hour by creating MTS at the rate less than or equal to 24,000/min.
If the customer has already established a higher MTSMLimit (> 6000), their MTS creations can burst up to 2X MTSMLimit or 60,000 whichever is higher.
Burst capacity is available only when our multi-tenant deployment is able to handle it. Therefore, it is not guaranteed, but applied on a best effort basis. This feature has been rolled out about a month ago and we have seen burst capacity being available 100% of the time. Our system monitoring will alert us when burst capacity becomes unavailable for more than an ideal amount of time.
If you constantly need to have a higher MTSM Limit, please work with your account teams to get your default limit (6000) raised to a higher number. Additionally bursting functionality does not change the ability to control MTS creations based on tokens, when you set an MTS creation limit for a token, creations from that token will be throttled when the limit is hit. Furthermore, you cannot define bursting limits per token, bursting functionality is controlled only at organizational level.
Infrastructure Monitoring
Throttling and System Limits Dashboard
Three new dashboards have been added to the Organization Overview Dashboard Group. With the Throttling, System Limits, and Entitlements dashboards, administrators can identify if any users in their organization are being throttled or limited. These dashboards are for troubleshooting purposes only. For accounting purposes, please see you billing and usage page and report. The new dashboards can be accessed by going to Settings, then Organization Overview.
Splunk Observability Cloud now removes the configuration dependency for viewing dependent services of an infrastructure entity
On December 7th 2021, a new right navigation experience was added to the navigators in the Infrastructure page of Splunk Observability Cloud. This allows you to see all of the services such as Kafka that are running on a collection of hosts such as AWS EC2, Azure Virtual Machines, GCP Compute Instances, or on-premise hosts and navigate i.e. pivot to the interested service instance, such as Kafka, with the click of a button. Now, you no longer have to configure the service.name value in the configuration file to see these service dependencies in the navigator sidebar. More detailed documentation is available here.
Synthetic Monitoring
Support for New Network Authentication Protocols, and more, in Splunk Synthetic Monitoring
Splunk Synthetic Monitoring recently launched support for a range of new network authentication protocols including NTLM, Kerberos, and Digest. This functionality helps Splunk Synthetic Monitoring users who want to test their user experience on internal networks gated by any of these protocols. Adoption of more stringent security protocols on local networks is on the rise as enterprises around the world are fending off more cyber attacks than ever before. For more information on how to leverage this functionality please visit our help docs.
Also, we’ve released an API endpoint that enables you to programmatically rotate your Synthetic Global Variables to reduce manual maintenance in your Synthetic tests, while maintaining highly secure customer data. Documentation about this new endpoint can be found here.
Can't Miss Updates
All the latest events, news and announcements
- Tech Talk: Splunk Observability Use Case Explorer
- Embracing a Hybrid and Multi-cloud World with Splunk Enterprise
Digital Happenings
.conf22
Ready. Set. Innovate.
- How will you attend — in Las Vegas or virtually? Event Pass Details
- Start planning your personalized .conf22 journey. View Session Catalog
- Want to learn in a live, hands-on setting? Attend Splunk University
- Check out what’s happening. View Agenda
Global User Group Week Recap!
The second annual Global Splunk User Group week was another success! With 25 events and more than 200 attendees, Splunk Users all around the world gathered April 4-8 to connect, collaborate, and learn all things Splunk! For many User Groups, this was their first time meeting in-person in over 2 years. Thank you to all who participated! To join your local Splunk User Group, visit usergroups.splunk.com.
It's here - a whole new way to navigate Splunk Lantern!
If you're new to Lantern and don't know what our site is all about, there's no better place to start than the About page. If you're one of the thousands of customers Lantern has helped in the past, head straight on over to our new homepage and explore how easy we've made it to help you find the use case and product guidance you need to put your data to work.
- Are you a new Splunk customer? Select Getting Started on the homepage to find sequenced learning paths to help you onboard Platform, Security, and Observability products.
- Have you passed the onboarding phase and are now searching for actionable tips written by Splunk experts to help you work with your data faster and better? Select a Product Tips link instead.
- Already know what you want to do in your Splunk environment? Use the Select a Use Case drop-down menus for Security and Observability to find step-by-step guidance fast. And if what you click doesn't get you where you wanted to go, open up the left navigation to get an easy look at all the available use cases.
- Ready to find new use cases? The Data Application section connects the most common data types and data sources to guidance on how you can use that data in Splunk today.
- Simply curious what else is possible in Splunk? Review the high-value, Featured Articles on the top of the homepage or scroll to the bottom for a list of New Articles, updated in real time.
As always, be sure to tell us what you think by logging into Lantern with your splunk.com account and sharing your thoughts in the feedback section at the bottom of every article.
Go to school — for Splunk
Join us for Splunk University at the MGM Grand the weekend before .conf22 on June 11-13. View the course offerings here. Splunk Certification will be live in Las Vegas! For information on how to register for an on-site testing center appointment, view the .conf22 Exam Registration Tutorial here (hint: it’s a different process than the normal PearsonVUE exam registration!). Virtual .conf22 participants can also join the party with the discount code SEEYOUINVEGAS for a single discounted exam registration (standard registration process applies).
More updates in the Splunkbase Preview:
Try the new search which has improved autocomplete that is more intuitive. Take a look, give it a try, and share your thoughts with us by clicking the Feedback button on the upper right corner of the page.
New apps and recent updates:
Splunk Add-on for Amazon Web Services (AWS)
Splunk Add-on for Unix and Linux
Splunk Add-on for Oracle Database
Get guidance at every step of your data journey with Customer Success
We can help you maximize your Splunk investment. Ready to get started? Learn more
