Product News & Announcements
All the latest news and announcements about Splunk products. Subscribe and never miss an update!

New Content Packs for Synthetic Monitoring and Third-Party APM - Splunk App for Content Packs 1.3 Release

Splunk Employee
Splunk Employee

Hey, all you cool cats and Splunk community! 

Did you know the best things come in content packs? What's a "content pack" you ask? Only the most amazing thing to make your job easier and help you get started with Splunk for IT use cases. Formal definitions:

Splunk App for Content Packs noun 1. An app that acts as a one-stop-shop for all content packs 2. Prepackaged contents offer out-of-the-box searches and dashboards for common IT infrastructure sources 3. FREE app on Splunkbase for ITSI and IT Essentials Work users

Content Pack noun 1. Individual packs that come with prepackaged content and out-of-the-box searches and dashboards for a specific use case. (e.g. Content Pack for Microsoft 365) 2. Helps streamline workflows and ensures you maximize and optimize usage of ITSI and IT Essentials Work 3. No Search Process Language (SPL) required


Content Packs require IT Service Intelligence (ITSI) or IT Essentials Work (ITE Work) 4.9 or later, and Splunk Add-ons for specific Content Packs. Access to capabilities is dependent on whether you have ITE Work or ITSI - refer to the table below.

Objects ITE Work   ITSI  
Entity types x x
Entity integrations (data sources) x x
Infrastructure Overview dashboards x x
Entity Analytics dashboard x x
Metrics to Log Correlation (Analytics Workspace) x x
IT Services   x
Service Analyzer Dependency Maps   x
Glass Tables   x
KPI base searches   x
Correlation searches and Notable Event Aggregation Policies   x


Content Pack for Synthetic Monitoring The new Content Pack for Synthetic Monitoring makes it easy for you to visualize and investigate synthetic data from the Splunk Synthetic Monitoring Add-on. With pre-built dashboards and common KPIs available, you can better manage the performance of your web applications by identifying and viewing Synthetic Checks. 

Content Pack for Third-Party APM If your organization uses various tools to manage different applications, or if you’re in the process of migrating from one vendor to another, then the Content Pack for Third-Party APM is for you. By bringing your APM data into Splunk ITSI or ITE Work, you can better manage the performance of all your applications alongside the rest of your environment. This means greater visibility and a better understanding of what is going on across your teams. This content pack comes with pre-built dashboards for specific APM vendors, Glass Tables for ITSI, KPIs, and services. Note that you will need the Splunk Add-on for AppDynamics, Dynatrace, or New Relic to get that data in.

Want to get caught up on what content packs is all about? Check out these resources:

Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...