Highlights
APM
Splunk Observability Cloud Now Supports Encryption at Rest
Encrypting data at rest is vital for regulatory compliance to ensure that sensitive data saved on persistent storage volumes (Amazon EBS, Amazon S3, etc.) is not readable by any user or application without a valid encryption key. Some compliance regulations such as HIPAA requires that the data at rest be encrypted throughout the data lifecycle.
To this end, Splunk Observability Cloud supports data encryption at rest using Advanced Encryption Standard (AES) 256-bit encryption. All the new as well as existing data (with the exception of existing metrics data) that is saved into persistent storage is encrypted by default at no additional cost for all the products within Splunk Observability Cloud.
Splunk Log Observer
Observability Cloud and Splunk Enterprise Integration via Log Observer Connect
Log Observer Connect is available now! Existing Splunk Enterprise customers with Splunk Infrastructure Monitoring, Splunk APM, or Splunk Observability Cloud licenses can start using Log Observer Connect immediately for free.
Splunk Log Observer Connect, previewed at .conf is a new feature that lets observability users explore the data already being sent to existing Splunk instances with Splunk Log Observer’s intuitive no-code interface for faster troubleshooting and root-cause analysis. Since Log Observer is part of Splunk Observability Cloud this integration brings metrics, traces, events and all your log data, in context, in one UI so SREs and developers can troubleshoot mission critical applications quickly.
RUM
Error Monitoring
Splunk RUM users can now identify top javascript errors across their apps aggregated by stack trace and count. Two brand new panels on the overview page highlight top javascript errors, their count, trend, and details like error type, error message, and stack trace. With front-end error monitoring, Splunk RUM makes it easier to prioritize the errors that impact your end-user experience most frequently. Refer to the docs for more details!
Alerts & Dashboarding
Splunk RUM alerts and custom dashboards are now available! Users can set up aggregated alerts for various RUM metrics like latency, errors, web vitals, etc. RUM alerts integrate with several products like Slack, Pagerduty, ServiceNow, JIRA, etc. which allow users to send alerts to their desired channels. In addition to that, users can also create custom dashboards to visualize their RUM data. With custom dashboards, users can view trends across their errors/latency and track key metrics like SLAs, SLOs, etc.
Token Visibility Restrictions
Token visibility restriction feature is soon to be introduced in the Splunk Observability suite. This change makes the user interaction with the product more secure and allows full control of who will see which tokens.
Customers should expect following changes as a result of these restrictions:
- Admin visibility to tokens - No change
- Members visibility to tokens:
- Admin will be able to assign token read permissions to individual members or teams. There is a limit of 50 users/teams assigned to a token
- When a member tries to view or search a token, they will only see tokens they have permissions to
- APIs - Same actions including setting up token permissions can be performed using APIs. Note: Admin session token will continue to be required to manage tokens using the APIs, which is an existing functionality.
