What's New in Splunk Observability - July 2025

[wcooper]

What’s New? 

We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is currently in preview for the Splunk Observability portfolio.  These new innovations to Splunk Observability Cloud are designed to help ITOps and engineering teams better standardize observability practices across teams and optimize their observability costs. The below features, with the exception of the Q-Release (scheduled to go live as part of the Splunk Cloud Platform launch on July 28, 2025), are now generally available to customers as of July 22, 2025. 

Feature Highlights  

Q-Release 

Splunk Observability Cloud’s Related Content provides users of Splunk Platform (Splunk Enterprise & Splunk Cloud) the ability to preview infrastructure and application data from Splunk Observability Cloud with Splunk Platform logs directly in the Search and Reporting interface. Splunk Platform users can access Splunk Observability Cloud monitoring metrics in Splunk Dashboard Studio and leverage Splunk’s real-time metrics store to build powerful charts alongside SPL dashboards.  With this latest quality release (Q-Release), we have added a new action button for Observability charts in Related Content to make it easier to access Observability Cloud detectors right from the Splunk Platform interface. Related Content also now automatically flags events in Splunk Platform which may contain Related Content without requiring users to expand an event in the Search and Reporting page. We have also introduced a new side panel in the Splunk Search & Reporting interface to preview Observability Related Content more easily.  Formal technical documentation for this feature will be available on July 28, 2025 upon the latest Splunk Cloud Platform release. 

Automated Archiving for Unused Metrics 

We have been on the mission to provide our customers with robust usage & cost optimization solutions to combat concerns of growing observability costs. We are pleased to now introduce automated archival in Splunk Observability Cloud.  Automated archiving automatically routes and stores unused metric data in a low-cost archival tier.  This tier is approximately ten percent of the cost of the real-time tier and provides Splunk Observability Cloud customers with a solid low-cost option for long term storage of less valuable metrics. Learn More.  

Improved GDI Onboarding Experience  

We added an Overview tab to Observability Cloud’s Data Management Platform, which provides customers better guidance through UI-based workflows to more easily onboard data into the platform and provides reflections on what they have achieved to track progress. This provides visual references and structured assistance, which is particularly helpful for those who are new to Observability Cloud.

Homepage Enhancements 

As of this July release, we are rolling out more relevant and actionable content on the Splunk Observability Cloud Homepage.  This new content provides users the ability to get to areas of interest faster or jump back to where they were (Recent Dashboards, Favorite Dashboards, Product Updates/Release) quicker than ever before. This new Homepage experience will be the new launch pad to quickly get to other interfaces within Splunk Observability Cloud.  For example, we are now providing customers with alert trend history, so you can better understand the overall health of your environment and determine where to go next.  This will be a multi-phase rollout; phase 1 here is focusing on Alert Duration views.  Phase 2 will continue to focus on providing more visibility on the overall health of the environment with health indicators, etc.  

Option of Setting Default Connection for Unified Identify Customers 

This new feature provides Splunk Cloud SSO (IDP) administrators the ability to set either a Unified Identity (UID) or Service Account (SA) connect as the default connection used by Log Observer, Homepage, and Dashboards – simplifying the set up and improving consistency across users.  Learn more.  

Regional Expansion: Observability Cloud AI Assistant  

We are pleased to announce that we are expanding the regional availibility of the Splunk Observability Cloud AI Assisant within eu1, eu2 and jp0.  Learn more.  

What’s in Preview Now  

Splunk Database Monitoring  

Get deep visibility into query performance and execution plans—correlated with app performance via Splunk APM—all in one tool for faster, smarter troubleshooting.  We’re seeking existing Splunk Observability Cloud customers who are using Microsoft SQL Server databases looking to empower application teams to troubleshoot and resolve database and query performance issues; minimizing the extensive back-and-forth between application and database administrators. Interested in joining this preview?  Sign up on this page.  

Splunk Observability Cloud Multi-Org Management - Child Org Automation Preview Program 

Splunk Observability Cloud introduces multi-org management self-service experience with APIs for child org creation enabling role-based data segregation.  Interested in joining this preview?  Sign up on this page. 

Splunk Observability Cloud Left Navigation Improvements 

Get a sneak peek into Splunk Observability Cloud’s improved user interface for an easier and more intuitive experience.  This preview is best for existing Splunk Observability Cloud customers.  Interested in joining this preview? Sign up on this page. 

Catalyst Center & Meraki Content Pack in ITSI  

Content Pack Preview for Enterprise Networking currently including Cisco Catalyst Center & Meraki. Interested in joining this preview? Sign up on this page. 

EventIQ for Automated Alert Grouping for ITSI  

Event iQ helps with automated event correlation to accelerate time-to-value and MTTI through discovery of important fields in alerts and real-time, dynamic grouping based on patterns detected in the alert data. This capability is for customers interested in or using Event Analytics in ITSI today. Sign up on this page.