Tech Talk: DevOps Edition Instrumenting Your Microservices Based JavaScript Application From Start to End Watch Now In this Splunk Tech Talk, DevOps Edition, we will use a basic NodeJS microservices based application deployment to learn how to instrument Javascript using the Splunk Distribution of OpenTelemetry JS. We will take a deep dive into the basic code changes and steps required to begin collecting telemetry and understand our customer’s experience. Tune in to learn how to: Instrument your NodeJS application programmatically with the Splunk Distribution of OpenTelemetry for JavaScript within a microservices based deployment Deploy the Splunk Distribution of the OpenTelemetry Collector to capture critical infrastructure and application telemetry Configure browser instrumentation with Splunk Real User Monitoring and gain insight into the performance and health of the front-end user experience to best understand your customer’s experience ... View more

Tech Talk: Security Edition What’s New with Enterprise Security 7.0? Watch Now Explore what is in the newest release of Splunk Enterprise Security and hear from Enterprise Security Product Management leadership about what’s next. Tune in to learn about: A quick recap in the updates to version 6.6 All the new features in 7.0 as well as a demo of the awesome new user experience How to learn more about Splunk Enterprise Security ... View more

Watch Now Crawl, Walk, Run: Getting Started with AIOps Replay the Tech Talk  and we'll walk through what it takes to build a world-class IT Operations Management infrastructure with Splunk. From simple alerting to sophisticated event management, deep service insights, predictive analytics, and on-call management. ... View more

Watch Now Empowering Business Users with Pre-structured Data Learn how to structure your data and configure Splunk to enable these analytic tools and see an overview of how to use pivot tables and other no-code features. Watch the Tech Talk to learn about: Indexing and Enriching data with known sourcetypes and lookups, so that all business information is easily searchable for your users Building data models to structure your Splunk data, to enable pivot tables for your business users Exploring, analyzing, and pivoting your Splunk data with no-code features ... View more

Platform  You can now try out the Splunk Enterprise Beta and catch up on all the latest news on how to Simplify Cloud Data Onboarding with the New Data Manager. For insight into all of the exciting new releases, you'll also want to view the Connected Experiences Blog Series, published weekly! More Platform Highlights >    Security  We are thrilled to announce the latest release of Enterprise Security 7.0 is now available for Splunk Cloud and On-Premises customers.  This release is packed with new enhancements to provide security teams the critical insights you need to drive faster detection and response.  More Security Highlights >    Observability  You may already be using observability tools, or are considering the best way to adopt them. Did you know that Splunk Observability Cloud now supports Encryption at Rest? Learn more and read up on Observability Cloud, Splunk Enterprise integration via Log Observer Connect and RUM. We are excited to share that the Token visibility restriction feature is soon to be introduced in the Splunk Observability suite.  More Observability Highlights >    Can't Miss Updates   Splunk Love Love Splunk? Share Your Success and Snag Cool Perks! We want to help tell your stories and give your successes some well-deserved limelight and recognition. Show Some Love     Product Updates   All the latest news and announcements about Splunk products. Love all of the latest product updates? Don't forget to subscribe while you're here on Community and never miss an update! Splunk Enterprise Security 7.0 is Here! Log Observer Connect Now GA! All SOAR Apps are Open Source! Splunk App for AWS:  Extending the End of Life (EOL) and End of Support (EOS) Date to July 15, 2022     Do More with Splunk Lantern Did you know that Splunk Lantern published 165 new use case and best practice articles in the final quarter of 2021? If you haven't visited lately, check it out. These articles span a variety of security, IT, and observability topics, as well as more than ten different Splunk products to help you achieve key business outcomes. Not only that, you can now sign in to Splunk Lantern using your Splunk account and leave feedback on any article. Use the sign-in option on the home page, then scroll to the bottom of any article and tell us what you think!   More Ways You Can Get Involved with the Splunk Community We are happy to announce that the Call for Papers (CFP) is now open for the BSides Splunk 2022 Conference! Read the blog post for details about past talks and how to add your submission to this highly technical community conference that is open to everyone. Submit your talk today about how you are using Splunk! (The CFP closes on January 19, 2022).  Details are right here on the Community Blog >   Digital Happenings   Splunk Tech Talks Calling all SplunkUsers! Don’t miss our upcoming Tech Talk Series on January 25 featuring Platform, IT, Security and DevOps Editions. This is an excellent opportunity to expand your knowledge of Splunk capabilities through practitioner-based overviews and live demos.   Sign Up Here   Grey's Academy Splunk’s Technical Marketing Manager, Grey Dziuba hosts fun and informative monthly sessions on Thursday’s at 12 pm PT / 3 pm ET. Grey’s Academy also streams on Twitch, YouTube and LinkedIn!   Watch Now     SplunkBase Apps   Did you know there are multiple ways you can be informed of the latest new and updated apps in Splunkbase? In the new Splunkbase preview you can go to the Apps page and sort by New. The newest and most recently updated apps will appear at the top. Plus you can apply filters to the result set to further refine the results. If you are a member of the Splunk user community slack you can follow the #announcements channel where new apps and updates are announced. Plus you can subscribe to update notifications for any app you like. You’ll get an email when a new app version is released. Finally a few cool app updates: The Microsoft Azure App for Splunk was updated this month with four new dashboards built with Dashboard Studio, presenting an Executive Overview, a Security Overview, Azure Service Health, and Billing Overview Do you have data that has a location component, either static or moving over time? Use the updated Location Tracker Custom Visualization to display resource location and movement on a map.   Until Next Month, Happy Splunking!   ... View more

Back to Splunk Newsletter Highlights Try out the Splunk Enterprise Beta Sign up for the Splunk Enterprise Beta and try out our newest capabilities including Ingest Actions: Easily redact, filter and route data on events before they are ingested SmartStore for Microsoft Azure: Decrease infrastructure cost with this additional remote cloud storage option Configuration Change Tracking: Optimize your auditing and troubleshooting efficiency   Simplify Cloud Data Onboarding with the New Data Manager  Watch our recent Tech Talk to learn about Data Manager, a new Splunk Cloud Platform feature to simplify getting your data into Splunk, that is available now in Preview for customers on AWS with Victoria Experience. Check out our weekly Connected Experiences blog series Following the many Connected Experiences announcements at .conf21, we are publishing blogs each week diving into all of the exciting new releases. Watch Now! On Demand Tech Talk Platform Edition Empowering Business Users with Pre-structured Data.   Watch Now Back to Splunk Newsletter ... View more

Back to Splunk Newsletter   Highlights New! Splunk Enterprise Security 7.0 We are thrilled to announce the latest release of Enterprise Security 7.0 is now available for Splunk Cloud and On-Premises customers. This release is packed with new enhancements to provide security teams the critical insights you need to drive faster detection and response.     Executive Summary Dashboard The new Executive Summary Dashboard surfaces key performance indicators that provide insights on the overall health of the SOC such as: Mean Time to Triage Mean Time to Resolution Investigations Created Risk Based Alerting Trends Cloud Security Monitoring Dashboards Enterprise Security 7.0 adds to the 6.6 Cloud Security Monitoring updates and gives you enhanced visibility into AWS environments and Microsoft 365 Cloud Security datasets. New dashboards include AWS Security Groups, AWS IAM Activity, AWS Network ACLs, AWS Access Analyzer, and Microsoft 365 Security. Security Operations Dashboard Similar to the Executive Summary Dashboard, the Security Operations Dashboard shares key insights but provides deeper analysis capabilities designed for SOC managers and team leads.      Automated Real-Time Content Updates As new security content becomes available in the Enterprise Security Content Update (ESCU) app, Enterprise Security will proactively notify you so that you always have the latest threat detection techniques from the Splunk Threat Research Team.  Modernized User Experience Enterprise Security has undergone a large change to the user experience, bringing it in line with other Splunk security products, adopting modern development frameworks and best practices. Also, Splunk Enterprise Security UI now allows you to switch between light and dark modes (Cloud Only), so you can choose what works best for you. Read our blog to learn more and upgrade to the latest release of Splunk Enterprise Security 7.0 . We also would like to invite you to attend the Splunk Security Analytics Virtual Event on January 20th at 9:00 AM PT to see all the latest and greatest from Splunk for Security! Let us know what you think of the new and enhanced capabilities of Splunk Enterprise Security 7.0 by joining a conversation or starting a new one while you're here on   Splunk Community . Upcoming Tech Talk What’s New with Enterprise Security 7.0? 1/25/2022 | 11:00 AM PT / 2:00 PM ET Register to attend   and learn about all the latest in Security Analytics innovation coming in the newest release of Splunk Enterprise Security.   Back to Splunk Newsletter   ... View more

Back to Splunk Newsletter Highlights   APM Splunk Observability Cloud Now Supports Encryption at Rest Encrypting data at rest is vital for regulatory compliance to ensure that sensitive data saved on persistent storage volumes ( Amazon EBS , Amazon S3 , etc.) is not readable by any user or application without a valid encryption key. Some compliance regulations such as HIPAA requires that the data at rest be encrypted throughout the data lifecycle. To this end, Splunk Observability Cloud supports data encryption at rest using Advanced Encryption Standard (AES) 256-bit encryption. All the new as well as existing data (with the exception of existing metrics data) that is saved into persistent storage is encrypted by default at no additional cost for all the products within Splunk Observability Cloud.   Splunk Log Observer Observability Cloud and Splunk Enterprise Integration via Log Observer Connect Log Observer Connect is available now! Existing Splunk Enterprise customers with Splunk Infrastructure Monitoring, Splunk APM, or Splunk Observability Cloud licenses can start using Log Observer Connect immediately for free.       Splunk Log Observer Connect , previewed at .conf is a new feature that lets observability users explore the data already being sent to existing Splunk instances with Splunk Log Observer’s intuitive no-code interface for faster troubleshooting and root-cause analysis. Since Log Observer is part of Splunk Observability Cloud this integration brings metrics, traces, events and all your log data, in context, in one UI so SREs and developers can troubleshoot mission critical applications quickly.   RUM Error Monitoring Splunk RUM users can now identify top javascript errors across their apps aggregated by stack trace and count. Two brand new panels on the overview page highlight top javascript errors, their count, trend, and details like error type, error message, and stack trace. With front-end error monitoring, Splunk RUM makes it easier to prioritize the errors that impact your end-user experience most frequently. Refer to the docs for more details!   Alerts & Dashboarding Splunk RUM alerts and custom dashboards are now available! Users can set up aggregated alerts for various RUM metrics like latency, errors, web vitals, etc. RUM alerts integrate with several products like Slack, Pagerduty, ServiceNow, JIRA, etc. which allow users to send alerts to their desired channels. In addition to that, users  can also create custom dashboards to visualize their RUM data. With custom dashboards, users can view trends across their errors/latency and track key metrics like SLAs, SLOs, etc.    Token Visibility Restrictions  Token visibility restriction feature is soon to be introduced in the Splunk Observability suite. This change makes the user interaction with the product more secure and allows full control of who will see which tokens. Customers should expect following changes as a result of these restrictions: Admin visibility to tokens   - No change  Members visibility to tokens : Admin will be able to assign token read permissions to individual members or teams. There is a limit of 50 users/teams assigned to a token  When a member tries to view or search a token, they will only see tokens they have permissions to APIs - Same actions including setting up token permissions can be performed using APIs. Note: Admin session token will continue to be required to manage tokens using the APIs, which is an existing functionality. Back to Splunk Newsletter   ... View more

  Splunk Platform Highlights Check Out Our Weekly Connected Experiences Blog Series Following the many Connected Experiences announcements at .conf21, we are   publishing blogs   each week diving into all of the exciting new releases. Try Out the Splunk Enterprise Beta Sign up   for the Splunk Enterprise Beta and try out our newest capabilities including: Ingest Actions: Easily redact, filter and route data on events before they are ingested SmartStore for Microsoft Azure: Decrease infrastructure cost with this additional remote cloud storage option Configuration Change Tracking: Optimize your auditing and troubleshooting efficiency Meet the New Data Manager (Preview) Learn   about Data Manager, a new Splunk Cloud Platform feature to simplify getting your data into Splunk, that is available now in Preview for customers on AWS with Victoria Experience. Splunk Observability Highlights Left Navigation Changes To provide better navigation throughout the product, a new left navigation experience will be added to the product. Instead of being hidden, a thin navigation bar will persist on the left side of the screen. No menu items will be moved so it should still feel familiar to you. Data Setup Page Update The new Data Setup page provides a more intuitive experience for customers on their integration journey with Splunk Observability Cloud. Filters provide a way for users to focus on only the integrations that impact their integration and a condensed table view provides a visually faster way to find specific integrations. Better Onboarding Experience The new Data Setup page provides a more intuitive experience for customers on their integration journey with Splunk Observability Cloud. Filters provide a way for users to focus on only the integrations that impact their integration and a condensed table view provides a visually faster way to find specific integrations. APM AlwaysOn Profiling AlwaysOn Profiling is now GA! AlwaysOn Profiling continuously analyzes your code level performance to identify service bottlenecks in your production environment, with minimal overhead.The feature is available today for Java applications, with more coming soon. For more information, please use the following links: View the walkthrough Read the blogpost View the .conf introductory session View the docs Infrastructure Monitoring Pivot Sidebar Splunk Observability Cloud now supports viewing dependent services of an infrastructure entity. Starting from December 7th 2021, a new right navigation experience has been added to the entity navigators in the Infrastructure page of Splunk Observability Cloud. This allows you to see all of the services such as Kafka or MySQL that are running on a collection of hosts such as AWS EC2, Azure Virtual Machines, GCP Compute Instances, or on-premise hosts. Further, you can debug issues faster by navigating i.e. pivoting to the interested service instance, such as Kafka, or Cassandra, with the click of a button. No menu items will be moved so it should still feel familiar to you. More detailed documentation is  available here . Education Corner Certification Update In alignment with recent product changes, Splunk Certification has renamed the Splunk Phantom Certified Admin track. Candidates and badge-holders will now see Splunk SOAR Certified Automation Developer in their exam authorization and digital badge records. No action is required by existing cert-holders. Any questions regarding this change can be directed to  certification@splunk.com . Education Launch Splunk Education Launches  Authorized Learning Partner (ALP) Program!  Our mission is to build a community of Learning Partners who will expand our reach and scale globally to support Splunk adoption through education - for Customers, Partners and Splunkers alike. ALPs bring a value-add of localization, language and cultural skills to bring Splunk education to more markets than ever before. Whether you are looking for multi- or single-topic training courses, in-person or virtual training, ALPs will deliver. Click  here  for more information or contact  partner+@splunk.com  for more details. Looking for Splunk Training + Certification resources? All things Splunk Certification are here » Splunk Certification Handbook And ICYMI: The newest comprehensive resource is here » Splunk Education Student Handbook More Ways You Can Get Involved with the Splunk Community The Splunk community has been super-active and we've captured some data from November that we thought you might find interesting and motivating to  check out . Some highlights from Splunk Answers are # of folks who authored accepted solutions, those who started brand new conversation threads, people replying for the very first time, and karma love that y'all have been giving to one another. Our blogs have been getting lots of eyeballs, too, and we are ever so appreciative of your engagement with the Community Blog, Tech Talks, and the Product News & Announcements blog. See the data for yourself - check out the blog post showcasing these awesome activities! Just from November, we've got numbers to share that show how much love the Community gets - and gives. » Read More Digital Happenings Grey’s Academy Splunk’s Technical Marketing Manager, Grey, Dziuba hosts fun and informative monthly sessions on Thursday’s at 12 pm PT/ 3 pm ET: 101: Fundamentals for beginners | First Thursday 201: Deep dives for intermediates | Second Thursday 301: Unique use cases for experts | Third Thursday In case you missed it, Grey’s Academy streams on Twitch, YouTube and LinkedIn!   » Watch Now Tech Talks Now Available On Demand IT Edition   -   Using Custom Entity Types in Splunk IT Essentials Work  » Watch Now DevOps Edition - Tips for a Successful OpenTelemetry Deployment  » Watch Now You'll also find insightful and valuable deep-dives for any technical practitioner   right here   on Splunk Community. SplunkBase App Did you see the  Featured Collections  in the new  Splunkbase Preview ? There you will find collections for  Staff Picks ,  Pipeline Analytics for DevOps ,  XDR , and  Accenture Cloud Services . Take a look at these and come back often to find new curated collections of helpful solutions. The Splunk App for Stream  is a popular wire data app with associated add-ons designed to capture packets, dynamically detect applications, parse protocols, and send metadata back to your Splunk environment for over 30 protocols and 300 commercial applications. Splunk App for AWS End of Life/End of Support date has been extended to July 15, 2022 (previously set for January 5, 2022). For more details, check out this  community post . ... View more

WATCH Security Edition Splunk Intelligence Management for Splunk SOAR Analysts and security engineers are burdened with an onslaught of security alerts, disparate threat intelligence data formats, and too much repetitive, manual review of indicator enrichment. While Splunk SOAR playbooks automate security actions, they become even more powerful and easy to use with the addition of Splunk Intelligence Management (formerly TruSTAR). Tune in to this Tech Talk to learn how to: Obtain prepared and normalized intelligence from internal and external sources for faster triage and more streamlined playbooks. Automate based on IOC enrichment from Splunk Intelligence Management. ... View more

WATCH NOW IT Edition Finding Signal in the Noise Quickly with the Splunk Content Pack for ITSI Monitoring and Alerting IT Edition Imagine wrangling all your alerts, from all those monitoring systems that hate each other, into IT Service Intelligence (ITSI), and seeing truly useful stuff -- quickly and easily, with little or no ITSI configuration needed. And yes, it includes business service context, seamless correlation with your existing KPIs, alarm state deduplication, raw alert backfill, real noise reduction, as well as intelligent actioning and alerting when it's time to do something. Watch this IT Tech talk to hear from one of Splunk's Principal IT Strategists as they demonstrate Universal Alerting and other cool capabilities in the new and improved ITSI Content Pack for Monitoring and Alerting (v2.0). See how ITSI can really transform and bring sanity to your alert and incident management. ... View more

WATCH NOW DevOps Edition Connect your Splunk Enterprise Logs with Observability Data for Faster Troubleshooting and Cross Team Collaboration Finally, leverage the power of Splunk Enterprise data in Splunk Observability Cloud with Log Observer Connect! Log Observer Connect is a new feature that lets observability users explore the data you’re already sending to your existing Splunk instances with Splunk Log Observer’s intuitive no-code interface for faster troubleshooting and root-cause analysis. Since Log Observer is part of Splunk Observability Cloud this integration brings metrics, traces, and all your log data, in context, in one UI so SREs and developers can troubleshoot mission critical applications quickly. Bonus, if you happen to be an existing Splunk Enterprise customer who has Splunk Infrastructure Monitoring, Splunk APM, or Splunk Observability Cloud licenses, you automatically get Log Observer Connect at no extra cost. Watch and  learn how to get started right away with Log Observer Connect: Set-up roles and permissions in Splunk Enterprise Configure access in Observability Cloud Deep dive into Splunk Enterprise data using intuitive filtering options and save interesting filters as a saved query Finally, find related content from Splunk Enterprise in other Splunk Observability Cloud products such as Splunk Infrastructure Monitoring and Splunk APM that helps developers and SREs with faster root cause analysis!! ... View more

WATCH NOW Platform Edition Simplify Cloud Data Onboarding with the NEW Data Manager We understand that getting data into Splunk Cloud can be cumbersome and repetitive. This is why we are excited to introduce Data Manager - Now in preview! Data Manager is a new modernized, simplified, and automated experience for onboarding cloud-native data sources such as AWS. Tune in to learn about: Why we built this feature and the challenges it addresses The cloud data sources we support now and will support in the future See it in action with a live demo ... View more