Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.0.2305! Analysts can benefit from: Easier discoverability of Splunk Observability Cloud with in-product demo requests and educational content to learn how to examine logs in context with metrics and traces  Dashboard Studio improvements  New post-conversion report when a Classic dashboard is converted with the Clone in Dashboard Studio feature that details which objects or options need manual adjustments after automatic conversions Updated code editor that can be expanded while making edits in the UI New ability to configure drilldowns from dashboards to custom searches and reports New ability to configure workflow actions to work with Events Viewer visualizations  Admins can benefit from: Expanded search capabilities with Federated Search for Amazon S3 to get Splunk insights from Amazon S3 buckets without the need for data ingestion (coming soon) Simplified certificate rotation with new REST API endpoint to rotate server certificate without restarting the server Streamlined process for adding certificates with support for OS certificate trust store and certificate management API Python 2 is in the process of deprecation and soon will no longer be available in coming releases. Older jQuery libraries are no longer supported but can be enabled by support for emergency needs, with jQuery 3.5 set as default. Your SaaSy (Splunk-as-a-Servicey) Updater, Judith Silverberg-Rajna, Splunk Cloud Platform ... View more

Analysts can benefit from  Improved homepage experience for faster insights including  Start where you left off with recently viewed knowledge objects Browse a comprehensive list of knowledge objects you have created and have access to Customize the app order or search by name for better app browsing Dark mode support in conjunction with the Search & Reporting app  Increased performance for searches using the lookup command with parallel reduce search processing  Efficient exports with autofill email delivery from the search and reporting app  Continuity across search heads with preserved search history  Dashboard Studio improvements  The ability to export the data results of any visualization into a CSV Events viewer visualization to see event data and interact with field-value pairs  Updated base and chain behavior for improved performance and resource consumption  More dynamic dashboards with conditional panels in absolute layout that show or hide based on data availability Application of choropleth map layers to map visualizations in addition to existing bubble and marker layers  The ability to move inputs into or above the canvas to be closer to the charts they impact Easier editing with UI for configuring axes charts   Admins can benefit from Easier configuration in Ingest Actions with the ability to control S3 output setup Efficient TLS certificate refreshes that do not require restarting some configurations Additional self-serviceability with UI to configure limits.conf  Support for multiple S3 bucket destinations in Ingest Actions Edge Processor improvements to GUI pipeline editor including the ability to use search to get sample data, addition of a dedicated regex modal to aid in extracting fields, and keep and remove as a filter action Greater control to deactivate federated providers, federated indexes, and transparent mode Flexibility to choose to share a search itself instead of sharing the search as a job Granular access controls that can be configured by role with Admin Config Service   Your SaaSy (Splunk-as-a-Servicey) Updates, — Judith Silverberg-Rajna, Splunk Cloud Platform           Python 2 continues to be supported  Older jQuery libraries continue to be supported with jQuery 3.5 set as default   ... View more

Reimagine what you can do with your dashboards. Dashboard Studio is Splunk’s newest dashboard builder to easily create visually-compelling, interactive dashboards with an intuitive UI. With Dashboard Studio’s advanced visualization tools and fully customizable layouts, you can visualize more insights from your data and communicate powerful data stories to any audience.  This challenge is an opportunity to level up your dashboard skills, showcase your visualizations, and win a $100 gift card to the Splunk Store.  We supply the themes and the datasets. You create an impactful, story-telling dashboard in Dashboard Studio. It’s that easy!  This year, we have four dashboard themes: Security, IT, DevOps, and Business Insights. For each theme, 10 winners that meet the submission criteria will be randomly selected to receive a $100 Splunk Store gift card (40 winners total). Dashboard Use Case Examples Security : number of threats detected, threats location, issues reported, MTTR, issue urgency rating, and more.  DevOps : response time by app, errors by app, errors by host, service health location and more.  IT : server downtime, reported device issues, network issues, and more.  Business Insights : products sold, customer purchases by location, revenue, purchased product type, customer satisfaction score, employee happiness score, and more.  How to Enter the Challenge Register here to download the four datasets. Get a free trial of Splunk Cloud Platform (encouraged for access to the newest features). You can also download Splunk Enterprise or use your own Splunk environment.  Upload your dataset(s) and start designing! When you’re ready to submit, upload your dashboard to the final submission form and agree to legal acknowledgements by May 12th.  All submissions that meet the criteria will be entered into the $100 gift card raffle (Note: only US customers are eligible to win). Submission Criteria You can submit a maximum of ONE dashboard per theme Your dashboard must have at least 3 panels Your dashboard must have at least 1 search-based visualization Splunk’s Dashboard Picks: The Best of the Best! The cream of the crop will have the opportunity to be featured as examples in a “Splunk’s Dashboard Picks” blog, customer resources, and even our in-product Examples Hub to help inspire other members of the Splunk community! Tips to be Featured Tell a data story with your dashboard - take advantage of Studio’s visualization tools Make the dashboard accessible to any audience by using images and icons, descriptive labels, and logical formats Use our resource toolkit for a plethora of best practices and tips! Register here to enter the challenge and to get tips and tricks, expert advice, handy content, and submission timeline updates. You can check out our plethora of resources below, join our slack channel for discussion, and sign up for our office hours!! Getting Started  Community Office Hours: Dashboard Studio Challenge  Dashboard Studio Tutorial and demo Dashboard Studio Introduction Tech Talk Splunk Dashboard Studio Documentation Introduction to Dashboards e-learning Course Examples Hub - Find the in-product Examples Hub from the Dashboards page in Search & Reporting Questions or Suggestions?   User Slack Channel - #dashboard-studio (request access here) Splunk Ideas - Dashboard Studio for feature or enhancement Requests Splunk Community - Dashboards & Visualizations for questions Ramping Up Communicating Data Stories to Any Audience: Top 5 Dashboard Design Best Practices Guide Dynamic Dashboards e-learning Course Improving Dashboard Performance and Resource Usage Tech Talk Streamlined Dashboard Building: Productivity Tips and Tricks Tech Talk Level Up Your Dashboards with Interactivity .conf session Blogs Dashboard Design: Getting Started with Best Practices  Dashboard Design: Visualizations and Configurations  How We Built It: Getting Spooky with Splunk Dashboards ... View more

Hi folks! We are happy to share the newest updates in Splunk Cloud Platform 9.0.2209! Analysts can benefit from  Faster troubleshooting with Job Inspector in Dashboard Studio to examine search jobs powering visualizations  Enhanced drill-down capabilities in Dashboard Studio with the ability to pass static tokens between dashboards and list all tokens on the target dashboard Streamlined viewing of Dashboard Studio and Classic dashboards on Splunk Mobile with a scannable QR code for each dashboard that automatically registers users and displays the dashboard on their mobile device Admins can benefit from Easier configuration with a user interface to directly set specific Limits.conf stanzas Improved security management with the ability to limit which domains can import images on their dashboards with the Dashboards Trusted Domains List For more details 🔎, take a look at the cloud platform release notes. Your SaaSy (Splunk-as-a-Servicey) Updates, — Judith Silverberg-Rajna, Splunk Cloud Platform ... View more

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit from:  The option to set default preferences to dark mode or light mode in Search and Reporting  Notifications to acknowledge when being redirected to a link outside of Splunk  Self-service access to enable Splunk Mobile on a Splunk instance using Splunk Secure Gateway Support for Trellis & Maps in reports on Splunk Mobile and Splunk AR Admins can benefit from: Improved security from jQuery 3.5 set as default with older jQuery libraries restricted (action may be required to update dashboard and apps) Support for Google Cloud Platform data sources in Data Manager (for customers on AWS) Additional checks and fixes for minor bugs with the Upgrade Readiness App  User warnings when external content is used in Classic (Simple XML) dashboards that is not on the environment’s Dashboards Trusted Domain List  The ability to configure granular write permissions on KV Store collections for various users and roles Support for wildcard search and input lookup in Standard Mode Federated Search Enhanced visibility of the knowledge object lifecycle through clear and detailed audit logs Optional architecture-specific AppInspect tags to let more private apps be self-serviceable  For more details 🔎, take a look at the cloud platform release notes. Your SaaSy (Splunk-as-a-Servicey) Updates, — Judith Silverberg-Rajna, Splunk Cloud Platform   ... View more

Today we announced the next generation of the Splunk Platform with new enhancements to Splunk Cloud Platform and the general availability of Splunk Enterprise 9.0, empowering customers with increased access to more data sources from edge to cloud, time to action when incidents arise, ability to secure and scale deployments with streamlined administration and greater extensibility. End-to-end visibility through expanded data access and optimized storage for greater customer choice, control, and cost savings: Data Manager for Splunk Cloud Platform delivers a scalable data onboarding experience across Amazon Web Services and Azure today, with Google Cloud Platform support available later this summer, providing an easy-to-manage hybrid cloud control plane of data flowing into Splunk within minutes. Ingest Actions helps customers get data to the right places, in the right shape, and at the right time with granular controls to take action on data through filtering, masking, and routing of data in motion within the Splunk Platform or to external AWS S3 storage.  Splunk Enterprise 9.0 extends cost effective cold storage beyond Amazon Web Services and Google Cloud Platform, to now include Microsoft Azure with SmartStore for Azure helping self managed Splunk Enterprise customers reduce operating costs by up to 70%.  Rapid investigation and action through deeper investigation and an optimized administrative experience to address outages and security attacks without business disruption:  With the expansion of Federated Search, Splunk enhances and simplifies investigation and search across hybrid cloud environments by providing users and administrators of the Splunk Platform a unified, single pane view of their entire Splunk ecosystem enabling quicker actionable insights.   Splunk Assist is a new fully managed cloud service within Splunk Enterprise 9.0 that provides customers with deep insights into their security environment, leveraging insights from cloud deployments for a richer administrative experience. The new Search and Dashboard Experience (Public Preview) is an investigative and analytical experience for Splunk Cloud Platform customers that accelerates the data-to-insight workflow and empowers more users with a point-and-click analytics experience. Expanding the power of the Splunk platform with more ways to build and customize applications to extract greater business value from data insights: With the enhanced Splunkbase experience offering curated collections over 2,500 purpose-built apps and integrations, customers can easily apply the power of the Splunk portfolio to a large variety of data-centric use cases. Combined with our partner ecosystem of over 2,400 partner organizations can integrate third-party data sources to discover, deploy, and manage apps built to help customers turn data into doing.  Now in preview, the Splunk Cloud Developer Edition lets developers easily create and test their applications, reducing time-to-value for enterprises building on, for, and with the Splunk Cloud Platform.  Additionally, Splunk platform now ships with an improved security posture. Explore my community post on this topic to learn more about how Splunk Enterprise 9.0 includes an updated set of security settings including secure TLS configurations across all nodes, user-friendly search processing language (SPL) safeguards, improved secrets and password management, semantic versioning of search APIs, native smart-card (CAC/PIV) support, and additional security updates. I’m guessing you must be itching for more details on these exciting updates! You can find them in our .conf22 Platform blog, check out what’s going on virtually right now, or watch everything on demand after on .conf online in September. Pumped?! Let’s see it in the comments! Judith - Platform Product Marketing Manager ... View more

Customers are at the center of everything we do at Splunk and security is our top priority. On top of a series of new and improved capabilities, Splunk platform now ships with an improved security posture. Splunk is committed to helping customers identify and remediate security issues, including providing advisories and patches for any vulnerability considered “Critical” or “High”. Splunk remains hyper-vigilant and focused on outstanding customer experiences and outcomes. So what are the updates and how can you learn more? Splunk Enterprise 9.0 specifically includes three new security features, a series of automatically implemented security settings, and addresses eight security vulnerabilities with fixes that go deeper than just "patching" Splunk, focused on intra-Splunk transport layer security (TLS), securing deployment server & forwarders, securing app development, and added search processing language (SPL) safeguards. New or Enhanced Security Features: *New* Splunk Assist - a single place to monitor your Splunk Enterprise deployment and see recommendations to improve your security posture. *Enhanced* Upgrade Readiness App -  Easily identify apps impacted by Python 3.0 certificate validation and access step by step upgrade guidance. *New* Smart Card Authentication - Splunk will now support multi-factor authentication (MFA) Common Access Card cryptographic certificates issued by the US DoD as a form of authentication natively. Automatically Implemented Security Updates Settings Improved dashboard security with sanitization on input fields  Increased control for admins with greater Splunkd Roles and Capabilities restriction options Enhancements to third-party packages including Node.js, OpenSSL, and many more Easier risk management with user-friendly SPL safeguards Role-based filtering Security Advisories to Take Action On (for June 2022) Intra-Splunk Transport Layer Security (TLS) is a best practice to implement for any application that communicates over the public network. The three available updates in Splunk Enterprise 9.0 enable you to configure TLS at the right time for your business (ISVC-2022-0602, SVD-2022-0603, SVD-2022-0606). Securing forwarders and deployment servers is important to the security of your overall Splunk deployment. These three updates enable you to apply stronger security at the forwarder (SVD-2022-0605, SVD-2022-0607) as well as between the deployment server and forwarder (SVD-2022-0608). Securing the app model is important to the security of your overall Splunk deployment as apps are considered part of your trust boundary. This update enables you to apply stronger security between the application and your Splunk system (SVD-2022-0601). Splunk search processing language (SPL) is powerful, with great power comes great responsibility. This update makes it possible to more fully safeguard against edge case scenarios for data exfiltration and arbitrary code execution using SPL (SVD-2022-0604). We encourage you to prioritize security by addressing these advisories and upgrade to Splunk Enterprise 9.0 today! For more details and guidance on next steps, please watch our Tech Talk - Improve Your Security Posture, explore Splunk Lantern for upgrade assistance, view our FAQ, and subscribe to our Product Security Page to get timely updates on all of our advisories. Still have questions? Please ask any technical clarifications on our Answers forum. Judith - Platform Product Marketing Manager ... View more

Hello hello!  We are happy to share the newest updates in Splunk Cloud Platform 8.2.2203! Analysts can benefit from  Dashboard Studio Enhancements Color visualizations dynamically by matching string values  Use a new cluster map with marker and bubble layers Set tokens from search results or search metadata Link to other dashboards and pass tokens Set Studio dashboards as their home page Expanded Federated Search capabilities Search from cloud to on-premise environments Expanded commands in standard mode Enriched insights with ability to run federated searches on data models and DMA’s using the TSTATS command  Admins can benefit from Unlocked admin insights, individualized regional configuration, greater mobile customization, and easier registration and management of connected devices in Splunk Secure Gateway  Enhanced visibility of the knowledge object lifecycle through clear and detailed audit logs   Simplified jQuery upgrading using a Server Settings feature to restrict vulnerable jQuery libraries Streamlined app installation and upgrades (for those on Victoria Experience) Improved security with the ability to restrict webhooks for alert actions to only specific domains or IP addresses For more details 🔎, take a look at the cloud platform release notes. Your SaaSy (Splunk-as-a-Servicey) Updates, —Judith Silverberg-Rajna, Splunk Cloud Platform   ... View more

Hi Community Friends! In case you missed it earlier today, Garth Fort, our Senior Vice President and Chief Product Officer for Splunk shared a thoughtful and detailed post about Splunk Enterprise and Splunk's ever-evolving support for our customers, whether their environments reside on-premises, in the cloud, or span hybrid models.  I especially love how Garth makes mention of Splunk's "commitment to our customers’ success with ongoing investments in Splunk Enterprise, which will continue to be a core pillar of our evolving hybrid platform strategy" and that "our focus has always been, and will remain, adding value to enterprise customers across the spectrum of environments of the hybrid cloud."  So one big takeaway: On premises? We got you. Totally cloud? Totally covered. Making the shift to cloud in part or whole? We'll be here shifting with you, and Splunk Enterprise will support you, on every step of that journey. Garth also brings attention to just a few of our capabilities that support your hybrid experience, as well as to our growing partner ecosystem to enhance and extend those capabilities even further.  So if you haven't already, give Garth's post a read, and know that every investment we make is toward ensuring the success of all of our customers, with a data platform for your hybrid worlds.  Questions or comments? Shout us out in the comments below! - Judith Silverberg-Rajna, Product Marketing Manager ... View more

Hi there 😄  We are stoked to share what we have included in our new release, Splunk Cloud Platform 8.2.2202! For Analysts Dashboard Studio enhancements Option to set default token values in drill-down actions Improved resolution of multi-select input token values Ability to bulk update to newer visualizations that provide greater flexibility and configurability For Admins Easier removal of unsupported hotlinked imports using a Server Settings feature to restrict unsupported internal libraries Increased workload management flexibility with support for the wildcard command with index, user, and role Cloud Monitoring Console improvements Added detail to search type breakdowns and included subsearches on the following: Searches by Type (Last 24 Hours) panel of the Overview dashboard Searches panel of the Search Usage Statistics dashboard New alerts on the Alert Panel: New Data in Index Specified as "lastchanceindex", Storage Capacity Exceeds 80%, SVC Utilization Exceeds 80% for 3 Hours New restoration information panels on the Storage Summary and Searchable Storage (DDAS) dashboards: Restored Entitlement, Restored DDAS Usage, Restored DDAS Usage Percent For more details 🔎, take a look at the cloud platform release notes. Your SaaSy (Splunk-as-a-Servicey) Updates, Judith - Splunk Cloud Platform     ... View more

Hello 👋  We are excited to share what we have included in our new release, Splunk Cloud Platform 8.2.2201! For Analysts Expanded token support in Dashboard Studio Ability to set default token values in source Support for dynamic value in “Link to Custom URL” Enhanced visualizations in Dashboard Studio New Link Graph Updated Single Value Radial Additional formatting options for table and markdown Command improvements for federated search with standard mode QR code authentication as a primary login option for Splunk Mobile In-product announcements of new features included in each release upgrade For Admins Automated private app vetting to remove manual app vetting requirements Self-service index deletion in the Victoria Experience Upgrade Readiness App improvements including further jQuery checks and admin control settings for email notifications Removal of biased language usage for the SH tier configurations from server.conf and limits.conf Improved Connected Experiences monitoring with a Splunk Secure Gateway dashboard for analyzing deployment usage For more details 🔎, take a look at the cloud platform release notes. Want to get notified of "What's 🆕" in every Splunk Cloud Platform release? Click and subscribe to the 'Splunk Cloud Platform' label in this announcements discussion 😎   Your SaaSy (Splunk-as-a-Servicey) Updates, Judith - Splunk Cloud Platform ... View more

Heyo! We are pumped to share what’s new in Splunk Cloud Platform 8.2.2109! For Analysts  The new Dashboard Studio is continuously being improved and we have introduced a number of enhancements:  Scheduled PDF email export to easily share dashboards (Limited Availability Release, apply here)  Global environment tokens for standard dashboard development Two additional visualization options: Sankey Diagram and Parallel Coordinates Interactive drilldowns by clicking on visualizations to set tokens Device identification is now streamlined in Splunk Secure Gateway The Splunk Product Guidance (SPG) app is now integrated in each release to offer in-product walkthroughs, guides, and access to relevant how-to articles  For Admins  The Admin Configuration Service in Victoria experience to has been improved with the ability to upload, install, and upgrade apps through APIs (Reach out to your account team to enable this feature) The Upgrade Readiness App now includes jQuery scanning to identify applications and file types that need attention before being updated to a release with only jQuery 3.5 enabled For more details 🔎, take a look at the cloud platform release notes. Want to get notified of "What's 🆕" in every Splunk Cloud Platform release? Click and subscribe to the 'Splunk Cloud Platform' label in this announcements discussion 😎   Your SaaSy (Splunk-as-a-Servicey) Updates, Judith - Splunk Cloud Platform ... View more

Dunt da dah dah! I present your .conf21 Platform highlights! The Splunk Platform is your partner in cloud transformation, helping you…. 1. Gain end to end visibility to thrive in this hybrid age You love Splunk for the ease of quick access and ability to get insights out of machine data, and now we are adding the ability to filter and route your data to other endpoints, making it even easier to ingest and analyze your data in Splunk. Simply redact, filter, and route “noisy” data from the indexer layer with Ingest Actions (Preview) Enjoy a modernized, simple data onboarding experience with our new Data Manager (Preview) in Splunk Cloud Platform  Leverage these tools and additional resources to bring in even more data sources, including telemetry with the Splunk OpenTelemetry (Otel) Connector for Kubernetes (Preview) Whether you store your data in our cloud offering or yours, you can reduce costs with a variety of flexible storage offerings: Explore the new Flex Index (Preview) in Splunk Cloud Platform for affordable search and storage of your less-time-sensitive data  Decrease infrastructure costs with Smart Store now available on Microsoft Azure (Preview)  Align your spend with value with Workload Pricing, including enhanced management tools such as the Workload Pricing Dashboards in the Cloud Management Console 2. Extend Investigation and drive faster action for all data wherever it lives No matter where data lives, investigate it with a more robust, faster, and reimagined search experience.  Enjoy a seamless, unified search experience across Splunk deployment types with Federated Search  Search faster and with greater control with increased scale, processing, and self service app capabilities with the Victoria Experience in Splunk Cloud Platform Look into the future and explore our reimagined search & reporting (Preview) with our next-generation, cloud-native search experience Efficiently visualize your search results and drive faster action. Try out Dashboard Studio, our new and intuitive dashboard-building option for communicating even your most complex data insights Take action from anywhere with access to all your dashboards on-the-go with Splunk Mobile and TV Quickly tackle new use cases with Splunk Product Guidance, offering in-product walkthroughs, helpful guides, and access to relevant how-to articles  3. Customize Splunk YOUR way  Deploy and manage Splunk with a redefined admin experience - whether you are in the cloud, on-prem, or both.  Effortlessly install, scale, and manage on your choice of cloud environment with Splunk Operator for Kubernetes Your self-management is streamlined with admin improvements (Preview) including configuration change tracking, health report enhancements, and much more Plus, we have your back with upgrade readiness tools to easily prepare for Python 3 and jQuery 3.5 migrations and ensure your environment is ready for updates With Splunk, if you can imagine it, you can build it!  Simply find or develop any app for your unique business needs with our new Splunkbase (Preview) that offers a modern user experience and curated collections and categories Eager for more details on these awesome updates? Lucky for you, you can find them in our .conf21 Platform blog, check out what’s going on right now, or watch everything on demand after on .conf online. Excited?! Let’s see it in the comments! Judith - Platform Product Marketing (also author of your monthly SaaSy (Splunk-as-a-Servicey) Updates for Splunk Cloud Platform)    ... View more

Hello, hello! I'm excited to share with you the 🆕 updates in Splunk Cloud Platform 8.2.2107! For Analysts Biased language has been removed from the knowledge bundle replication workflow. The "makeresults" command includes two new "format" and "data" options to more efficiently generate events from inline JSON/CSV data. The Federated Search settings has an updated UI for easier index connection setup and management for hybrid customers. For Admins  There is now Universal Forwarder compatibility with the new logD sources standard for MacOS. The Python Update Readiness App is included to confirm Python 3 migration readiness and provide ongoing Python 3 support for public and private apps and will be integrated within every release. ⭐The Cloud Monitoring Console (CMC) has been updated to include hourly SVC consumption in the Workload Pricing dashboard with 6 new hourly views- ingest, search count, search type, users, roles, and apps. See all the updates in the CMC app release notes For more details 🔎, take a look at the cloud platform release notes. Want to get notified of "What's 🆕" in every Splunk Cloud Platform release? Click and subscribe to the 'Splunk Cloud Platform' label in this announcements discussion 😎   Your SaaSy (Splunk-as-a-Servicey) Updates, Judith - Splunk Cloud Platform ... View more

Helloooo cloud ⛅ community! Get ready for some new helpful 🤓 enhancements in Splunk Cloud Platform 8.2.2106!    Check out 👀 the new updates in this release: For Analysts The new Dashboard Studio is continuously being improved and we have introduced a number of enhancements: Usability improvements including relocation of the Save button for intuitive access, and warning messages for unsaved changes Ability to create view-only dashboards with hide button features Markdown visualization option for grid layout  Point-and-click UI for adding data sources to inputs                     Check out all of these in action in our blog! The ability for apps to specify custom user interface preferences via ui-prefs.conf such as time picker has been removed. Users will still be able to set their UI preferences For Admins App Upload and AppInspect have been directly integrated into the Splunk admin web interface for streamlined private app management (Limited Availability Release - contact your account team for early access) For more details 🔍 , take a look at the release notes.   Want to get notified of "What's 🆕" in every Splunk Cloud Platform release? Click and subscribe to the 'Splunk Cloud Platform' label in this announcements discussion 😎   Your SaaSy (Splunk-as-a-Servicey) Updates, Judith - Splunk Cloud Platform   ... View more

Hiya Splunk Community 🤠 I work on Splunk's product marketing team focusing on the core platform. I'm excited to announce that I will be posting updates for every Splunk Cloud Platform release on this discussion board 💃 Check out 👀the new updates in this release: The new Dashboard Studio offers a dashboard-building experience with advanced visualization tools and fully customizable layouts to easily create visually-compelling, interactive dashboards with an intuitive UI.  Cloud-Cloud Federated Search brings users the ability to search across Cloud deployments - from one search bar using enhanced search commands.  Cloud admins now have more detailed user role setting controls providing control over the age of events shown in search results allowing more fine tuned management of workload usage by user. Additionally, self service index deletion is now possible without requiring a rolling restart. Splunk Secure Gateway (SSG) now available packaged with Splunk Cloud Platform allowing users to easily connect mobile to Splunk. SSG and Spacebridge are SOC 2 Type 2, ISO 27001, PCI and HIPAA compliant.  Read our blog and the release notes for more details! Take a look and play around with the latest and greatest! Then let us know what you think in the comments below 😁 Want to get notified of "What's 🆕" in every Splunk Cloud Platform release? Click and subscribe to the 'Splunk Cloud Platform' label in this announcements discussion 😎 ... View more

For Analysts Interim Classic (Simple XML) Dashboard conversion support with previous dashboard reference when the dashboard is updated due to security updates For Admins Easier private application management experience with Private App Vetting now available on the application upload page with easy, self service App Upload and integrated AppInspect capabilities  New admin configuration ability to limit ad hoc searches, preserving resources for mission critical scheduled searches  Enterprise Managed Encryption Key (EMEK) on AWS -- which is in a limited availability release -- now supports encryption data on Dynamic Data Active Archive (DDAA)  HTML Dashboards, a legacy capability, are deprecated as the new Dashboard Studio is now available for these use cases. While still available for use, HTML Dashboards may require manual updates if they break between upgrades. For more details, check out the release note documentation for the new features and enhancements from every release. ... View more

We are excited to announce the release of Splunk Enterprise 8.2. You can now seamlessly access all of your Splunk data with Federated Search for a unified search experience across all of your deployments whether they are on-premises or in the cloud. Extracting and communicating your insights is now easier than ever before with Dashboard Studio, the new and intuitive dashboard-builder for creating visually-compelling dashboards with advanced visualization tools and fully customizable formats. We also are introducing numerous new data management capabilities for improved environment monitoring and enhanced self-service and auditing. Admins can leverage a variety of new apps including the Python 3 Readiness App, Knowledge Object Overview App, and What’s New in 8.2 App. Plus, you can easily bring Splunk to any part of your organization with the Splunk Operator for Kubernetes that quickly deploys Splunk Enterprise on your choice of private or public cloud provider while automating workflows and implementing Kubernetes best practices. Read the blog to learn more! Update today to see them in action or consider Splunk Cloud Platform to enjoy uninterrupted service delivery of the most innovative and up-to-date features.  ... View more

Check out the latest release of Splunk Cloud Platform: The new Dashboard Studio offers a dashboard-building experience with advanced visualization tools and fully customizable layouts to easily create visually-compelling, interactive dashboards with an intuitive UI.  Cloud-Cloud Federated Search brings users the ability to search across Cloud deployments - from one search bar using enhanced search commands.  Cloud admins now have more detailed user role setting controls providing control over the age of events shown in search results allowing more fine tuned management of workload usage by user. Additionally, self service index deletion is now possible without requiring a rolling restart. Splunk Secure Gateway (SSG) now available packaged with Splunk Cloud Platform allowing users to easily connect mobile to Splunk. SSG and Spacebridge are SOC 2 Type 2, ISO 27001, PCI and HIPAA compliant.  Read our blog and the release notes for more details! ... View more

We have updated our licensing policy! For on-premises license stacks of less than 100GB on Splunk Enterprise 8.1.0 and above, Splunk will disable search when license limits are violated after 45 warnings within a 60-day rolling window. For more details, check out the Licensing Enforcement FAQ. ... View more