Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.0.2305! Analysts can benefit from: Easier discoverability of Splunk Observability Cloud with in-product demo requests and educational content to learn how to examine logs in context with metrics and traces  Dashboard Studio improvements  New post-conversion report when a Classic dashboard is converted with the Clone in Dashboard Studio feature that details which objects or options need manual adjustments after automatic conversions Updated code editor that can be expanded while making edits in the UI New ability to configure drilldowns from dashboards to custom searches and reports New ability to configure workflow actions to work with Events Viewer visualizations  Admins can benefit from: Expanded search capabilities with Federated Search for Amazon S3 to get Splunk insights from Amazon S3 buckets without the need for data ingestion (coming soon) Simplified certificate rotation with new REST API endpoint to rotate server certificate without restarting the server Streamlined process for adding certificates with support for OS certificate trust store and certificate management API Python 2 is in the process of deprecation and soon will no longer be available in coming releases. Older jQuery libraries are no longer supported but can be enabled by support for emergency needs, with jQuery 3.5 set as default. Your SaaSy (Splunk-as-a-Servicey) Updater, Judith Silverberg-Rajna, Splunk Cloud Platform ... View more

Analysts can benefit from  Improved homepage experience for faster insights including  Start where you left off with recently viewed knowledge objects Browse a comprehensive list of knowledge objects you have created and have access to Customize the app order or search by name for better app browsing Dark mode support in conjunction with the Search & Reporting app  Increased performance for searches using the lookup command with parallel reduce search processing  Efficient exports with autofill email delivery from the search and reporting app  Continuity across search heads with preserved search history  Dashboard Studio improvements  The ability to export the data results of any visualization into a CSV Events viewer visualization to see event data and interact with field-value pairs  Updated base and chain behavior for improved performance and resource consumption  More dynamic dashboards with conditional panels in absolute layout that show or hide based on data availability Application of choropleth map layers to map visualizations in addition to existing bubble and marker layers  The ability to move inputs into or above the canvas to be closer to the charts they impact Easier editing with UI for configuring axes charts   Admins can benefit from Easier configuration in Ingest Actions with the ability to control S3 output setup Efficient TLS certificate refreshes that do not require restarting some configurations Additional self-serviceability with UI to configure limits.conf  Support for multiple S3 bucket destinations in Ingest Actions Edge Processor improvements to GUI pipeline editor including the ability to use search to get sample data, addition of a dedicated regex modal to aid in extracting fields, and keep and remove as a filter action Greater control to deactivate federated providers, federated indexes, and transparent mode Flexibility to choose to share a search itself instead of sharing the search as a job Granular access controls that can be configured by role with Admin Config Service   Your SaaSy (Splunk-as-a-Servicey) Updates, — Judith Silverberg-Rajna, Splunk Cloud Platform           Python 2 continues to be supported  Older jQuery libraries continue to be supported with jQuery 3.5 set as default   ... View more

Hi folks! We are happy to share the newest updates in Splunk Cloud Platform 9.0.2209! Analysts can benefit from  Faster troubleshooting with Job Inspector in Dashboard Studio to examine search jobs powering visualizations  Enhanced drill-down capabilities in Dashboard Studio with the ability to pass static tokens between dashboards and list all tokens on the target dashboard Streamlined viewing of Dashboard Studio and Classic dashboards on Splunk Mobile with a scannable QR code for each dashboard that automatically registers users and displays the dashboard on their mobile device Admins can benefit from Easier configuration with a user interface to directly set specific Limits.conf stanzas Improved security management with the ability to limit which domains can import images on their dashboards with the Dashboards Trusted Domains List For more details 🔎, take a look at the cloud platform release notes. Your SaaSy (Splunk-as-a-Servicey) Updates, — Judith Silverberg-Rajna, Splunk Cloud Platform ... View more

Today we announced the next generation of the Splunk Platform with new enhancements to Splunk Cloud Platform and the general availability of Splunk Enterprise 9.0, empowering customers with increased access to more data sources from edge to cloud, time to action when incidents arise, ability to secure and scale deployments with streamlined administration and greater extensibility. End-to-end visibility through expanded data access and optimized storage for greater customer choice, control, and cost savings: Data Manager for Splunk Cloud Platform delivers a scalable data onboarding experience across Amazon Web Services and Azure today, with Google Cloud Platform support available later this summer, providing an easy-to-manage hybrid cloud control plane of data flowing into Splunk within minutes. Ingest Actions helps customers get data to the right places, in the right shape, and at the right time with granular controls to take action on data through filtering, masking, and routing of data in motion within the Splunk Platform or to external AWS S3 storage.  Splunk Enterprise 9.0 extends cost effective cold storage beyond Amazon Web Services and Google Cloud Platform, to now include Microsoft Azure with SmartStore for Azure helping self managed Splunk Enterprise customers reduce operating costs by up to 70%.  Rapid investigation and action through deeper investigation and an optimized administrative experience to address outages and security attacks without business disruption:  With the expansion of Federated Search, Splunk enhances and simplifies investigation and search across hybrid cloud environments by providing users and administrators of the Splunk Platform a unified, single pane view of their entire Splunk ecosystem enabling quicker actionable insights.   Splunk Assist is a new fully managed cloud service within Splunk Enterprise 9.0 that provides customers with deep insights into their security environment, leveraging insights from cloud deployments for a richer administrative experience. The new Search and Dashboard Experience (Public Preview) is an investigative and analytical experience for Splunk Cloud Platform customers that accelerates the data-to-insight workflow and empowers more users with a point-and-click analytics experience. Expanding the power of the Splunk platform with more ways to build and customize applications to extract greater business value from data insights: With the enhanced Splunkbase experience offering curated collections over 2,500 purpose-built apps and integrations, customers can easily apply the power of the Splunk portfolio to a large variety of data-centric use cases. Combined with our partner ecosystem of over 2,400 partner organizations can integrate third-party data sources to discover, deploy, and manage apps built to help customers turn data into doing.  Now in preview, the Splunk Cloud Developer Edition lets developers easily create and test their applications, reducing time-to-value for enterprises building on, for, and with the Splunk Cloud Platform.  Additionally, Splunk platform now ships with an improved security posture. Explore my community post on this topic to learn more about how Splunk Enterprise 9.0 includes an updated set of security settings including secure TLS configurations across all nodes, user-friendly search processing language (SPL) safeguards, improved secrets and password management, semantic versioning of search APIs, native smart-card (CAC/PIV) support, and additional security updates. I’m guessing you must be itching for more details on these exciting updates! You can find them in our .conf22 Platform blog, check out what’s going on virtually right now, or watch everything on demand after on .conf online in September. Pumped?! Let’s see it in the comments! Judith - Platform Product Marketing Manager ... View more

Hello hello!  We are happy to share the newest updates in Splunk Cloud Platform 8.2.2203! Analysts can benefit from  Dashboard Studio Enhancements Color visualizations dynamically by matching string values  Use a new cluster map with marker and bubble layers Set tokens from search results or search metadata Link to other dashboards and pass tokens Set Studio dashboards as their home page Expanded Federated Search capabilities Search from cloud to on-premise environments Expanded commands in standard mode Enriched insights with ability to run federated searches on data models and DMA’s using the TSTATS command  Admins can benefit from Unlocked admin insights, individualized regional configuration, greater mobile customization, and easier registration and management of connected devices in Splunk Secure Gateway  Enhanced visibility of the knowledge object lifecycle through clear and detailed audit logs   Simplified jQuery upgrading using a Server Settings feature to restrict vulnerable jQuery libraries Streamlined app installation and upgrades (for those on Victoria Experience) Improved security with the ability to restrict webhooks for alert actions to only specific domains or IP addresses For more details 🔎, take a look at the cloud platform release notes. Your SaaSy (Splunk-as-a-Servicey) Updates, —Judith Silverberg-Rajna, Splunk Cloud Platform   ... View more

Hi Community Friends! In case you missed it earlier today, Garth Fort, our Senior Vice President and Chief Product Officer for Splunk shared a thoughtful and detailed post about Splunk Enterprise and Splunk's ever-evolving support for our customers, whether their environments reside on-premises, in the cloud, or span hybrid models.  I especially love how Garth makes mention of Splunk's "commitment to our customers’ success with ongoing investments in Splunk Enterprise, which will continue to be a core pillar of our evolving hybrid platform strategy" and that "our focus has always been, and will remain, adding value to enterprise customers across the spectrum of environments of the hybrid cloud."  So one big takeaway: On premises? We got you. Totally cloud? Totally covered. Making the shift to cloud in part or whole? We'll be here shifting with you, and Splunk Enterprise will support you, on every step of that journey. Garth also brings attention to just a few of our capabilities that support your hybrid experience, as well as to our growing partner ecosystem to enhance and extend those capabilities even further.  So if you haven't already, give Garth's post a read, and know that every investment we make is toward ensuring the success of all of our customers, with a data platform for your hybrid worlds.  Questions or comments? Shout us out in the comments below! - Judith Silverberg-Rajna, Product Marketing Manager ... View more

Hi there 😄  We are stoked to share what we have included in our new release, Splunk Cloud Platform 8.2.2202! For Analysts Dashboard Studio enhancements Option to set default token values in drill-down actions Improved resolution of multi-select input token values Ability to bulk update to newer visualizations that provide greater flexibility and configurability For Admins Easier removal of unsupported hotlinked imports using a Server Settings feature to restrict unsupported internal libraries Increased workload management flexibility with support for the wildcard command with index, user, and role Cloud Monitoring Console improvements Added detail to search type breakdowns and included subsearches on the following: Searches by Type (Last 24 Hours) panel of the Overview dashboard Searches panel of the Search Usage Statistics dashboard New alerts on the Alert Panel: New Data in Index Specified as "lastchanceindex", Storage Capacity Exceeds 80%, SVC Utilization Exceeds 80% for 3 Hours New restoration information panels on the Storage Summary and Searchable Storage (DDAS) dashboards: Restored Entitlement, Restored DDAS Usage, Restored DDAS Usage Percent For more details 🔎, take a look at the cloud platform release notes. Your SaaSy (Splunk-as-a-Servicey) Updates, Judith - Splunk Cloud Platform     ... View more

Heyo! We are pumped to share what’s new in Splunk Cloud Platform 8.2.2109! For Analysts  The new Dashboard Studio is continuously being improved and we have introduced a number of enhancements:  Scheduled PDF email export to easily share dashboards (Limited Availability Release, apply here)  Global environment tokens for standard dashboard development Two additional visualization options: Sankey Diagram and Parallel Coordinates Interactive drilldowns by clicking on visualizations to set tokens Device identification is now streamlined in Splunk Secure Gateway The Splunk Product Guidance (SPG) app is now integrated in each release to offer in-product walkthroughs, guides, and access to relevant how-to articles  For Admins  The Admin Configuration Service in Victoria experience to has been improved with the ability to upload, install, and upgrade apps through APIs (Reach out to your account team to enable this feature) The Upgrade Readiness App now includes jQuery scanning to identify applications and file types that need attention before being updated to a release with only jQuery 3.5 enabled For more details 🔎, take a look at the cloud platform release notes. Want to get notified of "What's 🆕" in every Splunk Cloud Platform release? Click and subscribe to the 'Splunk Cloud Platform' label in this announcements discussion 😎   Your SaaSy (Splunk-as-a-Servicey) Updates, Judith - Splunk Cloud Platform ... View more

Dunt da dah dah! I present your .conf21 Platform highlights! The Splunk Platform is your partner in cloud transformation, helping you…. 1. Gain end to end visibility to thrive in this hybrid age You love Splunk for the ease of quick access and ability to get insights out of machine data, and now we are adding the ability to filter and route your data to other endpoints, making it even easier to ingest and analyze your data in Splunk. Simply redact, filter, and route “noisy” data from the indexer layer with Ingest Actions (Preview) Enjoy a modernized, simple data onboarding experience with our new Data Manager (Preview) in Splunk Cloud Platform  Leverage these tools and additional resources to bring in even more data sources, including telemetry with the Splunk OpenTelemetry (Otel) Connector for Kubernetes (Preview) Whether you store your data in our cloud offering or yours, you can reduce costs with a variety of flexible storage offerings: Explore the new Flex Index (Preview) in Splunk Cloud Platform for affordable search and storage of your less-time-sensitive data  Decrease infrastructure costs with Smart Store now available on Microsoft Azure (Preview)  Align your spend with value with Workload Pricing, including enhanced management tools such as the Workload Pricing Dashboards in the Cloud Management Console 2. Extend Investigation and drive faster action for all data wherever it lives No matter where data lives, investigate it with a more robust, faster, and reimagined search experience.  Enjoy a seamless, unified search experience across Splunk deployment types with Federated Search  Search faster and with greater control with increased scale, processing, and self service app capabilities with the Victoria Experience in Splunk Cloud Platform Look into the future and explore our reimagined search & reporting (Preview) with our next-generation, cloud-native search experience Efficiently visualize your search results and drive faster action. Try out Dashboard Studio, our new and intuitive dashboard-building option for communicating even your most complex data insights Take action from anywhere with access to all your dashboards on-the-go with Splunk Mobile and TV Quickly tackle new use cases with Splunk Product Guidance, offering in-product walkthroughs, helpful guides, and access to relevant how-to articles  3. Customize Splunk YOUR way  Deploy and manage Splunk with a redefined admin experience - whether you are in the cloud, on-prem, or both.  Effortlessly install, scale, and manage on your choice of cloud environment with Splunk Operator for Kubernetes Your self-management is streamlined with admin improvements (Preview) including configuration change tracking, health report enhancements, and much more Plus, we have your back with upgrade readiness tools to easily prepare for Python 3 and jQuery 3.5 migrations and ensure your environment is ready for updates With Splunk, if you can imagine it, you can build it!  Simply find or develop any app for your unique business needs with our new Splunkbase (Preview) that offers a modern user experience and curated collections and categories Eager for more details on these awesome updates? Lucky for you, you can find them in our .conf21 Platform blog, check out what’s going on right now, or watch everything on demand after on .conf online. Excited?! Let’s see it in the comments! Judith - Platform Product Marketing (also author of your monthly SaaSy (Splunk-as-a-Servicey) Updates for Splunk Cloud Platform)    ... View more

Helloooo cloud ⛅ community! Get ready for some new helpful 🤓 enhancements in Splunk Cloud Platform 8.2.2106!    Check out 👀 the new updates in this release: For Analysts The new Dashboard Studio is continuously being improved and we have introduced a number of enhancements: Usability improvements including relocation of the Save button for intuitive access, and warning messages for unsaved changes Ability to create view-only dashboards with hide button features Markdown visualization option for grid layout  Point-and-click UI for adding data sources to inputs                     Check out all of these in action in our blog! The ability for apps to specify custom user interface preferences via ui-prefs.conf such as time picker has been removed. Users will still be able to set their UI preferences For Admins App Upload and AppInspect have been directly integrated into the Splunk admin web interface for streamlined private app management (Limited Availability Release - contact your account team for early access) For more details 🔍 , take a look at the release notes.   Want to get notified of "What's 🆕" in every Splunk Cloud Platform release? Click and subscribe to the 'Splunk Cloud Platform' label in this announcements discussion 😎   Your SaaSy (Splunk-as-a-Servicey) Updates, Judith - Splunk Cloud Platform   ... View more

Hiya Splunk Community 🤠 I work on Splunk's product marketing team focusing on the core platform. I'm excited to announce that I will be posting updates for every Splunk Cloud Platform release on this discussion board 💃 Check out 👀the new updates in this release: The new Dashboard Studio offers a dashboard-building experience with advanced visualization tools and fully customizable layouts to easily create visually-compelling, interactive dashboards with an intuitive UI.  Cloud-Cloud Federated Search brings users the ability to search across Cloud deployments - from one search bar using enhanced search commands.  Cloud admins now have more detailed user role setting controls providing control over the age of events shown in search results allowing more fine tuned management of workload usage by user. Additionally, self service index deletion is now possible without requiring a rolling restart. Splunk Secure Gateway (SSG) now available packaged with Splunk Cloud Platform allowing users to easily connect mobile to Splunk. SSG and Spacebridge are SOC 2 Type 2, ISO 27001, PCI and HIPAA compliant.  Read our blog and the release notes for more details! Take a look and play around with the latest and greatest! Then let us know what you think in the comments below 😁 Want to get notified of "What's 🆕" in every Splunk Cloud Platform release? Click and subscribe to the 'Splunk Cloud Platform' label in this announcements discussion 😎 ... View more

For Analysts Interim Classic (Simple XML) Dashboard conversion support with previous dashboard reference when the dashboard is updated due to security updates For Admins Easier private application management experience with Private App Vetting now available on the application upload page with easy, self service App Upload and integrated AppInspect capabilities  New admin configuration ability to limit ad hoc searches, preserving resources for mission critical scheduled searches  Enterprise Managed Encryption Key (EMEK) on AWS -- which is in a limited availability release -- now supports encryption data on Dynamic Data Active Archive (DDAA)  HTML Dashboards, a legacy capability, are deprecated as the new Dashboard Studio is now available for these use cases. While still available for use, HTML Dashboards may require manual updates if they break between upgrades. For more details, check out the release note documentation for the new features and enhancements from every release. ... View more

We are excited to announce the release of Splunk Enterprise 8.2. You can now seamlessly access all of your Splunk data with Federated Search for a unified search experience across all of your deployments whether they are on-premises or in the cloud. Extracting and communicating your insights is now easier than ever before with Dashboard Studio, the new and intuitive dashboard-builder for creating visually-compelling dashboards with advanced visualization tools and fully customizable formats. We also are introducing numerous new data management capabilities for improved environment monitoring and enhanced self-service and auditing. Admins can leverage a variety of new apps including the Python 3 Readiness App, Knowledge Object Overview App, and What’s New in 8.2 App. Plus, you can easily bring Splunk to any part of your organization with the Splunk Operator for Kubernetes that quickly deploys Splunk Enterprise on your choice of private or public cloud provider while automating workflows and implementing Kubernetes best practices. Read the blog to learn more! Update today to see them in action or consider Splunk Cloud Platform to enjoy uninterrupted service delivery of the most innovative and up-to-date features.  ... View more

Check out the latest release of Splunk Cloud Platform: The new Dashboard Studio offers a dashboard-building experience with advanced visualization tools and fully customizable layouts to easily create visually-compelling, interactive dashboards with an intuitive UI.  Cloud-Cloud Federated Search brings users the ability to search across Cloud deployments - from one search bar using enhanced search commands.  Cloud admins now have more detailed user role setting controls providing control over the age of events shown in search results allowing more fine tuned management of workload usage by user. Additionally, self service index deletion is now possible without requiring a rolling restart. Splunk Secure Gateway (SSG) now available packaged with Splunk Cloud Platform allowing users to easily connect mobile to Splunk. SSG and Spacebridge are SOC 2 Type 2, ISO 27001, PCI and HIPAA compliant.  Read our blog and the release notes for more details! ... View more

We have updated our licensing policy! For on-premises license stacks of less than 100GB on Splunk Enterprise 8.1.0 and above, Splunk will disable search when license limits are violated after 45 warnings within a 60-day rolling window. For more details, check out the Licensing Enforcement FAQ. ... View more