It may seem limited because its a trial but you seriously have to open a ticket for just about anything you want to do in splunk cloud, this includes installing an app which sometimes takes 2 days to close out.  but whatever you do… do not let anyone tell you moving to their SVC workload price model is a great idea and will result in no more license restraints.  They’ve essentially tricked me and my org into now managing our own environment and micro manage our virtual cpus and also harp on users who have poor search habits.  Ive gone back to an on prem model without any of the admin benefits and capabilities of an on prem environment.  oh and we’ve saved splunk a ton of money in regards to AWS virtual cpus.  ... View more

You ever get this figure out by chance? ... View more