What's New
We’re excited to announce the latest enhancements to Splunk Observability Cloud and share what’s currently in preview across the Splunk Observability portfolio. These innovations are designed to help you correlate user behavior with system performance data faster, enhance performance analysis, and leverage Observability Cloud data across Splunk Cloud and local AI agents, LLMs, and tools, and data. The following features became generally available on March 18, 2026.
Feature Highlight
Prioritize decisions based on real user impact with Digital Experience Analytics
Teams can now understand real user behavior to drive digital growth with Digital Experience Analytics. Digital Experience Analytics empowers teams to track feature usage, visualize user journeys, monitor conversions, and surface friction that impacts business outcomes. They can also uncover the why behind user behavior with Session Replay, pairing quantitative data with real-world context to instantly replay moments of friction and see exactly what users clicked, scrolled, hesitated on, or abandoned. By correlating user behavior with system performance data to remove friction, prioritize impact, and reduce operational toil – all with minimal instrumentation – teams can focus on the work that matters most for users and the business.
This feature will be rolled out to select customers in us0, us1, and eu0 in March 2026, with other realms to follow soon. Learn more in our blog post and documentation.
Additional Releases
Quickly find and fix frontend performance issues using natural language with the AI Assistant in Real User Monitoring (RUM)
Teams can now use the AI Assistant in Observability Cloud to quickly explore RUM data. To troubleshoot frontend performance, JavaScript, and user behavior errors, teams can use natural language to chat with and surface key insights about their RUM data. With in-context metrics and attributes, as well as guided recommendations, the AI assistant in RUM helps accelerate investigation across apps, metrics, tags, and time windows, reducing both mean-time-to-detection (MTTD) and mean-time-to-resolution (MTTR). Learn more in the documentation.
Google Cloud Platform (GCP) customers using Splunk Observability Cloud can now archive and restore histogram metrics in Usage Analytics
In Usage Analytics, customers can:
Identify primary cost drivers
Analyze metric and dimension utilization
Determine whether specific metrics or dimensions are used in detectors or charts
Identify data that consumes license capacity without providing operational value
Based on this analysis, customers can archive (including histogram metrics) or aggregate unused data using Metric Pipeline Management. Archived metrics can be restored when needed. This capability enables more controlled management of metric storage and license consumption. This feature was previously available only to Splunk and AWS customers, but it is now available to Google Cloud Platform (GCP) customers using Splunk Observability Cloud. Read the blog to learn more about Usage Analytics.
Enhance performance analysis efficiency using high-level summaries to reduce noise and identify bottlenecks with Call Graph Usability
We’ve updated the Call Graphs functionality with a new summary view that provides an immediate, high-level overview of method performance. Instead of manually scrolling through extensive data, you can now see the top five methods consuming the most execution time at-a-glance - significantly minimizing the time required for troubleshooting by highlighting critical performance data upfront.
Furthermore, we’ve added the capability to exclude specific packages—such as third-party library methods or Java methods that are outside the user's control. By allowing users to hide these non-essential elements, the Call Graphs become more concise and readable, ensuring that SREs and developers can focus their attention on the code and services they can influence or optimize. Learn more in the documentation.
Use Business Transaction (BT) Rule Enhancements to optimize and achieve targeted discovery
Business Transactions in Observability Cloud groups related traces that represent discrete user flows – like User Registration, Add to Cart, or Complete Purchase. They turn your distributed microservice traces into meaningful business processes you can watch and optimize.
Business transaction rules are the key to discovering your high-value business transactions. However, using full URI segments (the default), often led to an overwhelming number of BTs depending on the organization's URL structure. Now, the default rule is now fully editable, allowing you to improve discovery by using the first two (recommended) URI segments, which is often sufficient for identifying meaningful business transactions that align with your specific organizational needs. This update reduces the noise of unnecessary BTs, allowing teams to focus on the transactions that truly matter without the manual overhead of creating custom rules for every service. Learn more in the documentation.
Endpoint grouping is another new enhancement that allows you to create custom rules for any service to group related endpoints together, such as combining GET and POST requests. This capability is essential for teams struggling with high cardinality, where the sheer volume of unique endpoints makes monitoring difficult and consumes excessive resources. By grouping these endpoints, users can significantly reduce the total number of business transactions, preventing the "BT explosion" that often complicates observability environments. Endpoint Grouping also allows for flexible naming and grouping based on URI segments or indexed tags, ensuring that the resulting data is both organized and actionable. Ultimately, this leads to a cleaner, more efficient monitoring dashboard where metrics are aggregated into a single, relevant entity rather than being fragmented across hundreds of disparate, low-value endpoints. Learn more in the documentation.
Retrieve audit logs using optional filtering, pagination, and sorting with the Audit Events API
Splunk customers can now use the self-service Audit Events API to access their Splunk Observability Cloud audit logs. They can fetch an organization's audit trail with new API, making it easy to retrieve, filter, and analyze system activities and user actions within Splunk Observability Cloud. Customer audit events include configuration changes to dashboards, dashboard_group, detector, org_member, integration and SLO. Users can also access session and user details with HTTP requests. Learn more in the documentation.
Connect your AI agents to Observability Cloud capabilities on Splunk MCP Server
AI agents now have one unified MCP server to access Splunk’s tool capabilities. Splunk MCP Server provides a secure and scalable interface for connecting AI assistants, agents, and other intelligent systems to Splunk data, and now specifically to Observability Cloud capabilities. This provides teams with the flexibility to seamlessly integrate their local AI agents, LLMs, and tools, and data with Observability Cloud data to build custom AI workflows and debug performance issues in production without leaving their environment. Learn more in the documentation.
Access multiple Observability Cloud orgs in Related Content, Search & Reporting, and Dashboard Studio in Splunk Cloud
Previously, a Splunk Cloud instance could only show data from a default Observability Cloud org selected in the Discover Splunk Observability Cloud app. With multiple isolated Observability Cloud orgs, there was no way to surface and correlate the metrics, traces, and logs across them.
Now, users can correlate the default Observability Cloud org with their preferred org used in Related Content, Search & Reporting, and Dashboard Studio. By switching between their Observability Cloud orgs on the fly, users can leverage and correlate data faster. Additionally, users can create a single dashboard and visualize data across multiple Observability Cloud orgs without context switching. Learn more in the documentation.
What’s in Preview Now
Mobile Real User Monitoring Hybrid Framework Support
Developers can now leverage Splunk Observability for mobile apps built with React Native and Flutter, with the same out-of-the-box metrics provided for native iOS and Android apps, and see all of their mobile observability data in a unified view. Sign up on this page.
ITSI Episode Summarization
Episode summarization provides enterprise support teams with accurate, concise, and contextually rich episode summarization and basic root cause analysis by leveraging LLMs, cutting down the number of clicks from 8-10 down to 1 to get the most relevant context of an episode, including actionable insights. Sign up on this page.
Business Insights in Observability Cloud Alpha Program
Business Journeys, the key feature of Business Insights in Splunk Observability Cloud, empowers business owners and product managers to visualize, analyze, and optimize end-to-end business processes. Leveraging APM and RUM data, it simplifies troubleshooting by correlating technical performance with business impact. Features include up to 50 milestones, auto-discovery, and multi-application connection via transition keys, enabling cloud-based business process optimization. Sign up on this page. Don’t miss the next post. Here’s how to subscribe to this blog and get notified when new content goes live.
... View more