SimData is also a great option. https://dev.splunk.com/enterprise/docs/dataapps/simdata/ ... View more

Splunk Add-on for Microsoft Office 365 replaces Office 365 modular input within Splunk Add-on for Microsoft Cloud Services. Customers who wish to pull Office 365 management activity events are recommended to disable Office 365 modular input within Splunk Add-on for Microsoft Cloud Services add-on and use Splunk Add-on for Microsoft Office 365 instead. Note that source types have changed in Splunk Add-on for Microsoft Office 365 and any panels, dashboards, spl, etc will need to be adjusted. Office 365 modular input is planned to be deprecated in a future release of Splunk Add-on for Microsoft Cloud Services add-on. ... View more

Customers with active support contracts receive the following communication on August 30, 2017; "Since October 2013, our Splunk Enterprise 6.x release train has delivered major advances in functionality, performance and scale. Throughout this time, we have continued to support Splunk Enterprise 5.x customers. However, with the pending launch of Splunk Enterprise 7.0, support for Splunk Enterprise 5.x releases will cease. In accordance with our Support and Maintenance Terms and Conditions, please be notified that Splunk Enterprise 5.x will no longer be supported after November 30, 2017. After this date, maintenance releases and software fixes will also no longer be available. We understand you may still be running a 5.x version of Splunk Enterprise and our Splunk Professional Services team has several service offerings* to assist you with your upgrade. We are available to explore the best options for you to plan and execute a successful migration. Please contact your Splunk account manager or partner with any questions related to our service offerings and to help you establish a migration path that is right for your business. ",From notification sent to customers with active support subscription on August 30, 2017; "Since October 2013, our Splunk Enterprise 6.x release train has delivered major advances in functionality, performance and scale. Throughout this time, we have continued to support Splunk Enterprise 5.x customers. However, with the pending launch of Splunk Enterprise 7.0, support for Splunk Enterprise 5.x releases will cease. In accordance with our Support and Maintenance Terms and Conditions, please be notified that Splunk Enterprise 5.x will no longer be supported after November 30, 2017. After this date, maintenance releases and software fixes will also no longer be available. We understand you may still be running a 5.x version of Splunk Enterprise and our Splunk Professional Services team has several service offerings* to assist you with your upgrade. We are available to explore the best options for you to plan and execute a successful migration. Please contact your Splunk account manager or partner with any questions related to our service offerings and to help you establish a migration path that is right for your business." ... View more