What if there was a way you could keep all the metrics data you need while saving on storage costs? This is now possible with the launch of Archived Metrics in Splunk Infrastructure Monitoring for US-AWS customers! Archived metrics is a new data platform capability within Metrics Pipeline Management that allows you to dynamically sort and store metrics data that are less critical in a low-cost data tier for cheaper than real-time storage. Need to use those stored metrics for an ad-hoc analysis? Use Route Exceptions to create rules and re-direct the subset of metrics you need into the Real-Time tier! The new "Archived Metrics" tier extends the powerful metrics aggregation and filtering capabilities of Metrics Pipeline Management, giving you multiple benefits, including: 1. Better cost control: save significantly on your monitoring bills, up to 85%, by using Archived Metrics for high cardinality data 2. Better service reliability: improve your query performance with your charts and detectors operating on aggregated metrics  3. Better data management: gain access to granular customer-level data for pinpoint incident investigation or customer issue resolutions. Check out this video to learn more!   Got more questions? Our Product Documentation can help you out. Archived metrics is available on April 23rd in US0 and US1 - AWS realms. Other regions will follow next. Happy Splunking! ... View more

We’re excited to announce the extended availability of one of Splunk Observability Cloud’s flagship features called “Related Content” for our Splunk Cloud Platform users.  What is it? Related Content for Splunk Cloud is a capability that allows you to bring and view real-time metrics and trace data (from Splunk Infrastructure Monitoring and APM) in Splunk Cloud Platform’s search interface. You can now add key context to your logs during an investigation, accelerating root cause analysis. Why does it matter? Because you’ll be able to drill into your events in more detail directly in Splunk Cloud Platform instead of switching tools, reducing the swivel chair experience of moving between different products.  Not only that but once you’ve identified the problem, you get easily redirected into Splunk Observability Cloud with just one click so you can resolve it quickly in a purpose-built no-code interface. What does this look like? Here are screenshots of what the interface looks like: In Splunk's search and reporting UI, you will now see a new column called "Related Content" for those events whose IM and APM data can be queried from Splunk Observability Cloud and previewed in Splunk Cloud. Looks great! How do I get this? If you’re already a Splunk Cloud 9.1.2312 and a Splunk Observability Cloud user, great news - you can enable this for free. Just have your admin take a look at this product documentation to make sure you get access If you still need to get Splunk Observability Cloud, you can try it for free for 14 days! Keep on Splunking! Joanna ... View more

Raise your hand if you’ve already forgotten your username or password when logging into an account. (We can’t actually see if you’re raising it but we’re assuming you did.) No more at Splunk! Now, you can use your Splunk Cloud Platform as your identity provider (IdP) to sign in to Splunk Observability Cloud. This means that you don’t need to have a separate username or password to log into your Observability Cloud account, instead, you can use the credentials from Splunk Cloud Platform to get to your Splunk APM, Infrastructure Monitoring, RUM or Synthetics product for a more seamless login experience. And yes, you can now use a Single Sign On (SSO) to log into Splunk Observability Cloud, isn’t that better? With Unified Identity, you get the following Faster Login Experience: You can now use the same credentials to log in to Splunk Cloud and Splunk  Observability Cloud via SSO Secure and bi-directional data access: by making Splunk Cloud your main identity provider, your Splunk Cloud’s role-based access control is honored in Splunk Observability Cloud Faster Mean Time to Resolve: As Splunk Cloud and Splunk Observability Cloud users, you can access both platform’s data seamlessly based on your needs for a more unified and flexible experience Check out the documentation where you can see how your Splunk Admins can enable this feature for you in just a few minutes. Important note, the AWS region for your Splunk Cloud Platform instance must be the same as your Splunk Observability Cloud instance realm. Have specific questions? Reach out to your representative who will guide you through the process of setting up “Unified identity” to your organization. Keep on Splunking! ... View more

We are pleased to announce that the Splunk Observability Cloud platform will now offer additional Role-Based Access Control roles for more restrictive functional control across the platform.  In addition to existing admin and user roles, we are launching “read_only” and subscription “usage” roles. “Read_only” will provide viewing-only privileges while the “usage” role will grant users the ability to access subscription data without the need to be full-fledged admins. Now you get more flexibility when it comes to choosing the right roles for your users! Key features include: Introducing a new capability-based RBAC framework with new “read_only” and “usage” roles along with existing Admin and User roles New APIs to assign users with roles APIs will honor capabilities based on their role defined to their token; For e.g. User Tokens will inherit individual users' role capabilities and org tokens can be assigned with an available predefined role Both new roles will be automatically available for all Splunk Enterprise customers this week. Along with this release, we wanted to notify our users of a change in our naming nomenclature: we are renaming the existing “User” Role to “Power” Role. The role name change will occur by the end of the February 5th week. You can find more details on this change in our community post here Thank you for being a loyal Splunk customer! ... View more

Go from in-context troubleshooting to in-depth log analysis in one click We’re making it easier for Observability Cloud users to seamlessly bring their log data into Splunk Cloud or Enterprise Platform. With our new “Open in Splunk platform” button available in our Log Observer UI, engineers wishing to analyze their logs in more detail can easily transpile the logs from Observability Cloud to Splunk Cloud and take advantage of best-in-class logging capabilities. Log Observer Connect users will be able to swiftly jump from in-context troubleshooting to deep-dive log investigations in one unified platform. What does that look like? Open your Log Observer in Observability Cloud: A new "Open in Splunk platform" appears! After one click, you are redirected into Splunk platform and your logs appear now in the "Search and Reporting"  interface. Main benefits Seamless access for consistency: With one click, your logs in Observability Cloud get transpiled into Splunk Search and Reporting and your filters are converted into SPL  Extended log analytics: Slice and dice your observability log data in greater detail for your most complex troubleshooting and monitoring use cases  Best of both worlds:  Hannah Montana knows it best. With Splunk, you can combine Splunk platform’s best-in-class and powerful search and visualization capabilities with Splunk Observability Cloud’s full-fidelity data in one flexible multipurpose platform.  How to get started If you're a Log Observer Connect user, the new "Open in Splunk platform" button will appear automatically! You can also take a look at our updated docs for more detailed information on how this works. Not a LO Connect customer yet? Reach out to your account representative to learn all about the many advantages of combining Splunk platform with Splunk Observability Cloud!  ... View more

This quarter, the Splunk Observability team is unveiling brand new capabilities to help you get ahead of your issues and provide high quality digital customer experiences. Read on to learn more about how you can do more with your Splunk investment and start improving your investigating and monitoring practices today! Better consolidation with Splunk Platform Unified Identity Experience between Splunk Platform and Observability Cloud - GA: You can now seamlessly access Splunk Cloud and Splunk Observability data with one same user identity! As you’re investigating an issue in Splunk Cloud Platform, you can maintain context and effortlessly navigate into Splunk Observability Cloud with our new single sign on feature. We’re also making it easy for Splunk admins to manage user data access by extending Splunk Cloud’s role-based access control in Splunk Observability Cloud, so that meeting internal compliance requirements is no longer a headache. For more info, take a look at our technical documentation here. Note: this feature is currently only available for new Observability customers. A version for current Observability customers will be available soon. The Splunk Distribution of the OpenTelemetry Collector as an Add-On for Splunk - Preview: If you're a Splunk customer who relies upon Splunk Deployment Server or other tools to manage your Technical Add-ons (TA) and .conf files, getting started with and using Splunk Observability Cloud just got a whole lot easier! You can now deploy, update, and configure OpenTelemetry Collector agents in the same manner as any add-on. With this, you can quickly gain deep insight into the health, structure, and status of your technical infrastructure and services with Observability Cloud, and you can more easily manage your OpenTelemetry Collector agents at scale. More visibility of your environment Session Replay for RUM - Preview With Session Replay, a new capability for Splunk RUM, users can gain visibility into end-user impact with a video reconstruction of every user interaction, correlate replay with the session waterfall view of granular user session data to quickly debug issues and reduce MTTR, and protect end-user PII with built-in text and image redaction options. Register here for the preview! RUM and Synthetics Regional Expansion Good news! We’ve expanded the regional availability of our DEM products. RUM is now available in Australia while Synthetic Monitoring is accessible for our European users. Need a quick refresher on what these capabilities can do for you? Take a look at our technical documentation for RUM here and for Synthetics here. The Splunk Distribution of the OpenTelemetry Collector as an Add-On for Splunk - Preview: If you're a Splunk customer who relies upon Splunk Deployment Server or other tools to manage your Technical Add-ons (TA) and .conf files, getting started with and using Splunk Observability Cloud just got a whole lot easier! You can now deploy, update, and configure OpenTelemetry Collector agents in the same manner as any add-on. With this, you can quickly gain deep insight into the health, structure, and status of your technical infrastructure and services with Observability Cloud, and you can more easily manage your OpenTelemetry Collector agents at scale. Chrome Script Importer - Preview: Splunk Synthetic Monitoring’s Chrome Script importer captures precise user actions and complex user flows across multiple pages to replicate interactions and generate test scripts covering various scenarios and user journeys. By simplifying and automating browser test creation, engineering teams can ensure tests resemble actual user experiences and gain a more reliable understanding of functionality and performance. Register here for the preview! Infrastructure Monitoring - Kubernetes Navigator Enhancements - GA:  Splunk delivers enhanced visibility and accelerated troubleshooting for Kubernetes environments with the latest enhancements to the Kubernetes navigator in Splunk Infrastructure Monitoring. While customers have always enjoyed the hierarchically-structured out-of-the-box Kubernetes monitoring solution with real-time metrics and cloud-native scale, the latest enhancements provide customers one-step, zero-configuration installation, detailed full-stack navigation experience, additional visibility into control planes for all layers of the Kubernetes systems and their hosted microservice workloads. For more info, take a look at our technical documentation here. APM Service Centric Views - Preview: APM Service Centric Views give engineers a deep understanding of service performance in one centralized view. Now, across every service, engineers can quickly identify errors or bottlenecks from a service’s underlying infrastructure, pinpoint performance degradations from new deployments, and visualize the health of every third party dependency. Click here to sign up for the private preview, and watch this brief video overview. More bang for your buck ITSI - Outlier detection - GA: Along with improved UI, machine learning driven outlier detection lets you exclude historical outliers from calculations to improve threshold accuracy. You can now analyze and tune KPI thresholds side by side with a historical view from thresholding dashboards in the Content Pack for Monitoring & Alerting. For more information, take a look at our technical documentation here. ITSI - ML-Adaptive threshold - Preview:  ML-assisted Adaptive Thresholding delivers one-click configuration of adaptive thresholds to drive even faster time to value and accuracy. Using state-of-the-art machine learning, underlying seasonality and patterns in the historic KPI data are identified to recommend optimized configurations for time policies, and threshold levels with corresponding severities. Sign up for the preview here.  ITSI - Service Sandbox - Preview: Splunk ITSI Service sandbox enables users to map services directly in the UI, reducing service decomposition time. In a pre-production environment, easily and quickly add, manage, and edit services, link service dependencies, and share with dependent teams, prior to publishing to production. This sandbox environment allows teams to experiment and ensure services won’t break, before they’re in production. Zero Configuration for OpenTelemetry (continuous improvements) -  Splunk OpenTelemetry Zero Configuration Auto-instrumentation automatically discovers and instruments your back-end applications to capture and report distributed traces to the Splunk Distribution of the OpenTelemetry Collector and then on to Splunk APM. This removes the need to deploy the language instrumentation agent and configure each service, and enables customers to start streaming their traces and monitor their distributed applications with Splunk APM in minutes. Splunk OpenTelemetry Zero Configuration Auto-instrumentation is available for Java applications running in Linux, Windows, and Kubernetes.  Splunk Observability Cloud - Service Level Objectives - Preview: With this new feature within Splunk Observability Cloud, available to users at no additional cost, customers can now track the reliability and performance of their services with Service Level Objectives (SLOs). This new feature gives customers the functionality to create and view SLOs throughout Splunk Observability out-of-the-box in an integrated experience to easily measure reliability and user experience and align business needs to engineering reliability goals. Sign up for the preview here. Try these capabilities today! If you’re already an Observability Cloud user you can get started today by following the links we’ve provided to documentation. For Splunk Cloud or Enterprise users, start an Observability Cloud trial today! ... View more