.conf24: Splunk Unveils Next-Generation Data Management Experience at the Edge and Beyond

SAN FRANCISCO and LAS VEGAS – June 12, 2024 – Splunk, the cybersecurity and observability leader, today announced new data management innovations that provide customers richer, unified visibility across their enterprise and help achieve more comprehensive data ownership. Through the new Splunk Data Management portfolio, customers can send, share and process their data across Splunk Cloud Platform and Splunk Observability Cloud.

IT environments are becoming more difficult to navigate as data growth at the edge, on-prem and cloud is exploding. Organizations are having to capture, store and protect more data while overseeing sprawling and siloed services and tools. This lack of centralized visibility can be costly — it’s shown downtime can cost Global 2000 companies $400B annually and stock values can plunge by up to 9 percent after a single downtime incident. To keep systems up and running, organizations need complete visibility across their enterprise to optimize investments, improve data economics and advance digital resilience.

Through Splunk’s new Data Management capabilities, organizations can preprocess data through a single pipeline and achieve end-to-end visibility. The centralized experience enables SecOps, ITOps and engineering teams to have greater control over the shape, volume and destination of their data and unify the collection of their metrics and logs.

“Not all data is created equally, and its value changes over time. Organizations need solutions that simplify the data management experience while enabling them to retain control and ownership of their data,” said Tom Casey, SVP and GM, Products & Technology. “That’s why we are thrilled to launch these new Data Management capabilities so organizations can harness true control over their data pipeline.”

Available or upcoming innovations within the new Splunk Data Management portfolio include:

• Pipeline Builders — powered by SPL2 — enable customers to filter, mask, transform and enrich their data, helping to simplify data processing and reduce incurring weighty costs. Customers now have choice of pipeline management: Edge Processor as a customer-managed offering for those who want more control over data before it leaves their network boundaries; and the new Ingest Processor as a Splunk-hosted offering for customers all-in on cloud.
• Ingest Processor unifies data management across Splunk Platform and Splunk Observability Cloud. This innovation introduces the ability to convert logs to metrics and route them to Splunk Observability Cloud as an endpoint, in addition to Splunk Cloud Platform or Amazon S3, for more effective volume control and response time.
• As announced at AWS re:Inforce 2024, Splunk’s new Federated Analytics feature enables customers to analyze data sources across Splunk and certain external data lakes, starting with Amazon Security Lake. Splunk’s Federated Analytics feature will become available in private preview in July 2024.

Supporting Quote:

“At Travelport, we currently use multiple tools to monitor and generate usage reports of our application,” said Ashok Uppalapati, Director of Engineering at Travelport. “With Ingest Processor, we will be able to consolidate reports into Splunk Observability Cloud, leveraging Logs2Metrics functionality powered by Splunk Data Management Ingest Processor, enabling all our teams to use a unified reporting and monitoring platform and empower stronger cross-team collaboration.”

Availability:

The Data Management pipeline builder Edge Processor is now generally available to all global regions, and Ingest Processor will be generally available in multiple regions in July 2024. Federated Analytics will be in private preview in July 2024.

For more details on all of Splunk’s .conf24 announcements, please visit our newsroom. Availability dates and regions are subject to change.