Splunk Blogs
Observability
3 Min Read
Splunk releases its newest report, State of Observability 2025: The Rise of a New Business Catalyst.
Featured Articles
Splunk Ranked Number 1 in the 2025 Gartner® Critical Capabilities for Security Information and Event Management Use Cases
Splunk has been ranked as the #1 SIEM solution in all three Use Cases for the second consecutive time in the 2025 Gartner® Critical Capabilities for Security Information and Event Management report.
Introducing Splunk 10: Empowering a Secure and Compliant Future
Announcing the general availability of Splunk Enterprise 10.0 and Splunk Cloud Platform 10.0, the most secure, stable, and modernized platform for a digitally resilient, compliance-ready future.
Splunk Named a Leader in the 2025 Gartner® Magic Quadrant™ for Observability Platforms
Splunk has been named a Leader in the 2025 Gartner® Magic Quadrant™ for Observability Platforms for the third year in a row.
.conf & .conf Go
Powering and Protecting the AI Revolution: A New Era for Splunk and Cisco at .conf25
Splunk's Kamal Hathi recaps our innovation highlights from .conf25, marking a pivotal moment for Splunk and Cisco as we deliver significant new value to our customers that make the use of AI a practical reality in their organizations.
A Recap of .conf25 Splunk Observability Announcements
At .conf25, we unveiled new capabilities in Splunk Observability Cloud that redefine digital resilience in the AI era with smarter detection and investigation of business-critical issues.
Splunk Enterprise Security: Built to Empower Every SOC Analyst
Announcing a transformative update to Splunk Enterprise Security (ES) with 8.2: An AI-powered SecOps platform designed to unify and accelerate threat detection, investigation, and response (TDIR) in one seamless experience.
Powering AI Innovation with Splunk: Meet the Cisco Data Fabric
The Cisco Data Fabric brings AI-centric advancements to the Splunk Platform, seamlessly connecting knowledge, business, and machine data.
In Case You Missed It: 2025 Splunkie Award Winners Announced at .conf25!
Cue the data-powered drumroll – here are your 2025 Splunkie Award winners announced at .conf25!
Announcing the 2025 Splunk Partner Award Winners
Congratulations to the 2025 Splunk Partner Awards winners and our entire partner community on an outstanding year!
Learn
SIEM: Security Information & Event Management Explained
SIEM is a cybersecurity game-changer, especially for large organizations. Learn key SIEM features and functions & how to choose the right SIEM tool.
IT and Technology Spending & Budgets for 2025: Trends & Forecasts
Tech & IT spending is on the rise in 2025 across the globe. Read more on investment trends and see which regions will spend the most.
What Are SLMs? Small Language Models, Explained
Large language models have changed the world. What about small language models? Learn what SLMs are, how they differ from LLMs, and why SLMs are the future.
Telemetry 101: An Introduction To Telemetry
Telemetry is powerful data that can tell you all sorts of important information. Know what you can do with this useful data — get the full telemetry 101 here.
What are SaaS, PaaS, & IaaS?
Yes, the cloud makes work better. But which cloud model is right for you? Understand how SaaS, PaaS, and IaaS works in this ultimate guide.
What is Observability? An Introduction
In this blog post, we'll look at definitions, best practices, and key concepts around Observability in IT.
Latest Articles
Managing your Ingestion with the search bar
Custom searches for drilling down into data in your Splunk Cloud service; Total Ingestion Volume search over time, usage, volume by sourcetype & forwarder.
I can’t make my time range picker pick my time field.
Hadoop, Hunk or Splunk users have a choice in time field settings, can pull data from csv files, use specific searches & filters to achieve usable data subsets.
Configuring Microsoft’s Active Directory Federation Services (ADFS) Security Assertion Markup Language (SAML) Single Sign On (SSO) with Splunk Cloud
Assisting customers with pre-req & integration steps for setting up ADFS-Active Directory Federation Services-SAML for Single Sign On with Splunk Cloud.
How to Create a Modular Alert
Splunk 6.3 users can use API to write modular alerts for apps-notifications, automation, info-gathering. See apps.splunk.com & the official docs for more info.
Handling HTTP Event Collector (HEC) Content-Length too large errors without pulling your hair out
Answer for dealing with HTTP Event Collector (HEC) error message 413 content too large: reset configurable pre-defined limit for max content using limits.conf.
Sending binary data to Splunk and preprocessing it
Send data, text or binary, to Splunk with PDI Protocol Data Inputs App; choose variety of protocols-HTTP POST, UDP, SockJS, TCP & more & binary data payload.
Best Practices in Protecting Splunk Enterprise
Customers use Splunk & Splunkbase Apps for operational visibility to drive business results. Protect admin access, change passwords and define roles carefully.
Eureka! Extracting key-value pairs from JSON fields
Use of Splunk logging driver & HEC (HTTP Event Collector) grows w/ JSON-JavaScript Object Notation; Find answers on extracting key-value pairs from JSON fields.
Subscribe to our blog
Get the latest articles from Splunk straight to your inbox.
Connect with Splunk on X
Follow @Splunk
Connect with Splunk on Instagram
Follow @Splunk
