Working with synthetic data

Because it is a prerequisite for accessing and installing other content packs in your environment, the Splunk App for Content Packs (SA4CP) is a significant part of the architecture supporting Splunk IT Service Intelligence (ITSI) and Splunk IT Essentials Work (ITE Work).

Within the collection of content packs available together with SA4CP, the Content Pack for Splunk Observability Cloud enables IT Service Intelligence (ITSI) and IT Essentials Work (ITE Work) users to visualize and investigate the health of applications that use Splunk Observability Cloud.

From its debut in version 1.0 of SA4CP up to version 1.7 of SA4CP, the Content Pack for Splunk Observability Cloud supported integration with the following products:

• Splunk Infrastructure Monitoring (abbreviated SIM or IMM)
• Splunk Application Performance Monitoring (Splunk APM)
• Splunk Real User Monitoring (Splunk RUM)
• Splunk Synthetic Monitoring (formerly called Rigor)

Splunk acquired Rigor in October of 2020, and subsequently folded its synthetic monitoring capabilities into Splunk Observability Cloud.

How data ingestion changed in SA4CP 1.8

Beginning with version 1.8 of SA4CP, the Content Pack for Splunk Observability Cloud adopted the same product structure as Splunk Observability Cloud itself.

This shift means that SA4CP now supports integration with the following products:

• Splunk Infrastructure Monitoring (abbreviated SIM or IMM, and it now includes Splunk Synthetic Monitoring)
• Splunk Application Performance Monitoring (Splunk APM)
• Splunk Real User Monitoring (Splunk RUM)

Getting synthetic data into Splunk App for Content Packs

The following table outlines the evolution of Splunk App for Content Packs relative to how it supports the ingestion of synthetic data. Note that the Splunk Infrastructure Monitoring Add-on assumed the functionality of the legacy Splunk Synthetic Monitoring Add-on over time:

Splunk App for Content Packs version	IMM, APM, and RUM data ingestion method (getting data in)	Synthetic data ingestion method (getting data in)
1.0 to 1.7	SIM add-on	Splunk Synthetic Monitoring Add-on (aka Rigor)
1.8	SIM add-on	SIM add-on
1.9	SIM add-on	SIM add-on
2.0	SIM add-on	SIM add-on
2.0.x	SIM add-on	SIM add-on

If you use Rigor

Rigor will not be supported or available after February 28, 2024. If you're using Rigor, however, you can still use the Splunk Synthetic Monitoring Add-on and the Content Pack for Splunk Synthetic Monitoring (downloaded separately) to pass synthetic data into the Splunk App for Content Packs.