Splunk® Data Stream Processor

Release Notes

On April 3, 2023, Splunk Data Stream Processor reached its end of sale, and will reach its end of life on February 28, 2025. If you are an existing DSP customer, please reach out to your account team for more information.

All DSP releases prior to DSP 1.4.0 use Gravity, a Kubernetes orchestrator, which has been announced end-of-life. We have replaced Gravity with an alternative component in DSP 1.4.0. Therefore, we will no longer provide support for versions of DSP prior to DSP 1.4.0 after July 1, 2023. We advise all of our customers to upgrade to DSP 1.4.0 in order to continue to receive full product support from Splunk.

Deprecated and removed features

This page lists features that Splunk Inc. has deprecated or removed in the . It also lists features that are planned for deprecation or removal in a future release. This information is provided for your planning purposes.

What does "deprecated" mean?

Deprecated features continue to work and Splunk supports them until support is removed. However, customers need to begin planning now for the future removal of support.

Any beta features that are deprecated adhere to the Splunk Pre-Release Software License Agreement. Splunk is not obligated to support beta features.

What does "removed" mean?

Removed features are no longer supported and cannot be used anymore. Customers must find an alternative to using the feature.

Features planned for deprecation or removal

The following table summarizes the features that will be deprecated or removed in a future release. Deprecated features continue to be supported, but Splunk reminds customers that deprecated features might be removed in a future release. This notice is provided for planning purposes, and best practices are to limit the use of the features described in this table.

Name of feature to be deprecated or removed What do I need to know?
Support for Ubuntu 18.04 Ubuntu 18.04 LTS has reached the end of its five-year LTS window in April 2023, and DSP will be deprecating support for Ubuntu 18.04 LTS in a future release.

Deprecated features

The following table summarizes the features that are deprecated.

Deprecated feature What do I need to know? First deprecated
The Extract Timestamp function The Extract Timestamp function is replaced with the Apply Timestamp Extraction function. Version 1.2.0
The Merge Events function The Merge Events function is replaced with the Apply Line Break function. Version 1.2.0
The following connectors:
  • Apache Pulsar Connector (SSL Authentication)
  • Connector for Amazon Kinesis Data Streams
  • Connector for Microsoft Azure Event Hubs
  • No-Authentication Connector for Kafka
  • SSL Connector for Kafka
 The deprecated connectors have been replaced by the following connectors, which specifically support source functions only or sink functions only:
  • Apache Pulsar Source Connector (SSL Authentication)
  • Connector for Amazon Kinesis Data Streams Source
  • Connector for Amazon Kinesis Data Streams Sink
  • Connector for Microsoft Azure Event Hubs Source
  • Connector for Microsoft Azure Event Hubs Sink
  • No-Authentication Connector for Kafka Source
  • No-Authentication Connector for Kafka Sink
  • SSL Connector for Kafka Source
  • SSL Connector for Kafka Sink

After upgrading DSP to version 1.3.0, you'll need to recreate your connections using these new connectors and update your pipelines to use the new connections. See Upgrade the Splunk Data Stream Processor to 1.3.0 in the Install and administer the Data Stream Processor manual for more information.

Version 1.3.0
The /streams/v3beta1/files endpoint. Use the /streams/v3beta/lookups endpoint to upload a new CSV lookup file. Version 1.3.0
Support for Ubuntu 16.04 LTS Ubuntu 16.04 LTS reached the end of its five-year LTS window on April 30th 2021, and DSP deprecated support for Ubuntu 16.04 LTS after version 1.3.0. Users running DSP on Ubuntu 16.04 LTS were recommended to update their system to Ubuntu 18.04 LTS. Version 1.3.1

Removed features

The following features have been removed from the as of version 1.4.0.

Pull-based connectors

As of version 1.4.0, DSP will no longer support the following source connectors:

  • Amazon CloudWatch
  • Amazon S3
  • Amazon metadata
  • Microsoft Azure Monitor
  • Google Cloud Monitoring
  • Microsoft 365

Streaming ML Plugin

As of version 1.3.0, the Streaming ML Plugin is no longer packaged with the . You won't be able to use any of the machine learning functions that were included in the Streaming ML Plugin. Make sure that you remove all machine learning functions in your pipelines before the upgrade. Upgrading without removing ML functions will result in unexpected product behavior. See Upgrade the Splunk Data Stream Processor to 1.3.0 for more information.

The machine learning functions that were removed as part of the Streaming ML Plugin are:

  • Adaptive Thresholding
  • Apply ML Model
  • Datagen
  • Drift Detection
  • Pairwise Categorial Outlier Detection
  • Sentiment Analysis
  • Sequential Outlier Detection
  • Time Series Decomposition (STL)
  • estdc
  • perc
Last modified on 29 October, 2024
Fixed Issues for DSP   Third-party credits in Splunk DSP

This documentation applies to the following versions of Splunk® Data Stream Processor: 1.4.6

Acrobat logo Download manual
Acrobat logo Download this page

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters