Splunk Cloud Platform

Splunk Cloud Platform Service Description

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Splunk Cloud Platform Service Description Change Log

This change log contains information about updates and changes to the Splunk Cloud Platform Service Description. Starting February 2021, only specific major.minor service descriptions will be updated.

September 2021

Description Splunk Cloud 8.2.x
New Content
Section: Various

U.S. Defense Information Systems Agency (DISA) has granted the Splunk Cloud Platform U.S. Department of Defense (DoD) Impact Level 5 (IL5) Provisional Authorization (PA).

8.2.2105, 8.2.2106, 8.2.2107
Update of Existing Content
Section: Available regions

Splunk Cloud Platform is available in AWS GovCloud US-East

8.2.2105, 8.2.2106, 8.2.2107
Section: Federated search

Federated search now supports Transparent Mode, which simplifies customer migration from hybrid search

8.2.2107
Section: Storage

Splunk manages the encryption keys on your behalf by default. If available in your region, you have the option to manage the encryption keys instead.

8.2.2105, 8.2.2106, 8.2.2107

August 2021

Description Splunk Cloud 8.1.x and 8.2.x
New Content
Section: Experience designations

This section clarifies how to determine your Splunk Cloud Platform Experience. Splunk Cloud Platform has one of two possible Experience designations: Classic or Victoria. Classic Experience and Victoria Experience provide nearly identical capabilities, with certain exceptions that are listed in this section.

8.1.2103, 8.2.2104, 8.2.2105, 8.2.2106
Update of Existing Content
Section: Available regions

Splunk Cloud Platform is available in AWS Mumbai region.

8.1.2103, 8.2.2104, 8.2.2105, 8.2.2106
Section: Data collection

Clarification on lifecycle management of outbound firewall rules by using actual IP addresses provided by Splunk.

8.1.2103, 8.2.2104, 8.2.2105, 8.2.2106
Section: Service limits and constraints

Clarification on the tested limit for the number of Splunk Cloud Platform or Splunk Enterprise local deployments used with federated search.

8.1.2103, 8.2.2104, 8.2.2105, 8.2.2106


June 2021

Description Splunk Cloud 8.1.x and 8.2.x
Update of Existing Content
Sections: Hybrid search and Federated search

Clarification regarding hybrid search and Splunk Premium Solutions like Enterprise Security.
Clarification regarding Federated search support of scheduled searches.

8.1.2103, 8.2.2104, 8.2.2105
Section: Storage

Clarification regarding the different types of storage available (DDAS, DDAA, and DDSS) and formatting changes for ease of navigation.

8.1.2103, 8.2.2104, 8.2.2105

May 2021

Description Splunk Cloud 8.1.x and 8.2.x
New Content
Section: Compliance and certifications

Availability of Information Security Registered Assessors Program (IRAP) subscription in AWS Sydney region.

8.2.2104
Section: Service limits and constraints

Service limit for scheduled searches.

8.1.2101, 8.1.2103, 8.2.2104
Sections: Search and Federated search

Conditions and limitations that apply to Federated search.

8.1.2103, 8.2.2104
Section: Splunkbase and private apps

Splunk Secure Gateway is included in Splunk Cloud Platform starting with release 8.1.2103.

8.1.2103, 8.2.2104
Update of Existing Content
Section: Various

New version of Splunk Enterprise for forwarders, federated search, and hybrid search compatibility.

8.1.2101, 8.1.2103, 8.2.2104
Section: Available regions

Updated to reflect availability of Belgium region for Google Cloud.

8.1.2101, 8.1.2103, 8.2.2104
Section: Maintenance

Section updated to reflect changes to the Splunk Cloud Service Maintenance Policy that are effective starting May 3, 2021.

8.1.2101, 8.1.2103, 8.2.2104
Section: Splunk premium solutions

End of Sale has been announced for Splunk App for Microsoft Exchange and Splunk App for VMware.

8.1.2101, 8.1.2103, 8.2.2104
Section: Supported versions

New versions of Splunk Cloud Platform and ITSI are now available.

8.1.2101, 8.1.2103, 8.2.2104

April 2021

Description Splunk Cloud 8.x version
New Content
Section: Service limits and constraints

There is a maximum tested limit for the self-service private app management.

8.1.2101 and 8.1.2103
Update of Existing Content
Section: Compliance and certifications

Federated search is currently unavailable for regulated (PCI and HIPAA) Splunk Cloud Platform environments.

8.1.2103 only
Section: Differences between Splunk Cloud Platform and Splunk Enterprise

Clarification that Indexer Discovery and Indexer Acknowledgment are not supported in Splunk Cloud Platform.

8.0.x-8.1.2103
Section: Region differences

Admin Config Service (ACS) is now available in Google Cloud regions.

8.1.2101 and 8.1.2103
Section: Network connectivity and data transfer

Clarification that if choosing to use private connectivity in lieu of the public internet for Splunk Web access and sending your data, you must ensure your private connectivity choice can access public endpoints.

8.1.2101 and 8.1.2103
Section: Storage

Clarification on duration of Dynamic Data Active Archive (DDAA) data restoration.

8.1.2101 and 8.1.2103
Section: Subscription types

Clarification on data policies for workload-based and ingest-based subscriptions.

8.1.2101 and 8.1.2103

March 2021

Description Splunk Cloud 8.1.x
New Content
Section: Supported Python versions

Clarification of supported Python interpreters.

X
Section: Supported hybrid search versions

Clarification of supported on-premises Splunk Enterprise versions for hybrid search configurations.

X
Update of Existing Content
Section: Various

Topics are now listed in alphabetical order and content consolidated for ease of navigation. Product names updated to latest.

8.1.2101 only
Section: Various

Clarification of the two available subscription types: workload-based and ingest-based.

8.1.2101 only
Section: Various

This release is the most current for Splunk Cloud FedRAMP.

8.1.2012 only
Section: Current Splunk Cloud Platform and Premium App versions

Updated versions for Enterprise Security and IT Service Intelligence.

X

February 2021

Description Splunk Cloud 8.0.x and 8.1.x Splunk Cloud 8.1.x
Update of Existing Content
Section: Service limits and constraints

Enhancement of the content in Limitations and Additional information for the following service components:

  • HEC maximum content length size
  • Splunk Cloud ID
X

January 2021

Description Splunk Cloud 7.2.x Splunk Cloud 8.0.x and 8.1.x
New Content
Section: Self-service capabilities

New section that summarizes a list of common Splunk Cloud self-service tasks and the primary interface to action.

X
Update of Existing Content
Section: Various

Updated to reflect availability of Paris region for AWS and Canada (Montreal) for Google Cloud.

X
Section: Various

Updated with the ability to perform updates to the IP Allow List by using the Admin Config Service (ACS).

X

December 2020

Description Splunk Cloud 7.2.x Splunk Cloud 8.0.x and 8.1.x
Update of Existing Content
Section: Users and Authentication

Clarification on Admin and system user roles utilized as part of Splunk performing monitoring and maintenance activities on Splunk Cloud environments.

X X
Section: Supported Forwarder Versions

Updated the supported Splunk Cloud versions for forwarder versions 7.3.x and 8.0.x.

X
Section: Current Versions

Updated the version of Enterprise Security (ES) available.

X
Section: Various

Removed any variation of the term managed Splunk Cloud deployment. Updated any variation of the term self-service Splunk Cloud deployment to Splunk Cloud Free Trial and revised content.

X
Section: Various

Updated any variation of the term self-service Splunk Cloud deployment to e-commerce Splunk Cloud deployment in the 7.0.13 and 7.2.9 documentation.

X

November 2020

Description Splunk Cloud 7.2 Splunk Cloud 8.0
Update of Existing Content
Section: Various

Updated to reflect availability of DDAA and DDSS and also the Frankfurt and Sydney regions for Google Cloud.

X
Section: Current Versions

Updated the version of IT Service Intelligence (ITSI) available.

X

October 2020

Description Splunk Cloud 7.2 Splunk Cloud 8.0
Update of Existing Content
Section: Various sections

Updated to reflect that Splunk Cloud FedRAMP now supports version 8.0.2007.

X

September 2020

Description Splunk Cloud 7.2 Splunk Cloud 8.0
Update of Existing Content
Section: Compliance and certifications

Updated to reflect that Splunk Cloud HIPAA is available in GCP regions.

X

August 2020

Description Splunk Cloud 7.2 Splunk Cloud 8.0
New Content
Section: Search

Added to the hybrid search capabilities table to clarify there is no support for hybrid search head clustering.

X X
Section: Differences between Splunk Cloud and Splunk Enterprise

Added to the differences table to reflect Splunk Cloud does not support Indexer Discovery and that Indexer Acknowledgement is supported with HTTP Event Collector (HEC).

X X
Section: Users and authentication

Added that depending on Splunk Cloud version and identity providers (IdP), token based authentication is supported.

X
Section: Enterprise Security Service Limits

Added an entry for ES Automatic Lookups service limits.

X X
Update of Existing Content
Section: Various sections

Updated to reflect that Splunk Cloud in GCP regions are SOC2 compliant.

X
Section: Maintenance

Updated that by default, customers will receive the current version of Splunk Cloud and Premium App subscriptions. If you are on a prior version of Splunk Cloud and Premium App subscriptions, you will be upgraded when Splunk determines you have satisfied the upgrade readiness prerequisites.

X X
Section: Search

Updated the hybrid search capabilities table to clarify hybrid search head version compatibility requirement is major.minor releases.

X X
Section: Current Versions

Updated the version of Enterprise Security (ES) and IT Service Intelligence (ITSI) available.

X

June 2020

Description Splunk Cloud 7.2 Splunk Cloud 8.0
Update of Existing Content
Section: Splunk Premium Solution

Updated section to reflect that Splunk Business Flow (SBF) is no longer available as a Premium Solution. SBF content removed from service description.

X X

May 2020

Description Splunk Cloud 7.2 Splunk Cloud 8.0
New Content
Section: Various sections

Added that Splunk Cloud is available in three Google Cloud (GCP) regions. In addition, there are currently differences in service capabilities between Splunk Cloud in AWS and GCP regions.

X
Section: Performance Considerations

New topic added to clarify Splunk Virtual Compute (SVC) entitlement for ingest-based subscriptions and how to review SVC usage.

X X
Section: Various sections

Splunk Cloud is available in AWS Seoul region.

X X
Update of Existing Content
Section: Maintenance

To ensure efficiency and agility, customers will be assigned to an upgrade cohort and as Splunk releases new versions of Splunk Cloud and Premium Apps, your cohort will be notified by Splunk of the upcoming maintenance window.

X X
Section: Current Versions

Updated the version of IT Service Intelligence (ITSI) available.

X

March 2020

Description Splunk Cloud 7.2 Splunk Cloud 8.0
Update of Existing Content
Section: Search

Updated the hybrid search capabilities table to clarify you can initiate searches from an on-premises Splunk Enterprise search head to a single Splunk Cloud deployment

X X

February 2020

Description Splunk Cloud 7.2 Splunk Cloud 8.0
New Content
Section: Workload Pricing

A new topic was added to describe the newly introduced workload pricing subscription that is an alternate pricing option to ingest-based. This pricing model is based on the resources allocated rather than data volume ingested. Additional information was provided to describe the main differences between workload and ingest-based subscriptions.

X X
Section: Maintenance

Added information that clarifies that Splunk maintains a rolling 30-day history of health and utilization data plus a rolling 7-day daily backup of your ingested data and configuration files to ensure data durability.

X X
Section: Service Limits

Added information that clarifies the Unique Splunk Cloud name chosen by you cannot exceed the 18-character count limit.

X X
Update of Existing Content
Section: Various sections

Updated to provide clarification that Splunk Cloud FedRAMP supports hybrid search. In addition, Federal agencies can request the Cloud FedRAMP package from the FedRAMP Marketplace.

X
Section: Compliance and certifications

With the availability of Splunk Cloud FedRAMP, the legacy GovCloud offering is superseded. GovCloud content removed from service description.

X
Last modified on 21 October, 2021
PREVIOUS
Splunk Cloud Platform Service Details
 

This documentation applies to the following versions of Splunk Cloud Platform: 8.1.2009, 8.1.2011, 8.1.2012, 8.1.2101, 8.1.2103, 8.2.2104, 8.2.2105 (latest FedRAMP release), 8.2.2106, 8.2.2107, 8.2.2109


Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters