Splunk Cloud Platform

Splunk Cloud Platform Admin Manual

Acrobat logo Download manual as PDF

Acrobat logo Download topic as PDF

Use the Maintenance (preview) feature

The Maintenance (preview) feature provides information about your deployment such as maintenance window updates in the CMC version 3.3.0 and higher.

If you're using a Splunk Cloud Platform version lower than 9.0.2208 and SAML authentication, the maintenance window feature requires authentication extensions to be enabled or an identity provider that supports Attribute Query Request. See Configure Splunk Cloud Platform to use SAML for authentication tokens to learn more.

Preview features are provided by Splunk to you "as is" without any warranties, maintenance and support, or service level commitments. Splunk makes this preview feature available in its sole discretion and may discontinue it at any time. Use of preview features is subject to the Splunk General Terms.


The features in the Maintenance (preview) tab require token authentication to be enabled. See Enable or disable token authentication to learn how.

Enabling token authentication doesn't impact CMC availability and requires no maintenance or downtime.

Review upcoming and past maintenance windows

You can review upcoming and past maintenance windows on the Maintenance (preview) page.

The Upcoming maintenance tab shows upcoming maintenance windows and their following details:

Field Description
ID Unique ID for the maintenance window.
Maintenance type Type of maintenance being performed. Currently, only the Splunk Upgrade maintenance type is shown during this preview period. The Splunk Upgrade maintenance type refers to a Splunk Cloud Platform version upgrade.
Scheduled time When the maintenance will occur. The scheduled time is the local time that your Splunk Cloud Platform stack is set to.
Description A brief description of the maintenance being performed.
Scheduler Who initiated the maintenance. For Splunk Upgrade maintenance types, the scheduler is splunk.
Status The current state of the maintenance window. The maintenance window status is updated at around 5:00pm PST daily, and does not reflect real time status.

The Past maintenance tab shows a list of maintenance windows that have already occurred. Select an arrow next to a maintenance window to expand its details.

The Maintenance type and Status values come from the Admin Config Service (ACS) API. To learn more about viewing maintenance windows with the ACS API, see View maintenance windows in the Splunk Cloud Platform Admin Config Service Manual.

Review the upcoming maintenance window timeline

In CMC version 3.6.0, the Upcoming maintenance window tab includes a progress timeline.

In CMC version 3.6.0, the timestamps represent the last time the status was updated, which might not be when the actual event occurred.

The timeline provides the following statuses:

Status Description
Scheduled Splunk has scheduled a maintenance window.
CommsInitiationSent Splunk has notified the customer about the maintenance window.
Skipped Splunk has skipped this maintenance window.
Canceled Splunk has cancelled the maintenance window. This can happen before or during the start of the maintenance window.
Declined The customer has cancelled the maintenance window.
Completed At least one maintenance operation for the given maintenance window is successfully completed. The Splunk Upgrade maintenance type is a single operation, so this status indicates a successful Splunk upgrade.
Last modified on 13 February, 2023
Use the Health dashboard
Use the Alerts panel

This documentation applies to the following versions of Splunk Cloud Platform: 8.2.2112, 8.2.2201, 8.2.2202, 8.2.2203, 9.0.2205, 9.0.2208, 9.0.2209 (latest FedRAMP release), 9.0.2303

Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters