Splunk Cloud Platform

Splunk Cloud Platform Admin Manual

Acrobat logo Download manual as PDF

Acrobat logo Download topic as PDF

Use the Maintenance dashboard

The Maintenance dashboard shows upcoming and past maintenance windows for Splunk initiated changes.

Currently, the Maintenance dashboard does not display any maintenance information for AWS GovCloud Splunk Cloud Platform deployments.


The Maintenance dashboard requires token authentication to be enabled. See Enable or disable token authentication to learn how.

Enabling token authentication doesn't impact CMC availability and requires no maintenance or downtime.

If you're using a Splunk Cloud Platform version lower than 9.0.2208 and SAML authentication, the Maintenance dashboard requires authentication extensions to be enabled or an identity provider that supports Attribute Query Request. See Configure Splunk Cloud Platform to use SAML for authentication tokens to learn more.

Review next maintenance window

If you have a scheduled maintenance window, you'll see a panel with information about your next maintenance window. This panel provides a timestamp, maintenance ID number, and progress timeline.

Select Configure global banner to get a sample message you can use to display a global banner that informs users about the next maintenance window.

Review upcoming and past maintenance windows

You can review upcoming and past maintenance windows in the Maintenance dashboard. Filter by Upcoming, Past, or All using the dropdown selection. The default display shows Upcoming maintenance windows.

The Upcoming filter shows upcoming maintenance windows for the next 30 days. The Past filter shows past maintenance windows for the past 180 days.

If there are no maintenance windows in this dashboard, there are no Splunk initiated updates scheduled on your stack for the next 30 days or in the past 180 days.

The Maintenance windows table shows maintenance windows and their following details:

Field Description
ID Unique ID for the maintenance window.
Maintenance type Splunk Cloud Service has three classes of maintenance types:
  • Service Updates
  • Routine Maintenance
  • Emergency Maintenance

See https://www.splunk.com/en_us/legal/splunk-cloud-service-maintenance-policy.html?locale=en_us to learn more.

Operation type Type of maintenance being performed. Currently, only the Splunk Upgrade operation type is shown. The Splunk Upgrade operation type refers to a Splunk Cloud Platform version upgrade.
Start time Refers to when the maintenance occurred for Past maintenance windows and refers to when the maintenance will occur for Upcoming maintenance windows. The start time is the local time that your Splunk Cloud Platform stack is set to.
Status The current state of the maintenance window. The maintenance window status is updated at around 7:00pm PST daily, and does not reflect real time status.
Duration The length of time the maintenance window will last. This value is an estimate for upcoming maintenance windows and an actual time for past maintenance windows.
Last updated When information for this maintenance window was last updated.
Operations Tasks required for maintenance.

Select a maintenance window to view a brief description of the maintenance being performed, operation type, target version, and timeline.

The Operation type and Status values come from the Admin Config Service (ACS) API. To learn more about viewing maintenance windows with the ACS API, see View maintenance windows in the Splunk Cloud Platform Admin Config Service Manual.

Review the upcoming maintenance window operations and timeline

The Upcoming maintenance dashboard displays operation details and a progress timeline panel. Select Operations to view a description, the operation type, and target version for the operation. Select Timeline to view a timeline for the operation.

In CMC version 3.6.0, the timestamps represent the last time the status was updated, which might not be when the actual event occurred.

The timeline provides the following statuses:

Status Description
Tentative Splunk has tentatively scheduled a maintenance window.
Confirmed Splunk has confirmed the maintenance window.
InProgress Splunk is currently performing the maintenance.
Completed Splunk has successfully completed at least one maintenance operation.
Canceled Splunk or the customer has cancelled the maintenance window.

Add an upcoming maintenance window to your calendar

Select the calendar icon next to any confirmed upcoming maintenance window to download a .ics file. To add the event to your calendar, import this file to your calendar application.

The information in the .ics file does not update if any changes made to to the upcoming maintenance window.

Last modified on 11 April, 2024
Use the Health dashboard
Use the Alerts panel

This documentation applies to the following versions of Splunk Cloud Platform: 9.0.2303, 9.0.2305, 9.1.2308 (latest FedRAMP release), 9.1.2312

Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters