Splunk Cloud Platform

Release Notes

Deprecated and removed in Splunk Cloud Platform

This page lists features for which Splunk Inc. has deprecated or removed support in this version of the Splunk Platform.

What are "deprecated" and "removed" features?

  • Deprecated features continue to work and Splunk supports them until support is removed. However, customers need to begin planning now for the future removal of support.
  • Removed features are features that Splunk no longer supports and no longer work with the Splunk platform. Customers must find alternatives to removed features.

Deprecated features

The following table summarizes the features that are deprecated. These features continue to be supported, but Splunk reminds customers that deprecated features might be removed in a future release.

Deprecated feature What do I need to know? First deprecated
Deprecation of exporting PDFs, scheduling PDF delivery, and printing PDFs with Classic Simple XML dashboards. Exporting dashboard PDFs, scheduling PDF delivery, and printing PDFs with Classic Simple XML dashboards is deprecated and will be removed in a future release. Version 9.3.2408
The Splunk platform REST API spawn_process parameter is deprecated. Do not use the spawn_process parameter. It is deprecated and will be removed in a future release. Version 9.2.2403
The /services/search/commands REST API endpoint is deprecated. The undocumented /services/search/commands REST API endpoint is deprecated and will be removed in a future release. If you have been inadvertently using this endpoint, stop using it. Version 9.1.2312
Deprecated Splunk platform search execution methods The phased_execution_mode setting is deprecated. Contact Splunk Support to remove this setting from the limits.conf file for your Splunk Cloud Platform deployment if your users get the following warning message: Contact your administrator to remove the 'phased_execution_mode' setting in limits.conf, so this message is not displayed again. Version 9.0.2305
jQuery 3.5 by default Splunk Cloud Platform now uses jQuery 3.5 by default. The self-service toggle in the UI to re-enable the old jQuery libraries has been removed. Splunk Cloud administrators can no longer choose to enable lower versions in the Internal Library Settings. Users must use the version 3.5 jQuery libraries that are packaged with the Splunk platform by default. Splunk will remove support for all older versions of jQuery in a future release. Version 9.0.2305
Select version 1.0 endpoints for the Search API are deprecated New Semantic Versioned Rest API endpoints for search are being introduced to improve platform contracts and resiliency to platform updates. A deprecation period is being announced to allow customers and app developers to update the usage of these endpoints to the new API version, Search API version 2.0.

See Semantic API versioning in the Splunk Cloud Platform REST API Reference Manual.

Version 9.0.2208
Deprecated use of the _reload action with the rest search command Use of the _reload action with the rest command is deprecated. Do not use the _reload action with the rest command. Version 9.0.2208
Disabled audit search command The previously deprecated audit search command is now disabled for all customers as of 8.2.2203. Version 8.2.2203
Disabled createrss command The previously deprecated createrss command is now disabled for all customers as of 8.2.2203. Version 8.2.2203
HTML Dashboards Deprecation As of Splunk Cloud Platform 8.2.2105 and Splunk Enterprise 8.2, Splunk has deprecated HTML Dashboards. If you choose to continue to use HTML dashboards, you are responsible for maintaining the dashboards. You can rebuild your HTML dashboards in Dashboard Studio. Version 8.2.2105

Removed features

Removed feature What do I need to know? First deprecated
Internal Library Settings The Internal Library Settings page is removed. Deprecated libraries and unsupported hotlinked imports are restricted, and Splunk Cloud Platform no longer offers a self-service option to use them. For more information about Internal Library Settings, see Control access to jQuery and other internal libraries in the jQuery Upgrade Readiness manual. Version 9.2.2403
The relevancy command is removed. Do not use the relevancy command. Version 9.1.2312
The timeout argument for the append command is removed. Do not use the timeout argument. It has no effect on searches. Version 9.1.2312
Removal of the populate_lookup alert action The legacy alert action, populate_lookup, has been removed. Use the lookup alert action instead. Version 9.1.2308
Stats V1 removal Version 1 of the stats command has been removed and replaced with version 2 of the stats command. Version 9.0.2303
Removed file command The previously disabled filecommand is now removed for all customers as of 9.1.2312. Prior to version 8.2.2202
The etc/searchscripts directory Support for the etc/searchscripts directory has been removed, as of version 8.2.2201. All search commands must now be declared in the commands.conf file. Prior to version 8.2.2201
Offload UI state from SHC conf The ability for Apps to specify custom user interface preferences via ui-prefs.conf such as time picker has been removed. This means that application specific UI preferences will not be applied. Users will still be able to set their UI preferences. Version 8.2.2105
Removed biased language Biased language has been removed from the Splunk Web UI, in keeping with Splunk's commitment to equality in our actions and products. Version 8.2.2105
Documentation set improvements In response to customer feedback, the information in the Splunk Cloud User Manual has been added to the Splunk Cloud Platform Admin Manual and the Splunk Cloud Security Manual, and the Splunk Cloud User Manual has been removed from the documentation set. Version 8.2.2105
Removed ability to convert dashboards to HTML This option is no longer available to users in Splunk Web. Prior to version 8.0.2004
Last modified on 07 January, 2025
Known and fixed issues for   Splunk Cloud Platform Field alias behavior change

This documentation applies to the following versions of Splunk Cloud Platform: 9.3.2408


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters