Convenience and performance are improved with new functions such as Metrics and SmartStore!

Splunk Enterprise 7.3 Key Additions

今回リリースされた「Splunk Enterprise 7.3」では、下記の機能が追加されています。

Add Splunk Metrics Workspace to Search App

We have added the ability to easily visualize metric data within SearchApp. It is now possible to analyze from GUI operations without search statements.

Workload management enhancements

With the addition of the allocation division "Category", more flexible resource allocation is now possible.

  • Categories are search, capture, and other classifications of Splunk features that can be grouped together into multiple pools. In addition to resource allocation by pool, resource allocation by category and resource sharing function between pools in the same category have been added.

Added token-based authentication function (REST API)

Added token-based authentication function that does not use ID/password in REST API function.

  • An authentication method has been added, and it is now possible to select one according to the application.

SmartStore extension

Report acceleration and data model acceleration can now be used when using SmartStore.

  • By using the acceleration function even when using SmartStore, it is now possible to obtain search results at high speed.

Version 7.2 only supported using SmartStore in an indexer cluster environment, but version 7.3 now supports use in a standalone environment as well.

Click here for function information of past and other versions