Release notes

Review what is new in this release of Machine Data Lake.

What's new

Machine Data Lake is available in supported Splunk Cloud Platform environments that are enabled and entitled for Machine Data Lake. Use Machine Data Lake to land supported logs and events through supported landing workflows, discover landed data in the Catalog, and promote selected data to the search or analytics path that matches your goal. Before onboarding, confirm the eligible build, region, entitlement, and provisioning status for your environment.

  • Land machine data in raw tables through supported landing workflows.

  • Discover raw and promoted datasets in the Catalog, and inspect metadata, fields, field values, and promotion history.

  • Promote selected raw data by using static promotion to an analytics table, static promotion to a Splunk index, or streaming promotion to a Splunk index.

  • Track promotion jobs and manage promoted datasets after promotion jobs complete.

Known limitations

  • Lookup-based processing is not supported for Machine Data Lake promotions in this release.

Known issues

Issue number Description
PX-10999

Streaming promotion preview might fail if you select All time for the time range. To preview all available data, select a custom time range and set the start date to a date after January 1, 1970.

SCP-85401

Users who are granted Query and view access to a analytics table created by static promotion might be unable to search that dataset. The search can fail with an error that the dataset cannot be found or that the user is not authorized to access it, even when the dataset is visible in the Catalog. Until this issue is resolved, use an administrator account to search the promoted dataset.

Entitlements

Machine Data Lake availability and entitlements can depend on your Splunk Cloud Platform subscription and Cisco Data Fabric (CDF) entitlement. For entitlement details, see Splunk Cloud Platform Service Details.