Deprecated and removed in Splunk Cloud Platform
This page lists features for which Splunk Inc. has deprecated or removed support in this version of the Splunk Platform.
What are "deprecated" and "removed" features?
- Deprecated features continue to work and Splunk supports them until support is removed. However, customers need to begin planning now for the future removal of support.
- Removed features are features that Splunk no longer supports and no longer work with the Splunk platform. Customers must find alternatives to removed features.
Deprecated features
The following table summarizes the features that are deprecated. These features continue to be supported, but Splunk reminds customers that deprecated features might be removed in a future release.
| Newly disabled in this version | What do I need to know? | First deprecated |
|---|---|---|
| Deprecated feature | What do I need to know? | First deprecated |
| Deprecated version 1.0 endpoints for the Search API are now disabled by default | Select version 1.0 endpoints for the Search API have been deprecated and disabled, and will be removed in a future release. Customers and app developers should upgrade usage of these disabled endpoints to the new API version, Search API version 2.0. These new Semantic Versioned Rest API endpoints for search improve platform contracts and resiliency to platform updates.
If your organization has business-critical apps that still need to use the disabled endpoints, you can turn them on for a limited time as a temporary fix. See Semantic API versioning in the Splunk Cloud Platform REST API Reference Manual. |
Version 9.0.2208 |
| Node.js support | Node.js support is deprecated and will be removed in a future release of Splunk Cloud Platform. As soon as possible, update any private apps that depend on Node.js. For more information about the Node.js deprecation and updating your apps, see Node.js deprecation FAQ in Splunk Lantern. | Version 10.0.2503 |
| Hybrid search is deprecated. | Hybrid search reached end-of-life on October 30, 2024 and is no longer a supported feature. Customers who currently use hybrid search must migrate to Federated Search for Splunk.
See Migrate from hybrid search to Federated Search for Splunk in Federated Search. |
Version 10.0.2503 |
| Deprecation of exporting PDFs, scheduling PDF delivery, and printing PDFs with Classic Simple XML dashboards. | Exporting dashboard PDFs, scheduling PDF delivery, and printing PDFs with Classic Simple XML dashboards is deprecated and will be removed in a future release. | Version 9.3.2408 |
The Splunk platform REST API spawn_process parameter is deprecated.
|
Do not use the spawn_process parameter. It is deprecated and will be removed in a future release.
|
Version 9.2.2403 |
The /services/search/commands REST API endpoint is deprecated.
|
The undocumented /services/search/commands REST API endpoint is deprecated and will be removed in a future release. If you have been inadvertently using this endpoint, stop using it.
|
Version 9.1.2312 |
| Deprecated Splunk platform search execution methods | The phased_execution_mode setting is deprecated. Contact Splunk Support to remove this setting from the limits.conf file for your Splunk Cloud Platform deployment if your users get the following warning message: Contact your administrator to remove the 'phased_execution_mode' setting in limits.conf, so this message is not displayed again.
|
Version 9.0.2305 |
| jQuery 3.5 by default | Splunk Cloud Platform now uses jQuery 3.5 by default. The self-service toggle in the UI to re-enable the old jQuery libraries has been removed. Splunk Cloud administrators can no longer choose to enable lower versions in the Internal Library Settings. Users must use the version 3.5 jQuery libraries that are packaged with the Splunk platform by default. Splunk will remove support for all older versions of jQuery in a future release. | Version 9.0.2305 |
Deprecated use of the _reload action with the rest search command
|
Use of the _reload action with the rest command is deprecated. Do not use the _reload action with the rest command.
|
Version 9.0.2208 |
Disabled audit search command
|
The previously deprecated audit search command is now disabled for all customers as of 8.2.2203.
|
Version 8.2.2203 |
Disabled createrss command
|
The previously deprecated createrss command is now disabled for all customers as of 8.2.2203.
|
Version 8.2.2203 |
| HTML Dashboards Deprecation | As of Splunk Cloud Platform 8.2.2105 and Splunk Enterprise 8.2, Splunk has deprecated HTML Dashboards. If you choose to continue to use HTML dashboards, you are responsible for maintaining the dashboards. You can rebuild your HTML dashboards in Dashboard Studio. | Version 8.2.2105 |
Removed features
| Removed feature | What do I need to know? | First deprecated |
|---|---|---|
| Splunk Product Guidance (SPG) application | The Splunk Product Guidance (SPG) application is removed in Splunk Cloud Platform versions 9.3.2411 and higher. | Version 9.3.2411 |
| Internal Library Settings | The Internal Library Settings page is removed. Deprecated libraries and unsupported hotlinked imports are restricted, and Splunk Cloud Platform no longer offers a self-service option to use them. For more information about Internal Library Settings, see Control access to jQuery and other internal libraries in the jQuery Upgrade Readiness manual. | Version 9.2.2403 |
The relevancy command is removed.
|
Do not use the relevancy command.
|
Version 9.1.2312 |
The timeout argument for the append command is removed.
|
Do not use the timeout argument. It has no effect on searches.
|
Version 9.1.2312 |
Removal of the populate_lookup alert action
|
The legacy alert action, populate_lookup, has been removed. Use the lookup alert action instead.
|
Version 9.1.2308 |
| Stats V1 removal | Version 1 of the stats command has been removed and replaced with version 2 of the stats command.
|
Version 9.0.2303 |
Removed file command
|
The previously disabled filecommand is now removed for all customers as of 9.1.2312.
|
Prior to version 8.2.2202 |
| The etc/searchscripts directory | Support for the etc/searchscripts directory has been removed, as of version 8.2.2201. All search commands must now be declared in the commands.conf file. | Prior to version 8.2.2201 |
| Offload UI state from SHC conf | The ability for Apps to specify custom user interface preferences via ui-prefs.conf such as time picker has been removed. This means that application specific UI preferences will not be applied. Users will still be able to set their UI preferences. | Version 8.2.2105 |
| Removed biased language | Biased language has been removed from the Splunk Web UI, in keeping with Splunk's commitment to equality in our actions and products. | Version 8.2.2105 |
| Documentation set improvements | In response to customer feedback, the information in the Splunk Cloud User Manual has been added to the Splunk Cloud Platform Admin Manual and the Splunk Cloud Security Manual, and the Splunk Cloud User Manual has been removed from the documentation set. | Version 8.2.2105 |
| Removed ability to convert dashboards to HTML | This option is no longer available to users in Splunk Web. | Prior to version 8.0.2004 |