Splunk Observability Cloud overview

This page provides an overview of the products and features provided by Splunk Observability Cloud

Use Splunk Observability Cloud for full-fidelity monitoring and troubleshooting across infrastructure, applications, and user interfaces, in real time and at any scale, to:

  • Keep your services reliable

  • Deliver great customer experiences

  • Innovate faster

Select from over 100 supported open standards-based integrations with common data sources to get data from your on-premises and cloud infrastructure, applications and services, and user interfaces into Splunk Observability Cloud. See Supported integrations in Splunk Observability Cloud.

When you send data from each layer of your full-stack environment to Splunk Observability Cloud, it transforms raw metrics, traces, and logs into actionable insights in the form of dashboards, visualizations, alerts, and more. To learn more about the metrics for Splunk Observability Cloud, refer to Metrics in Splunk Observability Cloud.

Note: For a list of benefits and service terms, see Splunk Observability Cloud service description.

The following diagram provides a high-level view of how each Splunk Observability Cloud component contributes to your full-stack observability experience:


This screenshot shows how Splunk Observability Cloud components serve the different layers and processes in an organization's environment.

Get data in using supported integrations to hundreds of common data sources

The first step toward full-stack observability is getting data from your environment into Splunk Observability Cloud. Get data in using over 100 supported integrations to common data sources. See Supported integrations in Splunk Observability Cloud.

For getting started steps for getting data into Splunk Observability Cloud, see the Get started guide to get data into Splunk Observability Cloud .

Splunk Infrastructure Monitoring

Use Splunk Infrastructure Monitoring to perform powerful analytics on your infrastructure and resources across hybrid and multicloud environments with Splunk Infrastructure Monitoring. Infrastructure Monitoring offers support for a broad range of integrations for collecting all kinds of data, from system metrics for infrastructure components to custom data from your applications.

For more information, see Introduction to Splunk Infrastructure Monitoring.

Splunk Database Monitoring

Splunk Database Monitoring delivers comprehensive visibility into the performance and health of your databases across multiple platforms and is designed for modern, complex environments. Use Database Monitoring to get detailed query analytics (including wait time, CPU usage, memory consumption, and explain plans) along with integrated health and performance metrics for database platforms. Use the correlation between APM traces and a database query to troubleshoot slow applications.

Note: Database Monitoring currently supports Microsoft SQL Server and Oracle Database, with availability limited to the us0, us1, eu0, eu2, and au0 Splunk realms.

For more information, see Introduction to Splunk Database Monitoring.

Splunk Application Performance Monitoring

Collect traces and spans to monitor your distributed applications with Splunk APM. A trace is a collection of actions, or spans, that occur to complete a transaction. Splunk APM collects and analyzes every span and trace from each of the services that you have connected to Splunk Observability Cloud to give you full-fidelity access to all of your application data.

For more information, see Introduction to Splunk APM.

For information about how APM can be used to address real-life scenarios, see Examples for troubleshooting errors and monitoring application performance using Splunk APM.

Splunk Real User Monitoring

Splunk Real User Monitoring provides insights about the performance and health of the front-end user experience of your application. Splunk RUM collects performance metrics, web vitals, errors, and other forms of data to allow you to detect and troubleshoot problems in your application, measure the health of your application, and assess the performance of your user experience.

For more information, see Introduction to Splunk RUM.

Splunk Synthetic Monitoring

Splunk Synthetics Monitoring is a platform to synthetically measure performance of your web-based properties. It offers features that provide insights that allow you to optimize uptime and performance of APIs, service endpoints, and end user experiences and prevent web performance issues.

For more information, see the Introduction to Splunk Synthetic Monitoring.

Splunk Log Observer Connect

Troubleshoot your application and infrastructure behavior using high-context logs in Splunk Observability Cloud. With Splunk Log Observer Connect, you can perform codeless queries on logs to detect the source of problems in your systems.

For more information, see Introduction to Splunk Log Observer Connect.

Splunk On-Call

Splunk On-Call incident response software aligns log management, monitoring, chat tools, and more, for a single-pane of glass into system health. Splunk On-Call automates delivery of alerts to get the right alert, to the right person, at the right time.

For more information, see the Splunk On-Call documentation .

Splunk Observability Cloud for Mobile

Splunk Observability Cloud for Mobile is an iOS and Android companion mobile app to Splunk Observability Cloud. You can use Splunk Observability Cloud for Mobile to check system critical metrics in Splunk Observability Cloud on the go, access real-time alerts with visualizations, and view mobile-friendly dashboards.

For more information, see Introduction to Splunk Observability Cloud for Mobile.

Splunk IT Essentials Work and Splunk IT Service Intelligence

Splunk IT Essentials Work (ITE Work) is a free application that helps you get started with monitoring and analyzing your IT infrastructure.

Splunk IT Service Intelligence (ITSI) is a premium IT operations solution that provides actionable insight into the performance and behavior of your IT services. You can also ingest events from across your IT landscape and from other monitoring silos to provide a unified operational console of all your events and service-impacting issues.

For more information about these applications, see the IT operations product overview.

Splunk App for Content Packs

Quickly set up your IT Service Intelligence (ITSI) or IT Essentials Work (ITE Work) environment using prepackaged content such as KPI base searches, service templates, saved glass tables, and other knowledge objects.

For more information, see the Overview of the Splunk App for Content Packs .

Splunk Observability Cloud architecture

Splunk Observability Cloud is built on top of OpenTelemetry and uses it as the default way of getting data in, which gives you an open standards-based set of instrumentation across all your data types. With Log Observer Connect, you can also query your Splunk Enterprise or Splunk Cloud Platform logs using the capabilities in Splunk Observability Cloud, giving you an overview of all your data in one place.
Splunk Observability Cloud architecture can be broken down into 4 main components, data collection, data ingestion, data procesisng and retention, and analytics. Splunk Observability Cloud uses OpenTelemetry as the default method of data collection, which gives you a single set of instrumentation across different data types, such as distributed traces and metrics. You can also send Splunk Enterprise or Splunk Cloud Platform logs to Splunk Observability Cloud with the use of Log Observer Connect. Once you get your data in, OpenTelemetry Collector can aggregate, parse, extract, enrich, or delete your data as needed. The underlying mechanism for data ingestion is the Quantizer, which offers rollups and dynamic lag adjustment. Trace assembly and metadata extraction are also parts of data ingestion. Data processing and retention includes trace indexing and storage, trace metricization, as well as metrics routing and storage. Lastly, Splunk Observability Cloud offers various analytics tools for your data, including but not limited to, tracing analysis, predictive analysis, incident analysis, anomaly detection, SignalFlow, and historical baselines.

Learn more

For information about how these products can be used together to address real-life scenarios, see Scenario: Kai troubleshoots an issue from the browser to the back end using Splunk Observability Cloud.

For information about Splunk Observability Cloud packaging and pricing, see Pricing - Observability.