Skip to content
This repository was archived by the owner on Sep 2, 2025. It is now read-only.

Commit 06396ee

Browse files
Merge pull request #1708 from splunk/repo-sync
Pulling refs/heads/main into main
2 parents 8fa2f18 + 87a3325 commit 06396ee

30 files changed

+202
-1725
lines changed
1.46 MB
Loading
310 KB
Loading

_images/logs/indexSelection.png

212 KB
Loading
141 KB
Loading

_includes/logs/query-logs.rst

Lines changed: 11 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,13 @@
88

99
2. In the content control bar, enter a time range in the time picker if you want to see logs from a specific historical period. To select a time range, you must select :guilabel:`Unlimited` from the :guilabel:`Search Records` field in step 5 below. When you select :guilabel:`150,000`, Log Observer returns only the most recent 150,000 logs regardless of the time range you select.
1010

11-
3. Select :guilabel:`Index` next to :guilabel:`Saved Queries`, then select the indexes you want to query. When you do not select an index, Log Observer runs your query on all indexes to which you have access. If you want to search your Splunk platform (Splunk Cloud Platform or Splunk Enterprise) data, select the integration for the appropriate Splunk platform instance first, then select which index you want to query in Log Observer. You can query indexes from only one Splunk platform instance or Splunk Observability Cloud instance at a time. You can query Splunk platform indexes only if you have the appropriate role and permissions.
11+
3. Select :guilabel:`Index` next to :guilabel:`Saved Queries`. In the pop-up window, first select a Splunk platform (Splunk Cloud Platform or Splunk Enterprise) connection in the :guilabel:`Connection selection` section. Then, in the :guilabel:`Index selection` section, select which index you want to query in Log Observer Connect.
12+
13+
.. image:: /_images/logs/indexSelection.png
14+
:width: 90%
15+
:alt: The Log Observer index selection pop-up is displayed.
16+
17+
.. note:: You can query indexes from only one Splunk platform instance at a time. You can query Splunk platform indexes only if you have the appropriate role and permissions in Splunk platform.
1218

1319
4. In the content control bar next to the index picker, select :guilabel:`Add Filter`. Select the :guilabel:`Keyword` tab to search on a keyword or phrase. Select the :guilabel:`Fields` tab to search on a field. Then press Enter. To continue adding keywords or fields to the search, select :guilabel:`Add Filter` again.
1420

@@ -18,9 +24,11 @@
1824

1925
7. Select :guilabel:`Run search`.
2026

21-
8. Review the top values for your query on the the :guilabel:`Fields` panel on right. This list includes the count of each value in the log records. To include log records with a particular value, select the field name, then select ``=``. To exclude log records with a particular value from your results, select the field name, then select ``!=``. To see the full list of values and distribution for this field, select :guilabel:`Explore all values`.
27+
8. [Optional] If you want to stop the current search, select :guilabel:`Cancel search`. Partial results do not display. To continue your search, select :guilabel:`Run search` again.
28+
29+
9. Review the top values for your query on the the :guilabel:`Fields` panel on right. This list includes the count of each value in the log records. To include log records with a particular value, select the field name, then select ``=``. To exclude log records with a particular value from your results, select the field name, then select ``!=``. To see the full list of values and distribution for this field, select :guilabel:`Explore all values`.
2230

23-
9. Optionally, if you are viewing Splunk platform data, you can open your query results in the Splunk platform and use SPL to further query the resulting logs. You must have an account in Splunk platform. To open the log results in the Splunk platform, select the :guilabel:`Open in Splunk platform` icon at the top of the Logs table.
31+
10. [Optional] If you are viewing Splunk platform data, you can open your query results in the Splunk platform and use SPL to further query the resulting logs. You must have an account in Splunk platform. To open the log results in the Splunk platform, select the :guilabel:`Open in Splunk platform` icon at the top of the Logs table.
2432

2533
.. image:: /_images/logs/lo-openinsplunk.png
2634
:width: 90%

admin/authentication/SSO/sso.rst

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -75,6 +75,24 @@ Give your login service integration a name that your users recognize. On your cu
7575
this name appears in the button your users select to sign in. For example, use the name "Log in with Okta"
7676
for an Okta login service integration.
7777

78+
.. _default-sso-role:
79+
80+
.. raw:: html
81+
82+
<embed>
83+
<h2>Set up default SSO role</h2>
84+
</embed>
85+
86+
87+
When you set up SSO, the default role for a user signing in to Splunk Observability Cloud through SSO is the :guilabel:`power` role. You can change the default SSO role to any of the available roles in Splunk Observability Cloud.
88+
89+
To change the default SSO role, do the following:
90+
91+
1. Go to :guilabel:`Settings` then select :guilabel:`General Settings`.
92+
93+
2. In the :guilabel:`User Management` section, set a default role for SSO login by selecting a role from the drop-down list. The drop-down list defaults to the :guilabel:`power` role. The role you select becomes the role of any new user logging in through an SSO service. You can return to :guilabel:`General Settings` and update the default role for SSO login at any time.
94+
95+
7896
.. _multiple-integrations-sso:
7997

8098
.. raw:: html

apm/apm-spans-traces/service-map.rst

Lines changed: 3 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ See :ref:`apm-inferred-services` to learn more about inferred services in APM.
1515

1616
The following screenshot shows an example service map:
1717

18-
.. image:: /_images/apm/spans-traces/service-map-global-search-rename.png
18+
.. image:: /_images/apm/spans-traces/service-map-updated-view.png
1919
:width: 95%
2020
:alt: An example of the service map in Splunk APM Service Map.
2121

@@ -28,6 +28,8 @@ Use these steps to access the service map in Splunk APM:
2828
#. Log into Splunk Observability Cloud.
2929
#. Select :guilabel:`APM` in the navigation bar.
3030
#. Select :guilabel:`Service Map` on the APM landing page. The service map view opens, with the service map in the center.
31+
#. (Optional) Select :guilabel:`Switch to Classic Service Map` to switch to the lateral service map layout. The default constellation view displays a larger view of your environment and helps you quickly assess service performance.
32+
3133

3234
Using the service map, you can do the following:
3335

@@ -86,15 +88,6 @@ When configured, you can select tiles in the Related Content bar to seamlessly n
8688
.. image:: /_images/apm/spans-traces/service-map-related-content-global-search-rename.gif
8789
:alt: Using Related Content in Splunk Observability Cloud.
8890

89-
Configure and view global data links for your service map
90-
==========================================================
91-
92-
You can configure global data links to link Splunk APM properties, such as services, traces, spans, and span tags, to relevant resources. For example, you can link APM properties to Infrastructure Monitoring navigators and dashboards, Splunk instances, Kibana logs, Splunk AppDynamics tiers, or custom URLs.
93-
94-
For information on how to configure data links to display in your service map, see :ref:`apm-create-data-links`. You can also create a global data link directly from the APM :guilabel:`Service Map` by selecting an inferred service, selecting the :guilabel:`(⋯)` menu next to the inferred service name, and selecting :guilabel:`Configure data links`.
95-
96-
For information on how to view data links in your service map, see :ref:`apm-use-data-links`.
97-
9891
Share your view of the service map
9992
======================================
10093
To share your view of the service map with a colleague, copy and share the URL. Your current filter selections are preserved in the URL.

apm/apm-spans-traces/service-view.rst

Lines changed: 20 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ You can also access the service view for a specific service within the service m
2929

3030
Finally, you can also access the service view for a specific service by selecting the service from the APM landing page.
3131

32-
Use the service overview to monitor the health of your service
32+
Use the service view to monitor the health of your service
3333
=====================================================================
3434

3535
When you open the service view an environment is selected based on your recently viewed environments. Adjust the environment and time range filters if necessary. Use the following sections to monitor the health of your service.
@@ -54,6 +54,18 @@ Use the following metrics in the :guilabel:`Service metrics` section to monitor
5454
* Inferred services - un-instrumented third-party services
5555
* Pub/sub queues - Publisher/subscriber queues
5656

57+
Error breakdown
58+
-----------------
59+
60+
Use the following section to troubleshoot service errors and view relevant traces for specific error types. Select a point on the graph to view example traces for a particular data point, or select any value to hide the time series for that value.
61+
62+
.. image:: /_images/apm/spans-traces/service-view-errors.png
63+
:width: 95%
64+
:alt: Screenshot of charts on the service view page that display service errors.
65+
66+
* Errors by exception type - Displays errors with the span attribute ``exception.type``. Select a data point on the chart to view related traces and alert details for that time period.
67+
* Errors by status code - Displays errors based on the HTTP or gRPC error status code. Select a data point on the chart to view related traces and alert details for that selected time period and error. For more information about error status codes, see :new-page:`Semantic Conventions for HTTP Spans <https://opentelemetry.io/docs/specs/semconv/http/http-spans/>`.
68+
5769
Runtime metrics
5870
-----------------
5971

@@ -82,6 +94,13 @@ View Tag Spotlight view for your service
8294

8395
Select :guilabel:`Tag Spotlight` to view Tag Spotlight view filtered for your service. See :ref:`apm-tag-spotlight` to learn more about Tag Spotlight.
8496

97+
View errors for your service
98+
====================================================
99+
100+
Select the :guilabel:`Errors` tab to visualize errors for your service. Select a specific error type to view available traces for that error, and troubleshoot by viewing details such as the ``exception.message`` or ``exception.stacktrace``.
101+
102+
Administrators can pause these metrics by going to the :guilabel:`Sources of Errors MetricSets` section on the :guilabel:`APM MetricSets` page and selecting :guilabel:`Pause Indexing`. These metrics are turned on by default.
103+
85104
View endpoints for your service
86105
=================================
87106

apm/profiling/intro-profiling.rst

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -94,10 +94,7 @@ The following programming languages have instrumentation available:
9494
* :ref:`profiling-configuration-otel-dotnet`
9595
* - .NET (SignalFx)
9696
- SignalFx Instrumentation for .NET version 1.0.0 or higher
97-
98-
.NET versions 6.0 and higher are supported in AlwaysOn Profiling. .NET Framework is not supported.
99-
- * :ref:`instrument-dotnet-applications`
100-
* :ref:`profiling-configuration-dotnet`
97+
- .NET versions 6.0 and higher are supported in AlwaysOn Profiling. .NET Framework is not supported.
10198
* - Python (in beta)
10299
- Splunk Distribution of OpenTelemetry Python version 1.15 or higher
103100

apm/set-up-apm/troubleshoot-apm.rst

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,6 @@ If you have instrumented an application but are not seeing the relevant data in
1414
- :ref:`common-java-troubleshooting`
1515
- :ref:`common-python-troubleshooting`
1616
- :ref:`common-nodejs-troubleshooting`
17-
- :ref:`common-dotnet-troubleshooting`
1817
- :ref:`common-go-troubleshooting`
1918

2019
If the preceding steps don't help you resolve your instrumentation issues, contact :ref:`support`.

0 commit comments

Comments
 (0)