The Log Observer product allowed users to directly ingest Log data into Splunk Observability Cloud via Cloud integrations and Opentelemetry collector.
All Splunk users with a current entitlement for Log Observer would need to move to Log Observer Connect by the end of January 2024. The product is being deprecated, and Splunk are offering alternative methods to get Logs data into Splunk Observability Cloud (see below).
Please get in touch with your Splunk regional sales manager for help with the transition. The deadline is October 31, 2023.
Connect your Splunk platform instance to your Log Observer Connect instance. See Set up Log Observer Connect for Splunk Cloud Platform or Set up Log Observer Connect for Splunk Enterprise, depending on the type of Splunk platform deployment you have.
If you have a Splunk Cloud Platform deployment, set up an HEC token to forward or mirror your existing Log Observer logs to Splunk Cloud Platform. See Forward Log Observer logs data to the Splunk platform to learn how.
| Revision | Publish Date | Comments |
|---|---|---|
1.0 |
29-Sep-2026
|
Initial Release |