by Angela Guess
According to a new release out of Splunk, “Today we are excited to announce the release of Splunk Enterprise 6.6 and Splunk Cloud! This new release makes it easier than ever for a wide range of users to leverage datasets, build dashboards, get answers and share insights. Also, indexer and search head clustering enhancements make the platform easier to manage at scale. In this blog post we’ll discuss these features in more detail. More specifically, we’ll go over the following: Datasets Explorer which allows you to use a pre-prepared dataset to create/schedule a report and export it in CSV format. Dashboard Drilldown makes it easier to build a guided dashboard navigation experience, without writing any Simple XML. Search Productivity enhancements such as dynamic formatting, improved search optimization and a new SPL command ‘union.’ Trellis Layout builds multiple visualizations powered by a single search to compare different segments of a dataset.”
The release goes on, “We’ve also made improvements in the app development space which will be posted in another blog in the next couple of days. Be sure to download the Splunk Enterprise 6.6 Overview App for examples of how to use these new features, and to learn about other features not mentioned in this post. Let’s get started with the new Datasets Explorer. In Splunk Enterprise 6.5 we introduced ‘Datasets,’ and, more specifically, several types of datasets: Tables (new in 6.5 as well), Lookup files and Data Models. Now the Datasets Explorer makes dataset management much easier with a new interface. Users can explore these prepared datasets with a time-range picker, schedule a report, investigate in search, visualize in pivot and export to CSV‑all from one central place! Check out docs or the Splunk Enterprise 6.6 Overview App for more information.”
Read more at splunk.com.
Photo credit: Splunk