Skip to main content

Imply Lumi new feature highlights

This topic highlights some of the latest features in Imply Lumi. Give them a try!

For information about other changes, including fixes and improvements, see Release notes

Current highlights

Virtual tier

Lumi provides a virtual tier, a cost-efficient alternative to the hot tier that gives you on-demand access to infrequently accessed data.

When a query targets data in the virtual tier, Lumi automatically routes it to isolated compute resources that spin up on demand and shut down when idle. Instead of paying for always-on compute across all your data, you only pay for compute when data is queried.

For more information, see Virtual tier overview.

Lumi Enterprise SSO

Lumi Enterprise supports Okta and Microsoft Entra ID as SAML SSO identity providers (IdPs). With SAML SSO, you can log in to Lumi Enterprise using your existing IdP credentials.

For more information, see Configure SAML SSO for Lumi Enterprise.

Expanded SPL support

Lumi now supports the following SPL commands:

  • eventcount
  • reltime
  • foreach

For more information about supported SPL commands, see the compatible SPL commands reference.

Pipeline import and export

You can create a pipeline by importing a saved configuration or by directly uploading a Splunk® Technology Add-On. You can export pipelines for version control or to use as the basis of a new pipeline.

For additional details, see Build pipelines from Splunk technology add-ons and Manage pipelines and processors.

Poll-based S3 ingestion

To ingest objects from Amazon S3, you can now set up intervals for Lumi to poll your S3 bucket and check for new objects. Use this approach for recurring ingestion when you don't want to configure S3 event notifications.

For more information, see Recurring ingestion from S3 at fixed intervals.