The software also features a number of improvements on the administrative end. The company claims the new version can work up to 10 times faster, due to a number of reasons. The software has been refactored to allow for many more concurrent users within a single deployment of software, noted Steve Sommer, Splunk chief marketing officer. The software also implements a Bloom Filter, a mathematical technique for filtering out large swaths of irrelevant data for certain types of searches.
A Bloom Filter can "exclude looking at the individual event details and just look at the one data structure, which will allow us to drastically improve search performance," Sommer said.
The software can also support multiple LDAP (Lightweight Directory Access Protocol) implementations, making it accessible across large enterprises with multiple user directories.