Integrate Splunk RUM with Cisco ThousandEyes

Set up an integration between ThousandEyes and Splunk RUM to make ThousandEyes network metrics visible on Splunk Observability Cloud.

DevOps, NetworkOps, and SRE teams are challenged with separate observability dashboards for network and browser applications, too many alerts, and lack of visibility into the combined business impact from network and application performance issues. Integrating ThousandEyes insights with Splunk RUM addresses these challenges by correlating application and internet network metrics.

Using this integration, teams can:

  • Have end-to-end observability

  • Determine whether problems are related to the application or network

  • Streamline incident resolution

  • Reduce alert fatigue

  • Align technical performance with business impact

  • View correlated browser or mobile RUM application performance and network metrics directly within the Splunk RUM UI

Use cases

Contextualize network performance with browser RUM data
  • Overlay ThousandEyes network metrics onto Splunk RUM's browser application metrics.
  • Visualize network path health from ThousandEyes agents to target domains within the browser application context.
  • Assess the direct impact of network performance on end-user application experience.
Identify root causes for application issues
  • Pinpoint the root cause of high end-user response times by correlating with ThousandEyes network metrics.
  • Diagnose network-related performance degradation originating from specific domains.
  • Correlate geographically localized high response times with network performance data.
  • Determine if network performance contributes to elevated browser application error rates.
Streamline network troubleshooting
  • Precisely identify network issues by specific metrics, domain, time interval, and location for efficient escalation to network teams.
  • Initiate targeted network troubleshooting directly within ThousandEyes using relevant tests to diagnose and resolve identified problems.

ThousandEyes network metrics

When you integrate ThousandEyes with Splunk RUM, Splunk Observability Cloud ingests the following OpenTelemetry network metrics from ThousandEyes Agent-to-server, HTTP server, page load, DNS server, DNS trace, and transaction tests:

Metric ThousandEyes test
network.loss Agent-to-server, HTTP server, page load, and transaction
network.latency Agent-to-server, HTTP server, page load, and transaction
network.jitter Agent-to-server, HTTP server, page load, and transaction
dns.lookup.duration DNS server, DNS trace

To see these metrics, navigate to Digital Experience > Real user monitoring > Overview, select a browser or mobile application, and then select its Map View tab. This tab visualizes both Splunk RUM and ThousandEyes metrics, with options to filter by domain, country, region, or city.

When you select a bubble that includes ThousandEyes data, you can view tests and alert data from ThousandEyes, including latency, loss, and jitter tests, and DNS resolution tests.

License requirements

To activate the integration, you need:

To review your license usage, navigate to Dashboards > Built-in dashboard groups > License usage overview > ThousandEyes network monitoring.

Ingestion limits

When your ingestion limit is reached or your license expires, Splunk Observability Cloud stops ingesting ThousandEyes data and the integration wizard's Sync tests option is no longer able to be selected.

When you renew your license, data ingestion resumes automatically, and the ThousandEyes network metrics become visible on Digital Experience > Real user monitoring > Overview.