Splunk OnCall incident
Splunk On-Call Service // Network Disruption
Splunk OnCall experienced a major incident on November 18, 2025 affecting Alert Ingestion and Web Client (Portal) and 1 more component, lasting 8h 16m. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- monitoring Nov 18, 2025, 12:31 PM UTC
We are currently experiencing an isolated network disruption. The web client was temporarily unavailable, but has retunred to operational. Our Engineering team is working to identify the issue and implement a solution. In the meantime, please know that notification and web client, and Mobile App are operational. Contact Us: https://help.splunk.com/en/splunk-enterprise/alert-and-respond/splunk-on-call/introduction-to-splunk-on-call/getting-started-guide-for-splunk-on-call-admins/contact-splunk-on-call-support
- monitoring Nov 18, 2025, 12:33 PM UTC
We are seeing services recover, but customers may continue to observe higher-than-normal error rates as we continue remediation efforts.
- monitoring Nov 18, 2025, 12:52 PM UTC
Our Content Delivery Network continues to experience intermittent 500 errors impacting our Web Client. The Splunk On-Call Mobile App is currently unaffected.
- monitoring Nov 18, 2025, 01:09 PM UTC
We continue to see internal server errors on our CDN. The Splunk On-Call web client is still being intermittently impacted with 500 errors. Again, the Splunk On-Call Mobile App is operational.
- monitoring Nov 18, 2025, 01:32 PM UTC
We continue to see internal server errors on our CDN. The Splunk On-Call web client is still being intermittently impacted with 500 errors. Please Note: The Splunk On-Call Mobile App is operational. Contact Us: https://help.splunk.com/en/splunk-enterprise/alert-and-respond/splunk-on-call/introduction-to-splunk-on-call/getting-started-guide-for-splunk-on-call-admins/contact-splunk-on-call-support
- monitoring Nov 18, 2025, 01:42 PM UTC
We continue to see internal server errors on our CDN. The Splunk On-Call web client is still being intermittently impacted with 500 errors. **Mobile App functionality is now partially degraded** Contact Us: https://help.splunk.com/en/splunk-enterprise/alert-and-respond/splunk-on-call/introduction-to-splunk-on-call/getting-started-guide-for-splunk-on-call-admins/contact-splunk-on-call-support
- monitoring Nov 18, 2025, 02:02 PM UTC
We continue to see internal server errors on our CDN. The Splunk On-Call web client is still being intermittently impacted with 500 errors. **Mobile App functionality is now partially degraded** **Web Client and Mobile App Incident creation is now degraded** Contact Us: https://help.splunk.com/en/splunk-enterprise/alert-and-respond/splunk-on-call/introduction-to-splunk-on-call/getting-started-guide-for-splunk-on-call-admins/contact-splunk-on-call-support
- monitoring Nov 18, 2025, 02:15 PM UTC
Thank you for contacting Splunk Support. We are aware of an on-going issue which is affecting a number of Splunk services. We are actively investigating and working towards remediation. At this time, we are unable to provide and ETA for resolution though we remain committed to restoring services as quickly as possible. Thank you for your patience and understanding Contact Us: https://help.splunk.com/en/splunk-enterprise/alert-and-respond/splunk-on-call/introduction-to-splunk-on-call/getting-started-guide-for-splunk-on-call-admins/contact-splunk-on-call-support
- monitoring Nov 18, 2025, 03:19 PM UTC
Web Client and Mobile App are currently operational. Our CDN has implemented a fix, but Splunk On-Call remains in a monitoring state. Contact Us: https://help.splunk.com/en/splunk-enterprise/alert-and-respond/splunk-on-call/introduction-to-splunk-on-call/getting-started-guide-for-splunk-on-call-admins/contact-splunk-on-call-support
- resolved Nov 18, 2025, 09:09 PM UTC
Our services are currently operating normally. We are no longer observing elevated errors or latency across the network. We are moving this incident to a resolved state. Thank you for your patience and apologies for this disruption. Contact Us: https://help.splunk.com/en/splunk-enterprise/alert-and-respond/splunk-on-call/introduction-to-splunk-on-call/getting-started-guide-for-splunk-on-call-admins/contact-splunk-on-call-support