Splunk experienced a critical incident on August 19, 2025 affecting Ingest and Search, lasting 6h 5m. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating Aug 19, 2025, 04:56 PM UTC
We are investigating a potential issue with search and ingest that may impact customers on Splunk Cloud Platform for FedRAMP High and Splunk Cloud Platform for IL5. As a result of the issue, customer search and indexing may experience issues completing successfully. We will provide an update within the next 30 minutes.
- identified Aug 19, 2025, 05:25 PM UTC
We have identified the source of the issue and are currently working on implementing a fix.
- identified Aug 19, 2025, 05:57 PM UTC
We continue working to implement a fix for this issue.
- identified Aug 19, 2025, 06:26 PM UTC
We are starting to see recovery on some of the impacted instances. Teams continue to work on implementing a fix for this issue.
- identified Aug 19, 2025, 06:54 PM UTC
We see recovery on some of the impacted instances. Teams continue to work on implementing a fix for this issue.
- identified Aug 19, 2025, 07:23 PM UTC
We continue working to implement a fix for this issue.
- identified Aug 19, 2025, 07:53 PM UTC
We continue working to implement a fix for this issue.
- identified Aug 19, 2025, 08:22 PM UTC
We continue working to implement a fix for this issue.
- identified Aug 19, 2025, 08:50 PM UTC
We continue working to implement a fix for this issue.
- identified Aug 19, 2025, 09:19 PM UTC
We continue working to implement a fix for this issue.
- identified Aug 19, 2025, 09:49 PM UTC
We continue working to implement a fix for this issue.
- monitoring Aug 19, 2025, 09:56 PM UTC
A fix has been implemented and we are monitoring the results.
- monitoring Aug 19, 2025, 10:27 PM UTC
We are continuing to monitor for any further issues.
- monitoring Aug 19, 2025, 11:00 PM UTC
We are continuing to monitor for any further issues.
- resolved Aug 19, 2025, 11:01 PM UTC
This incident has been resolved.