Splunk Outage History

Started Jul 31, 2026, 12:34 AM UTC· resolved Jul 31, 2026, 01:22 AM UTC

1. investigating Jul 31, 2026, 12:34 AM UTC

   Splunk is investigating an issue currently affecting Splunkbase at "splunkbase.splunk.com". As a result, users may be unable to access Splunkbase and may receive a "500" error. Users may also be unable to download apps or install apps in Splunk Cloud through the UI. We understand the impact this may have on your operations and are working to resolve the issue. We will provide another update in 1 hour, or sooner if more information becomes available.

2. investigating Jul 31, 2026, 12:35 AM UTC

   We are continuing to investigate this issue.

3. resolved Jul 31, 2026, 01:22 AM UTC

   Splunk has resolved the issue affecting Splunkbase at splunkbase.splunk.com. Users should now be able to access Splunkbase, download apps, and install apps in Splunk Cloud through the UI as expected. We apologize for the disruption and appreciate your patience while we worked to restore service.

Read the full incident report →

Started May 29, 2026, 09:35 PM UTC· resolved Jun 01, 2026, 03:04 AM UTC

1. investigating May 29, 2026, 09:35 PM UTC

   As part of a recent maintenance activity, some environments with ITSI may experience a rolling restart of the environment. Customers may temporarily see restart notifications or reload prompts within the UI while these activities complete.

2. investigating May 29, 2026, 10:14 PM UTC

   Update: Rolling restart activities may be occurring at midnight local time for the applicable cloud provider region for some environments with ITSI. Customers may continue to observe restart notifications or reload prompts within the UI while these activities complete. Customer environments that may see restart notifications include: Splunk Cloud Platform Splunk Cloud Platform for FedRAMP Moderate Splunk Cloud Platform for FedRAMP High Splunk Cloud Platform for IL5 No customer action is required.

3. monitoring May 29, 2026, 11:34 PM UTC

   We have identified the cause of the rolling restart activity affecting some environments with ITSI and continue to monitor impacted environments. Customers may continue to observe restart notifications, reload prompts, or intermittent search disruptions while rolling restart activities complete. To provide a more controlled customer experience, remaining restart activities are being coordinated to occur at midnight local time for the applicable cloud provider region. Customer environments that may see restart notifications include: Splunk Cloud Platform Splunk Cloud Platform for FedRAMP Moderate Splunk Cloud Platform for FedRAMP High Splunk Cloud Platform for IL5 No customer action is required.

4. monitoring May 30, 2026, 02:33 AM UTC

   We have identified the cause of the rolling restart activity affecting some environments with ITSI and continue to monitor impacted environments. Customers may continue to observe restart notifications, reload prompts, or intermittent search disruptions while rolling restart activities complete. To provide a more controlled customer experience, remaining restart activities are being coordinated to occur at midnight local time for the applicable cloud provider region. Customer environments that may see restart notifications include: Splunk Cloud Platform Splunk Cloud Platform for FedRAMP Moderate Splunk Cloud Platform for FedRAMP High Splunk Cloud Platform for IL5 No customer action is required.

5. monitoring May 30, 2026, 06:56 AM UTC

   We have identified the cause of the rolling restart activity affecting some environments with ITSI and continue to monitor impacted environments. Customers may continue to observe restart notifications, reload prompts, or intermittent search disruptions while rolling restart activities complete. To provide a more controlled customer experience, remaining restart activities are being coordinated to occur at midnight local time for the applicable cloud provider region. Customer environments that may see restart notifications include: Splunk Cloud Platform Splunk Cloud Platform for FedRAMP Moderate Splunk Cloud Platform for FedRAMP High Splunk Cloud Platform for IL5 No customer action is required.

6. monitoring May 30, 2026, 09:31 AM UTC

   We continue to monitor the rolling restart activities affecting some environments with ITSI. Communications have been sent to customers whose environments may experience potential impact. Customers may continue to observe restart notifications, reload prompts, or intermittent search disruptions while rolling restart activities complete. Remaining restart activities continue to be coordinated for midnight local time in the applicable cloud provider region to provide a more controlled customer experience. Customer environments that may see restart notifications include: Splunk Cloud Platform Splunk Cloud Platform for FedRAMP Moderate Splunk Cloud Platform for FedRAMP High Splunk Cloud Platform for IL5 No customer action is required.

7. monitoring May 30, 2026, 08:50 PM UTC

   We continue to monitor the rolling restart activities affecting some environments with ITSI. Communications have been sent to customers whose environments may experience potential impact. Customers may continue to observe restart notifications, reload prompts, or intermittent search disruptions while rolling restart activities complete. Remaining restart activities continue to be coordinated for midnight local time in the applicable cloud provider region to provide a more controlled customer experience. Customer environments that may see restart notifications include: Splunk Cloud Platform Splunk Cloud Platform for FedRAMP Moderate Splunk Cloud Platform for FedRAMP High Splunk Cloud Platform for IL5 No customer action is required.

8. monitoring May 31, 2026, 03:22 AM UTC

   We continue to monitor the rolling restart activities affecting some environments with ITSI. Communications have been sent to customers whose environments may experience potential impact. Customers may continue to observe restart notifications, reload prompts, or intermittent search disruptions while rolling restart activities complete. Remaining restart activities continue to be coordinated for midnight local time in the applicable cloud provider region to provide a more controlled customer experience. Customer environments that may see restart notifications include: Splunk Cloud Platform Splunk Cloud Platform for FedRAMP Moderate Splunk Cloud Platform for FedRAMP High Splunk Cloud Platform for IL5 No customer action is required.

9. resolved Jun 01, 2026, 03:04 AM UTC

   This incident has been resolved.

Read the full incident report →

Started May 28, 2026, 06:22 AM UTC· resolved May 28, 2026, 07:21 AM UTC

1. identified May 28, 2026, 06:22 AM UTC

   Some customers are experiencing ingestion issues due to a DNS synchronization issue affecting HEC dash DNS records using the format http-inputs-${stack}.splunkcloud.com. HEC ingestion using the current dot-format DNS records, http-inputs.${stack}.splunkcloud.com, is functioning correctly. As a mitigation, customers using the dash-format HEC endpoint should update their upstream systems to use the dot-format endpoint: http-inputs.${stack}.splunkcloud.com. Our engineering teams are working to restore the affected DNS records through Zone DNS synchronization. We will provide another update once DNS synchronization has completed or if there is a meaningful change in impact.

2. resolved May 28, 2026, 07:21 AM UTC

   Some customers experienced traditional HEC ingestion issues due to a DNS synchronization issue affecting HEC dash DNS records using the format http-inputs-${stack}.splunkcloud.com. HEC ingestion using the current dot-format DNS records, http-inputs.${stack}.splunkcloud.com, is functioning correctly. This issue was resolved for affected customers by 07:00 UTC.

Read the full incident report →

Started May 28, 2026, 12:15 AM UTC· resolved May 28, 2026, 01:43 AM UTC

1. identified May 28, 2026, 12:15 AM UTC

   We’re investigating an issue affecting some customers hosted in ap-northeast-1, eu-central-1, and us-east-1. Impacted Splunk Cloud Platform customers in these regions may experience access issues. Our teams are actively working to restore service, and we’ll share updates as more information becomes available

2. monitoring May 28, 2026, 01:27 AM UTC

   A mitigation has been successfully applied across the fleet. Engineering teams are actively monitoring to confirm service has been fully restored and to ensure no further interruptions occur.

3. identified May 28, 2026, 01:31 AM UTC

   We identified an issue caused by an internal change on May 26, 2026, that impacted ingestion through a PrivateLink. A fix has been identified, released and is currently rolling out. Some customers may continue to experience impact while the fix is being applied. We’ll provide another update once rollout is complete. Our teams are actively working to restore service and will provide another update as soon as more information is available

4. monitoring May 28, 2026, 01:41 AM UTC

   A fix has been implemented and we are monitoring the results.

5. resolved May 28, 2026, 01:43 AM UTC

   The incident has been resolved. Our investigation determined that an internal configuration change began impacting service at 20:34 UTC on May 27, 2026. A fix was developed and rolled out beginning at 23:45 UTC, with full remediation completed by 03:45 UTC on May 28, 2026. We apologise for any inconvenience this caused and appreciate your patience while our teams worked to restore service.

Read the full incident report →

Started May 08, 2026, 01:53 AM UTC· resolved May 10, 2026, 03:29 PM UTC

1. investigating May 08, 2026, 01:53 AM UTC

   We are investigating an issue indicating an AWS outage in us-east-1. As a result, the Splunk Cloud Platform environment may be inaccessible for limited number of customers in the specified region. Our teams are working with the provider to resolve this issue. Your patience is greatly appreciated and we will provide more updates upon resolution.

2. investigating May 08, 2026, 03:01 AM UTC

   We are investigating an issue indicating one of our suppliers experiencing outage in us-east-1. As a result, the Splunk Cloud Platform environment may be inaccessible for limited number of customers in the specified region. Our teams are working with the provider to resolve this issue. Your patience is greatly appreciated and we will provide more updates upon resolution.

3. investigating May 08, 2026, 03:28 AM UTC

   We continue to investigate an issue indicating one of our suppliers experiencing in us-east-1. As a result, the Splunk Cloud Platform environment may be inaccessible for limited number of customers in the specified region. Our teams are working with the provider to resolve this issue. Your patience is greatly appreciated and we will provide more updates upon resolution.

4. investigating May 08, 2026, 04:26 AM UTC

   As teams continue to investigate we will tentatively provide our next update by 05:00 AM UTC, or sooner if new information becomes available.

5. investigating May 08, 2026, 05:35 AM UTC

   Investigation is in progress, we will provide our next update by 07:00 AM UTC, or sooner if new information becomes available.

6. investigating May 08, 2026, 06:49 AM UTC

   Investigation is in progress, we will provide our next update by 09:00 AM UTC, or sooner if new information becomes available.

7. investigating May 08, 2026, 09:03 AM UTC

   Investigation is ongoing, and remediation efforts are in progress. We will provide our next update by 10:00 UTC, or sooner if new information becomes available.

8. investigating May 08, 2026, 09:59 AM UTC

   Investigation is ongoing, and remediation efforts are in progress. We will provide our next update by 11:00 UTC, or sooner if new information becomes available.

9. investigating May 08, 2026, 11:30 AM UTC

   Investigation remains ongoing, and we continue to make progress toward recovery. Some affected infrastructure has stabilized, but some customers may still experience impact while remediation continues. Based on current recovery efforts, full restoration is expected to take several more hours. We will provide our next update by 13:00 UTC, or sooner if new information becomes available.

10. investigating May 08, 2026, 01:29 PM UTC

    Update still investigating and recovery efforts remain in progress. Some impacted environments have shown improvement, but some customers may continue to experience service impact while remediation and validation continue. We will provide our next update by 15:00 UTC, or sooner if new information becomes available.

11. investigating May 08, 2026, 02:21 PM UTC

    Update still investigating and recovery efforts remain in progress. Some impacted environments have shown improvement, but some customers may continue to experience service impact while remediation and validation continue. We will provide our next update by 17:00 UTC, or sooner if new information becomes available.

12. investigating May 08, 2026, 04:42 PM UTC

    Update still investigating and recovery efforts remain in progress. Some impacted environments have shown improvement, but some customers may continue to experience service impact while remediation and validation continue. We will provide our next update by 19:00 UTC, or sooner if new information becomes available.

13. investigating May 08, 2026, 07:01 PM UTC

    We are still investigating and recovery efforts remain in progress. Some impacted environments have shown improvement, but some customers may continue to experience service impact while remediation and validation continue. We will provide our next update by 21:00 UTC, or sooner if new information becomes available.

14. investigating May 08, 2026, 09:15 PM UTC

    We are still investigating and recovery efforts remain in progress. Some impacted environments have shown improvement, but some customers may continue to experience service impact while remediation and validation continue. We will provide our next update by 23:00 UTC, or sooner if new information becomes available.

15. investigating May 08, 2026, 11:15 PM UTC

    Service restoration is progressing steadily following the implementation of our mitigation efforts. While most environments have recovered, some customers may still experience intermittent impact as we finalize remediation and validation. Our team is actively monitoring all systems to ensure full stability.

16. identified May 09, 2026, 06:57 AM UTC

    Service restoration is progressing steadily following the implementation of our mitigation efforts. While most environments have recovered, some customers may still experience intermittent impact as we finalize remediation and validation. Our team is actively monitoring all systems to ensure full stability.

17. identified May 09, 2026, 02:46 PM UTC

    Recovery continues following mitigation efforts. Most environments have recovered, though some customers may still experience intermittent impact while final remediation and validation are completed. Our team is actively monitoring to confirm full stability.

18. identified May 10, 2026, 01:04 AM UTC

    Recovery continues to progress following our mitigation efforts. Most environments are operating normally, and we’re seeing stable performance across the majority of systems. A small number of customers may still experience intermittent impact as we complete final remediation and validation. Our team remains actively engaged and monitoring closely to confirm full stability.

19. resolved May 10, 2026, 03:29 PM UTC

    This issue has been resolved. Teams will now begin their root cause analysis. If you believe that you are still impacted by this issue please contact customer support and reference CINC-66292.

Read the full incident report →

Started May 04, 2026, 06:19 PM UTC· resolved May 04, 2026, 08:41 PM UTC

1. identified May 04, 2026, 06:19 PM UTC

   We are currently addressing a major service disruption affecting search performance, which began at 16:34 UTC. Users may experience degraded search performance and intermittent UI errors. Our engineering teams have identified the root cause and are actively working to deploy a resolution. We are monitoring the situation closely and will provide further updates as they become available.

2. identified May 04, 2026, 06:49 PM UTC

   We are observing service recovery for the majority of our customers. Our engineering teams are actively investigating and addressing the remaining isolated cases where service has not yet been fully restored. We will continue to monitor the environment closely until all services are operating at normal capacity.

3. monitoring May 04, 2026, 07:09 PM UTC

   We have implemented a fix for this issue. During this time we are monitoring the results to confirm the resolution and will continue to provide any additional updates once available.

4. monitoring May 04, 2026, 07:38 PM UTC

   We are continuing to monitor for any further issues.

5. monitoring May 04, 2026, 08:04 PM UTC

   We are continuing to monitor the restoration of services for the majority of our impacted customers. Our teams are working diligently to resolve remaining issues for any users who have not yet seen a full return to normal service. We will continue to monitor the environment closely until all services are fully operational.

6. resolved May 04, 2026, 08:41 PM UTC

   This incident has been resolved.

Read the full incident report →

Started May 02, 2026, 01:44 AM UTC· resolved May 02, 2026, 08:01 AM UTC

1. investigating May 02, 2026, 01:44 AM UTC

   We are currently experiencing an internal IT service disruption. As a result all planned maintenance activities scheduled are being paused/canceled and we will provide further updates as more information becomes available.

2. monitoring May 02, 2026, 03:01 AM UTC

   The issue is currently stable, and teams are continuing to monitor service behaviour closely. We will continue to provide updates until the issue is fully resolved.

3. resolved May 02, 2026, 08:01 AM UTC

   This incident has been resolved.

Read the full incident report →

Started Apr 09, 2026, 12:10 AM UTC· resolved Apr 09, 2026, 01:25 AM UTC

1. investigating Apr 09, 2026, 12:10 AM UTC

   Our engineering team has identified an issue with the KVservice that is currently impacting search performance for ad-hoc, saved, and scheduled searches. Additional symptoms may include, but not limited to: - Inability to save searches within the Enterprise Security (ES) application. - Errors when attempting to update application settings, such as credentials. This is an active investigation. We are working to resolve this as quickly as possible and will provide status updates as more information becomes available. We apologize for any inconvenience this may cause.

2. identified Apr 09, 2026, 01:04 AM UTC

   Our engineering teams have narrowed the scope of the issue: Any search utilizing the KV Services were failing. This impact extended to the Mission Control and Analyst Queue dashboards. Additionally, we have identified the root cause and are actively mitigating the impact. Once mitigation is complete, we will continue to monitor the environment to ensure service stability for all users. We will continue to provide status updates as more information becomes available. We apologize for the inconvenience and appreciate your patience.

3. resolved Apr 09, 2026, 01:25 AM UTC

   Our engineering team has successfully implemented the fix for the KVservice issue. We have monitored the environment and can confirm that there are no recurring errors. All searches and dashboards within the Enterprise Security (ES) application are now fully operational. If you continue to experience any issues related to this incident, please contact us by submitting a support case. We apologize for the inconvenience this may have caused and appreciate your patience as we worked to restore service.

Read the full incident report →

Started Mar 03, 2026, 06:07 PM UTC· resolved Mar 25, 2026, 05:27 PM UTC

1. identified Mar 03, 2026, 06:07 PM UTC

   Cisco is aware of an ongoing cloud service provider outage in the Middle East affecting multiple cloud offers and services. As a result, Login, Search and Ingest may be impacted for customers in the affected region. Cisco and Splunk are exploring what options are available for affected customers and will contact those affected customers directly. We will continue to closely monitor this issue as it unfolds.

2. identified Mar 04, 2026, 10:31 PM UTC

   Cisco is aware of an ongoing cloud service provider outage in the Middle East affecting multiple cloud offers and services. As a result, Login, Search and Ingest may be impacted for customers in the affected region. Cisco and Splunk are exploring what options are available for affected customers and will contact those affected customers directly. We will continue to closely monitor this issue as it unfolds.

3. identified Mar 11, 2026, 03:45 PM UTC

   Cisco is aware of an ongoing cloud service provider outage in the Middle East affecting multiple cloud offers and services. As a result, Login, Search and Ingest may be impacted for customers in the affected region. Cisco and Splunk are exploring what options are available for affected customers and will contact those affected customers directly. We will continue to closely monitor this issue as it unfolds.

4. resolved Mar 25, 2026, 05:27 PM UTC

   Cisco has confirmed that the impact of the cloud service provider outage in the Middle East has been mitigated. Cisco engineers have successfully transitioned affected services out of the region. We have identified all affected customers and will be reaching out to each of you individually to discuss specific next steps and any necessary remediation. A proactive support case has been opened on your behalf to coordinate this effort. If you have any immediate concerns, please reach out to your account team or simply reply to your support case. Cisco appreciates your patience and cooperation on this matter.

Read the full incident report →

Started Nov 18, 2025, 12:52 PM UTC· resolved Nov 18, 2025, 09:52 PM UTC

1. investigating Nov 18, 2025, 12:52 PM UTC

   We are currently experiencing a KVService outage impacting services. Our teams are actively working to resolve the issue. We will provide an update within the next 60 minutes.

2. investigating Nov 18, 2025, 02:01 PM UTC

   We are currently experiencing a global outage impacting multiple Splunk services including Vault, KVService, Identity and Access Control (IAC), Splunk Mobile app, VictorOps, and Ingest processor, Edge processor. Customers may experience service disruptions such as login failures, lookup access issues, and degraded performance. We acknowledge the impact and are actively working with our partners to restore full service.

3. investigating Nov 18, 2025, 03:30 PM UTC

   We are still investigating the issue. Customers may experience service disruptions such as login failures, lookup access issues, and degraded performance. We acknowledge the impact and are actively working with our partners to restore full service.

4. monitoring Nov 18, 2025, 04:34 PM UTC

   Splunk continues to monitor and remediate the services affected by this issue. Several services remain impacted; however, they are currently in a recovering state. We do not have an ETA for full recovery at this time, but our teams are working to restore services as quickly as possible. We appreciate your continued patience.

5. monitoring Nov 18, 2025, 05:27 PM UTC

   Several Splunk services are still in a recovering state. Our teams continue to monitor progress and work through remaining backlogs to fully restore functionality. We will provide further updates as recovery advances.

6. monitoring Nov 18, 2025, 06:24 PM UTC

   All impacted Splunk services are back up, with a few still in recovery and monitoring. Our teams continue to work through remaining backlogs and validate full functionality across all components.

7. monitoring Nov 18, 2025, 09:20 PM UTC

   All impacted Splunk services are back up, with Ingest Processor still in recovery and monitoring. Our teams continue to work through remaining backlogs and validate full functionality across all components.

8. resolved Nov 18, 2025, 09:52 PM UTC

   All impacted services have been fully remediated. Systems are operating normally, and no further impact is expected. We will continue to monitor to ensure full service stability. Thank you for your patience throughout this incident.

Read the full incident report →

Started Nov 13, 2025, 05:20 AM UTC· resolved Nov 13, 2025, 02:21 PM UTC

1. investigating Nov 13, 2025, 05:20 AM UTC

   We are currently investigating the issue with ACS (Admin Config Service) requests causing failures for all Splunk Cloud Platform customers, resulting in the error message "service temporarily unavailable, please try again later" when accessing self-service operations.

2. investigating Nov 13, 2025, 05:49 AM UTC

   Our teams are currently investigating the issue with ACS (Admin Config Service) requests causing failures for all Splunk Cloud Platform customers, resulting in the error message "service temporarily unavailable, please try again later" when accessing self-service operations.

3. identified Nov 13, 2025, 06:09 AM UTC

   This issue has been identified and fix is being implemented.

4. identified Nov 13, 2025, 06:42 AM UTC

   This issue has been identified and fix is being implemented.

5. identified Nov 13, 2025, 07:17 AM UTC

   This issue has been identified and fix is being implemented.

6. identified Nov 13, 2025, 08:21 AM UTC

   The issue affecting ACS has been identified. Our team is currently testing a potential fix to ensure it resolves the problem. Service functionality may remain limited during this time. We will provide updates as testing progresses.

7. identified Nov 13, 2025, 09:34 AM UTC

   The issue affecting ACS has been identified. Our team is continuing testing a potential fix to ensure it resolves the problem. Service functionality may remain limited during this time. We will provide updates as testing progresses.

8. monitoring Nov 13, 2025, 10:15 AM UTC

   We have identified the root cause of the earlier disruption and applied a workaround to restore full functionality. All ACS services are now operating normally, and our monitoring indicates requests are being processed successfully. We will implement a permanent fix during a scheduled maintenance window, and no customer impact is expected during that time. Thank you for your patience as we worked to resolve this issue.

9. resolved Nov 13, 2025, 02:21 PM UTC

   All ACS services are now operating normally, and our monitoring indicates requests are being processed successfully. We will implement a permanent fix during a scheduled maintenance window, and no customer impact is expected during that time. Thank you for your patience as we worked to resolve this issue.

Read the full incident report →

Started Nov 04, 2025, 05:42 PM UTC· resolved Nov 04, 2025, 08:21 PM UTC

1. investigating Nov 04, 2025, 05:42 PM UTC

   We are aware that some customers are currently experiencing issues logging in to the Splunk Cloud Platform. Our technical teams are actively engaged and investigating the root cause. We are working to resolve this as quickly as possible and will provide further updates as more information becomes available.

2. investigating Nov 04, 2025, 06:12 PM UTC

   We are continuing to investigate this issue.

3. investigating Nov 04, 2025, 06:41 PM UTC

   We are continuing to investigate this issue.

4. identified Nov 04, 2025, 06:59 PM UTC

   The issue has been identified and a fix is being implemented.

5. monitoring Nov 04, 2025, 07:42 PM UTC

   A fix has been implemented and we are monitoring the results.

6. resolved Nov 04, 2025, 08:21 PM UTC

   This issue has been resolved. Teams will now begin their root cause analysis. If you believe that you are still impacted by this issue please contact customer support and reference CINC-63161.

Read the full incident report →

Started Oct 24, 2025, 03:42 PM UTC· resolved Oct 25, 2025, 07:00 AM UTC

1. investigating Oct 24, 2025, 03:42 PM UTC

   We are investigating a potential issue with KVService, that may impact several Splunk cloud platform customers in eu-central-1. As a result of this issue, customers are experiencing lookups failing to complete. We will provide an update within the next 30 minutes.

2. investigating Oct 24, 2025, 04:08 PM UTC

   We are continuing to investigate this issue.

3. investigating Oct 24, 2025, 04:40 PM UTC

   We continue to investigate the issue with KVService, that may impact several Splunk cloud platform customers in eu-central-1. As a result of this issue, customers are experiencing lookups failing to complete as well as errors within Splunk applications that depend heavily on KVService.

4. investigating Oct 24, 2025, 05:30 PM UTC

   We are continuing to investigate this issue.

5. identified Oct 24, 2025, 06:01 PM UTC

   The issue has been identified and a temporary fix is implemented.

6. monitoring Oct 24, 2025, 06:42 PM UTC

   A fix has been implemented and we are monitoring the results.

7. resolved Oct 25, 2025, 07:00 AM UTC

   This incident has been resolved after applying the fix.

Read the full incident report →

Started Oct 20, 2025, 10:24 AM UTC· resolved Oct 20, 2025, 11:22 PM UTC

1. identified Oct 20, 2025, 10:24 AM UTC

   We are investigating an issue indicating an AWS outage in us-east-1. As a result, the Splunk Cloud Platform environment may be inaccessible for customers in the specified region. Our teams are working with the provider to resolve this issue. Your patience is greatly appreciated and we will provide more updates upon resolution.

2. identified Oct 20, 2025, 11:44 AM UTC

   We are continuing to work with service provider on a fix for this issue.

3. monitoring Oct 20, 2025, 01:06 PM UTC

   We are aware of recent issues impacting our services due to an AWS incident in the US-EAST-1 region. AWS has applied mitigations and is making progress toward full resolution. At this time, our systems are stable, and we are closely monitoring for any further impact. We will continue to monitor the situation and provide another update by 7:00 AM PDT or sooner if new information becomes available.

4. monitoring Oct 20, 2025, 03:02 PM UTC

   We have confirmed that multiple AWS services experienced network connectivity issues in the US-EAST-1 Region. We are seeing early signs of recovery for these connectivity issues and AWS is continuing to investigate the root cause. AWS has applied mitigations and is making progress toward full resolution. Thank you for your patience.

5. identified Oct 20, 2025, 03:55 PM UTC

   We are aware of an outage impacting multiple AWS services in the US-EAST-1 region. This is affecting several Splunk Cloud Platform environments that rely on these AWS services. Splunk users may experience delays or errors in search execution, data ingestion, or app functionality for stacks hosted in the affected AWS region (US-EAST-1). According to AWS, they have narrowed down the source of the network connectivity issues to an internal subsystem responsible for monitoring the health of their network load balancers. AWS has implemented throttling for new EC2 instance launches to aid recovery and is actively applying mitigations. https://health.aws.amazon.com/health/status?path=open-issues Splunk is continuing to monitor the situation closely and will provide updates as AWS progresses toward full service restoration.

6. identified Oct 20, 2025, 05:12 PM UTC

   We continue to track the ongoing AWS operational issue in the US-EAST-1 (N. Virginia) region that is causing intermittent service degradation across multiple AWS services. This outage continues to affect several Splunk Cloud Platform environments hosted in the impacted region. Customers hosted in US-EAST-1 may continue to experience latency, delayed search results, or reduced availability of certain Cloud functions. All other Splunk Cloud regions remain fully operational. https://health.aws.amazon.com/health/status?path=open-issues Splunk is continuing to monitor the situation closely and will provide updates as AWS progresses toward full service restoration.

7. identified Oct 20, 2025, 06:41 PM UTC

   Splunk is actively monitoring an ongoing operational issue in the AWS US-EAST-1 (N. Virginia) region that is causing intermittent service degradation across multiple AWS services and impacting several Splunk Cloud Platform environments. While steady recovery is being observed across Splunk's cloud infrastructure, customers hosted in US-EAST-1 may still experience latency, delayed search results, or reduced availability of certain Cloud functions until AWS infrastructure fully recovers. All other Splunk Cloud regions remain fully operational. Splunk will continue to provide updates as AWS progresses toward full service restoration.

8. identified Oct 20, 2025, 08:10 PM UTC

   As AWS continues its recovery efforts in the US-EAST-1 region, Splunk Cloud Platform customers in this region may still experience intermittent issues. We are closely monitoring AWS updates and will provide additional status information as it becomes available. All other Splunk Cloud regions remain fully operational.

9. monitoring Oct 20, 2025, 10:13 PM UTC

   As AWS continues its recovery efforts in the US-EAST-1 region, Splunk Cloud Platform customers in this region may still experience intermittent issues. We are closely monitoring AWS updates and will provide additional status information as it becomes available. All other Splunk Cloud regions remain fully operational.

10. monitoring Oct 20, 2025, 11:09 PM UTC

    We are continuing to monitor for any further issues.

11. monitoring Oct 20, 2025, 11:10 PM UTC

    AWS has reported that the earlier issues impacting services in the US-EAST-1 (N. Virginia) region have been fully resolved as of 3:01 PM PDT. All impacted services have returned to normal operations. Users may continue to observe minor latency or delays as AWS and dependent services complete backlog processing and return to standard performance levels. We are closely monitoring our systems and will provide further updates if any new issues arise. Thank you for your patience.

12. resolved Oct 20, 2025, 11:22 PM UTC

    AWS has reported that the earlier issues impacting services in the US-EAST-1 (N. Virginia) region have been fully resolved as of 3:01 PM PDT. All impacted services have returned to normal operations. Users may continue to observe minor latency or delays as AWS and dependent services complete backlog processing and return to standard performance levels. We understand the criticality of your services and appreciate your patience.

Read the full incident report →

Started Sep 22, 2025, 10:15 AM UTC· resolved Sep 22, 2025, 07:09 PM UTC

1. investigating Sep 22, 2025, 10:15 AM UTC

   We have identified an issue with the Splunk Mobile app not being able to connect to Splunk Secure Gateway. This issue ONLY affects the mobile apps, and not customer's Splunk Enterprise/Splunk Cloud instances. Your patience is greatly appreciated and we will provide more updates as we investigate and work on a fix for the issue.

2. identified Sep 22, 2025, 12:06 PM UTC

   The issue has been identified and a fix is being implemented. Please note that the issue ONLY affects the Splunk mobile app, and not customer's Splunk Enterprise/Splunk Cloud instances.

3. identified Sep 22, 2025, 02:58 PM UTC

   A fix has been identified and is being currently implemented. Please note that the issue ONLY affects the Splunk mobile app, and not customer's Splunk Enterprise/Splunk Cloud instances.

4. resolved Sep 22, 2025, 07:09 PM UTC

   A software fix has been provided for release to consumers. iOS version 2.44.0 is ready and available for customer download via the App Store. Android version 2.43.1 is awaiting review and will be released in the upcoming days. Affected customers should update to the fixed app version as soon as it is available. Please note that the issue ONLY affects the Splunk mobile app, not customers' Splunk Enterprise/Splunk Cloud instances.

Read the full incident report →

Started Aug 19, 2025, 04:56 PM UTC· resolved Aug 19, 2025, 11:01 PM UTC

1. investigating Aug 19, 2025, 04:56 PM UTC

   We are investigating a potential issue with search and ingest that may impact customers on Splunk Cloud Platform for FedRAMP High and Splunk Cloud Platform for IL5. As a result of the issue, customer search and indexing may experience issues completing successfully. We will provide an update within the next 30 minutes.

2. identified Aug 19, 2025, 05:25 PM UTC

   We have identified the source of the issue and are currently working on implementing a fix.

3. identified Aug 19, 2025, 05:57 PM UTC

   We continue working to implement a fix for this issue.

4. identified Aug 19, 2025, 06:26 PM UTC

   We are starting to see recovery on some of the impacted instances. Teams continue to work on implementing a fix for this issue.

5. identified Aug 19, 2025, 06:54 PM UTC

   We see recovery on some of the impacted instances. Teams continue to work on implementing a fix for this issue.

6. identified Aug 19, 2025, 07:23 PM UTC

   We continue working to implement a fix for this issue.

7. identified Aug 19, 2025, 07:53 PM UTC

   We continue working to implement a fix for this issue.

8. identified Aug 19, 2025, 08:22 PM UTC

   We continue working to implement a fix for this issue.

9. identified Aug 19, 2025, 08:50 PM UTC

   We continue working to implement a fix for this issue.

10. identified Aug 19, 2025, 09:19 PM UTC

    We continue working to implement a fix for this issue.

11. identified Aug 19, 2025, 09:49 PM UTC

    We continue working to implement a fix for this issue.

12. monitoring Aug 19, 2025, 09:56 PM UTC

    A fix has been implemented and we are monitoring the results.

13. monitoring Aug 19, 2025, 10:27 PM UTC

    We are continuing to monitor for any further issues.

14. monitoring Aug 19, 2025, 11:00 PM UTC

    We are continuing to monitor for any further issues.

15. resolved Aug 19, 2025, 11:01 PM UTC

    This incident has been resolved.

Read the full incident report →

Started Jun 17, 2025, 07:30 PM UTC· resolved Jun 17, 2025, 07:30 PM UTC

1. resolved Jun 17, 2025, 08:31 PM UTC

   We are aware of a service provider outage on GitHub that lasted from 12:42 PM PT to 1:22 PM PT. As a result, changes such as firewall rule modifications or updates to the IP allow list made via the Admin Config Service (ACS) may have failed during this time. Further details may be found at https://www.githubstatus.com This issue has been resolved by the provider. If you believe that you are still impacted by this issue please contact customer support and reference CINC-61287.

Read the full incident report →

Started Jun 12, 2025, 07:52 PM UTC· resolved Jun 12, 2025, 11:01 PM UTC

1. identified Jun 12, 2025, 07:52 PM UTC

   We are investigating a reported issue for all stacks hosted on GCP. As a result, the Splunk Cloud Platform environment may be inaccessible for customers. Please refer to the current live updates from GCP here - https://status.cloud.google.com/incidents/ow5i3PPK96RduMcb1SsW Our teams are monitoring the status of the outage. Your patience is greatly appreciated and we will provide more updates upon resolution.

2. identified Jun 12, 2025, 07:56 PM UTC

   We are continuing to work on a fix for this issue.

3. monitoring Jun 12, 2025, 09:59 PM UTC

   A fix has been implemented. We are monitoring to confirm full service recovery. Additional details can be found here: https://status.cloud.google.com/incidents/ow5i3PPK96RduMcb1SsW

4. resolved Jun 12, 2025, 11:01 PM UTC

   This incident has been resolved.

Read the full incident report →

Started Jun 05, 2025, 07:14 PM UTC· resolved Jun 07, 2025, 01:22 AM UTC

1. identified Jun 05, 2025, 07:14 PM UTC

   Splunk is aware of an issue currently affecting SOAR customers. As a result of the issue, users will not be able to save playbooks after making edits. Error message: "Unexpected keyword argument 'code_names' in function call" We understand the impact this has on your operations and are working to resolve the issue as quickly as possible. We will provide more information when it becomes available. No actions are needed from customers at this time. Thank you for your patience and understanding.

2. monitoring Jun 06, 2025, 09:21 PM UTC

   We have implemented a fix for this issue. During this time we are monitoring the results to confirm the resolution and will continue to provide any additional updates once available.

3. resolved Jun 07, 2025, 01:22 AM UTC

   This issue has been resolved. Teams will now begin their root cause analysis. If you believe that you are still impacted by this issue please contact customer support and reference .

Read the full incident report →

Started May 30, 2025, 10:52 PM UTC· resolved Jun 03, 2025, 10:02 PM UTC

1. identified May 30, 2025, 10:52 PM UTC

   Hello, Splunk Cloud customers using the SOAR platform may be impacted by Playbooks appearing to load but backend logic failing. We have identified the source of the issue in version 6.4.1 and are currently working on implementing a fix. At this time, there is no further action needed from customers. There is an active workaround to mitigate impact: - Open the playbook in the Visual Playbook Editor (VPE). - Manually review and adjust the join settings (check/uncheck as needed). - Save the playbook to apply the changes Your patience is greatly appreciated and we will provide more updates as we implement the fix.

2. identified May 31, 2025, 06:35 AM UTC

   Splunk has identified an issue in SOAR version 6.4.1 where Playbooks may appear to load correctly but failing in backend execution. A fix is in progress, and no immediate action is required from customers. As a workaround, to mitigate the impact: - Open the playbook in the Visual Playbook Editor (VPE) - Manually review and adjust the join settings (check/uncheck as needed) - Save the playbook to apply the changes We appreciate your patience and will share further updates as the fix is implemented.

3. resolved Jun 03, 2025, 10:02 PM UTC

   This fix will be deployed to all cloud stacks on Thursday, June 5, 2025, between 1:00 AM and 3:00 AM local stack time. On-premises customers will receive the updated release for download on June 5, 2025 (PDT). If you wish to apply the workaround before the scheduled fix is deployed, you can do so by following the steps below: - Open the affected playbook in the Visual Playbook Editor (VPE). - Manually review and adjust the join settings (check/uncheck as needed). - Save the playbook to apply the changes. Teams will now begin their root cause analysis. If you believe that you are still impacted by this issue please contact customer support and reference CINC-61075.

Read the full incident report →

Started May 15, 2025, 04:05 AM UTC· resolved May 15, 2025, 04:55 AM UTC

1. investigating May 15, 2025, 04:05 AM UTC

   Splunk is aware of an issue currently affecting Splunkbase (splunkbase.splunk.com). As a result of the issue, users are unable to access Splunkbase and are receiving the following error: "The site cant be reached". Users are currently not able to down load apps or do app installs in Cloud through the UI. We understand the impact this has on your operations and are working to resolve the issue as quickly as possible. We will provide more information in 1 hour or when more information becomes available. Thank you for your patience and understanding.

2. resolved May 15, 2025, 04:55 AM UTC

   Fix has been implemented and Splunkbase is operational now along with the monitoring. This incident is now resolved. Thank you

Read the full incident report →

Started Apr 19, 2025, 02:09 AM UTC· resolved Apr 19, 2025, 02:16 AM UTC

1. identified Apr 19, 2025, 02:09 AM UTC

   503 errors being returned for ACS calls to list maintenance schedules for several customers. Error message "multiple concurrent requests can cause the service to become unavailable. Retry your request at a later time" were observed on CMC Maintenance Windows dashboard. We have identified the source of the issue and are currently working on implementing a fix.

2. resolved Apr 19, 2025, 02:16 AM UTC

   The fix has been implemented, and the issue is now resolved If you believe that you are still impacted by this issue please contact customer support and reference CINC-60549.

Read the full incident report →

Started Apr 02, 2025, 03:33 AM UTC· resolved Apr 02, 2025, 09:13 PM UTC

1. identified Apr 02, 2025, 03:33 AM UTC

   After March 27, 2025, a modification was enacted in the CMC applications (monitoring and summarizer) that led to the migration of summary events collected by saved searches from the index:summary to the index:_cmc_summary. As a result, dashboards and reports created by customers that depend on events from index:summary are currently non-functional. Our teams are actively working on deploying a patch to restore the functionality of these dashboards and reports; however, there may appear to be a data gap from the March 27 release date through to the time the patch is applied. To regain access to data from this period, customers are required to update their customer created searches and knowledge objects by replacing the phrase (index=summary) with (index=summary OR index=_cmc_summary). This update ensures compatibility with both current and future releases. ⚠ Note: To avoid any data gaps in your dashboards after March 27th, we recommend updating your dashboards and reports. This will ensure consistent data reporting.

2. resolved Apr 02, 2025, 09:13 PM UTC

   On March 27th, Splunk updated the CMC app to the latest version. Some customers may be depending on indexes within this app for their custom dashboards and reports, which may no longer function due to the index name change. For more information and guidance on updating your searches, please visit https://splunk.my.site.com/customer/s/article/CMC-new-summary-index.

Read the full incident report →

Started Oct 27, 2024, 03:45 PM UTC· resolved Oct 28, 2024, 05:14 AM UTC

1. investigating Oct 27, 2024, 03:45 PM UTC

   We are investigating a reported issue indicating an issue with search for some customers on AWS region US-WEST-2. As a result, the Splunk Cloud Platform environment may experience issues completing searches for customers in the specified region(s).

2. investigating Oct 27, 2024, 05:24 PM UTC

   We are continuing to investigate this issue.

3. investigating Oct 27, 2024, 06:23 PM UTC

   We are continuing to investigate this issue.

4. investigating Oct 27, 2024, 08:17 PM UTC

   We are continuing to investigate this issue with our third-party vendor. Further updates will be provided as we gather more information. Thank you for your patience as we work to resolve this issue.

5. investigating Oct 27, 2024, 10:11 PM UTC

   We are continuing to investigate this issue with our third-party vendor. Further updates will be provided as we gather more information. Thank you for your patience as we work to resolve this issue.

6. monitoring Oct 28, 2024, 12:51 AM UTC

   A fix has been identified with our third-party vendor and has been implemented successfully to mitigate the issue. We are currently monitoring. Thank you for your patience as we work to resolve this issue.

7. resolved Oct 28, 2024, 05:14 AM UTC

   At 5.45 PM PT, a fix has been identified with our third-party vendor and has been implemented successfully to mitigate the issue.

Read the full incident report →