Splunk Cloud Platform

All Systems Operational

About This Site

This page published on May 15, 2023, will list widespread multi-customer outages in Splunk Cloud Platform from this day onwards. In times of customer-specific outages in Splunk Cloud Platform, customer will continue to receive notifications via other established mechanisms. The page is not intended to replace our customer support offering or other offerings we have in place to enlighten our customers on their specific Splunk instances.

Login Operational
Ingest Operational
Search Operational
Index Operational
Infrastructure Operational
Cloud Connect Operational
Detection Studio Operational
Threat Intel Management (TIM) Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance

Scheduled Maintenance

Admin Config Service (ACS) Maintenance Window May 29, 2026 16:00-19:00 UTC

What's Happening?

The objective of this maintenance window is to test Regional Resiliency feature where in we will failover to a backup ACS region and perform tests. This applies to all Splunk Cloud Commercial customers and is part of our commitment to unlocking enhanced functionality in future ACS releases while ensuring optimal performance for your Splunk Cloud environment?

Service Impact:

- ACS Services: APIs, CLI, and Terraform Splunk Cloud Provider (SCP) integrations will be offline.
- IP Allow Lists will continue to be enforced throughout the update and will persist after this upgrade
- IP Allow List UI page and API calls will not be accessible
- ACS Helper App
- Viewing or Editing Maintenance Window Schedules (CMC App)
- Viewing or editing maintenance windows will be unavailable
- Existing Maintenance Windows and settings will persist after this upgrade
- Existing Configurations: (e.g., IP Allow Lists, user roles) will remain active and unaffected.


Services with no impact:


- Splunk Cloud Platform features such as environment access, search, and data ingestion will remain fully operational
- Federated Searches and existing Federated Connections will continue to operate
- Federated Search settings will persist and Cloud admins will regain CRUD


Customer Notes:

- No other maintenance windows or changes to your environments are scheduled during this time. Additionally, this upgrade will not affect your current Splunk Cloud Platform version or ACS version.
- No P1 Tickets: Please refrain from opening Priority 1 tickets for impacted services (Admin Config Service) during the maintenance window. If issues persist after the maintenance window has concluded (5/29/2026 19:00 UTC), submit a support request as needed.


Thank you for your patience as we make these critical upgrades. For questions, contact our support team.

Posted on May 26, 2026 - 22:31 UTC
May 28, 2026
Resolved - Some customers experienced traditional HEC ingestion issues due to a DNS synchronization issue affecting HEC dash DNS records using the format http-inputs-${stack}.splunkcloud.com.
HEC ingestion using the current dot-format DNS records, http-inputs.${stack}.splunkcloud.com, is functioning correctly. This issue was resolved for affected customers by 07:00 UTC.

May 28, 07:21 UTC
Identified - Some customers are experiencing ingestion issues due to a DNS synchronization issue affecting HEC dash DNS records using the format http-inputs-${stack}.splunkcloud.com.
HEC ingestion using the current dot-format DNS records, http-inputs.${stack}.splunkcloud.com, is functioning correctly.
As a mitigation, customers using the dash-format HEC endpoint should update their upstream systems to use the dot-format endpoint: http-inputs.${stack}.splunkcloud.com.
Our engineering teams are working to restore the affected DNS records through Zone DNS synchronization. We will provide another update once DNS synchronization has completed or if there is a meaningful change in impact.

May 28, 06:22 UTC
Resolved - The incident has been resolved. Our investigation determined that an internal configuration change began impacting service at 20:34 UTC on May 27, 2026. A fix was developed and rolled out beginning at 23:45 UTC, with full remediation completed by 03:45 UTC on May 28, 2026.
We apologise for any inconvenience this caused and appreciate your patience while our teams worked to restore service.

May 28, 01:43 UTC
Monitoring - A fix has been implemented and we are monitoring the results.
May 28, 01:41 UTC
Identified - We identified an issue caused by an internal change on May 26, 2026, that impacted ingestion through a PrivateLink. A fix has been identified, released and is currently rolling out.
Some customers may continue to experience impact while the fix is being applied. We’ll provide another update once rollout is complete.
Our teams are actively working to restore service and will provide another update as soon as more information is available

May 28, 01:31 UTC
Monitoring - A mitigation has been successfully applied across the fleet. Engineering teams are actively monitoring to confirm service has been fully restored and to ensure no further interruptions occur.
May 28, 01:27 UTC
Identified - We’re investigating an issue affecting some customers hosted in ap-northeast-1, eu-central-1, and us-east-1. Impacted Splunk Cloud Platform customers in these regions may experience access issues.
Our teams are actively working to restore service, and we’ll share updates as more information becomes available

May 28, 00:15 UTC
May 27, 2026

No incidents reported.

May 26, 2026

No incidents reported.

May 25, 2026

No incidents reported.

May 24, 2026

No incidents reported.

May 23, 2026

No incidents reported.

May 22, 2026

No incidents reported.

May 21, 2026

No incidents reported.

May 20, 2026

No incidents reported.

May 19, 2026

No incidents reported.

May 18, 2026

No incidents reported.

May 17, 2026

No incidents reported.

May 16, 2026

No incidents reported.

May 15, 2026

No incidents reported.

May 14, 2026

No incidents reported.