Outage in Splunk Cloud

DNS synchronization issue affecting HEC dash DNS records | #cinc-66607_cloud_multiple_privatelink(Degraded Performance)

Resolved Minor

May 28, 2026 - Started 4 days ago - Lasted about 1 hour
Official incident page

Incident Report

Summary AI Generated

A DNS synchronization issue affected Splunk Cloud customers using the dash-format HEC endpoint (http-inputs-${stack}.splunkcloud.com), causing data ingestion problems for 1 hour. Customers experienced ingestion failures while the dot-format endpoint (http-inputs.${stack}.splunkcloud.com) continued to work normally. The issue was resolved through DNS zone synchronization, and customers were advised to migrate to the dot-format endpoint as a permanent solution.

Some customers are experiencing ingestion issues due to a DNS synchronization issue affecting HEC dash DNS records using the format http-inputs-${stack}.splunkcloud.com. HEC ingestion using the current dot-format DNS records, http-inputs.${stack}.splunkcloud.com, is functioning correctly. As a mitigation, customers using the dash-format HEC endpoint should update their upstream systems to use the dot-format endpoint: http-inputs.${stack}.splunkcloud.com. Our engineering teams are working to restore the affected DNS records through Zone DNS synchronization. We will provide another update once DNS synchronization has completed or if there is a meaningful change in impact.

Components affected

Splunk Cloud Ingest

Trusted by 1,000+ teams

The Status Page Aggregator with Early Outage Detection

Stop finding out about outages from your users. Monitor 6,320+ cloud services and get alerted the second something breaks.

Start Free Trial Learn More

Latest Updates ( sorted recent to last )

RESOLVED 4 days ago - at 05/28/2026 07:21AM

Some customers experienced traditional HEC ingestion issues due to a DNS synchronization issue affecting HEC dash DNS records using the format http-inputs-${stack}.splunkcloud.com.
HEC ingestion using the current dot-format DNS records, http-inputs.${stack}.splunkcloud.com, is functioning correctly. This issue was resolved for affected customers by 07:00 UTC.

IDENTIFIED 4 days ago - at 05/28/2026 06:22AM

Some customers are experiencing ingestion issues due to a DNS synchronization issue affecting HEC dash DNS records using the format http-inputs-${stack}.splunkcloud.com.
HEC ingestion using the current dot-format DNS records, http-inputs.${stack}.splunkcloud.com, is functioning correctly.
As a mitigation, customers using the dash-format HEC endpoint should update their upstream systems to use the dot-format endpoint: http-inputs.${stack}.splunkcloud.com.
Our engineering teams are working to restore the affected DNS records through Zone DNS synchronization. We will provide another update once DNS synchronization has completed or if there is a meaningful change in impact.

Latest Splunk Cloud outages

Expected Restart(s) Following Maintenance Activity - 3 days ago

AWS Privatelink unable to receive HEC data with multiple AWS regions impacted | #cinc-66607_cloud_multiple_privatelink (Major Outage) - 5 days ago

Cloud Region Network Connectivity Impact | CINC-66292 (Major Outage) - 25 days ago

Search outage | CINC-66213 (Major Outage) - 28 days ago

Internal IT issue (Major Outage) - about 1 month ago

The Status Page Aggregator with Early Outage Detection

With IsDown, you can monitor all your critical services' official status pages from one centralized dashboard and receive instant alerts the moment an outage is detected. Say goodbye to constantly checking multiple sites for updates and stay ahead of outages with IsDown.

Start free trial

No credit card required · Cancel anytime · 6320 services available

Integrations with Slack Microsoft Teams Google Chat Datadog PagerDuty Zapier Discord Webhook