Splunk Cloud Outage History

A KVservice issue in Splunk Cloud impacted Enterprise Security search performance for 1.3 hours, affecting ad-hoc, saved, and scheduled searches, particularly those using lookup commands for KV collections. Users experienced inability to save searches within the ES application, errors updating application settings like credentials, and failures in Mission Control and Analyst Queue dashboards. The engineering team identified the root cause and successfully implemented a fix, restoring full operational status to all searches and dashboards.

A cloud service provider outage in the Middle East region affected Splunk Cloud customers' ability to login, search data, and ingest new data for over 3 weeks. Cisco engineers resolved the issue by transitioning affected services out of the impacted region. All affected customers were contacted individually with specific remediation steps through proactive support cases.