Downtime costs you
Learn about the costs of downtime — and how to avoid it. Get the free report.
Splunk Data Stream Processor
This blog post contains important information regarding Splunk Data Stream Processor (DSP).
Effective immediately, DSP is no longer available for sale to new customers. Please read on for consideration of other available Splunk solutions that address similar use cases.
End of support for DSP version 1.3 has been modified from March 30, 2024 to July 1, 2023 in order to align with the end of life for Gravity, a Kubernetes orchestrator that was part of DSP releases prior to version 1.4. Existing DSP customers are encouraged to upgrade to version 1.4 for continued support through February 2025, as per the Splunk Software Support Policy.
About Splunk Data Stream Processor
Splunk Data Stream Processor is a real-time stream processing solution that collects and processes high-volume, high-velocity data then delivers results to Splunk and other destinations, in milliseconds. It provides a powerful and flexible way to manage and manipulate data streams by applying filters, transformations, and aggregations in real-time.
DSP is designed to handle large and complex data streams, including data from IoT devices, social media platforms, and machine logs. It provides a scalable architecture that can handle millions of events per second and can be deployed on-premises or in the cloud.
What To Use Instead
Splunk offers other solutions for your data transformation and processing needs:
- Universal Forwarder remains the most popular way to get data into Splunk. There are a wide variety of options available for data ingestion in Splunk Cloud Platform and Splunk Enterprise, from Index Clusters and Standalone Indexers to Heavy Forwarders and Splunk Cloud Platform itself (supported on AWS). To get started, download it for free.
- Ingest Actions allow you to route, filter, and mask data while it is being streamed to your indexers. A UI over existing props and transforms, Ingest Actions ships natively on Splunk Enterprise and Splunk Cloud Platform.
- Edge Processor is Splunk’s latest innovation in data transformation. Delivered as a cloud-based service offering through Splunk Cloud Platform, Edge Processor provides flexible filtering, masking, and routing capabilities powered by Splunk’s next-generation data search and preparation language, SPL2. To learn more about Edge Processor, please contact EdgeProcessor@splunk.com.
More resources
Here are additional resources that can help you to adopt Splunk in your environment:
- Splunk Lantern, where you can self-serve your way to achieving business use cases with Splunk products.
- Splunk Docs, where you’ll find all the technical specs for our products.
- Splunk Training & Certification, where you can take a variety of courses or follow learning paths towards Splunk expertise.
- Splunk Community, where you can ask questions and find answers to your questions.
See an error or have a suggestion? Please let us know by emailing ssg-blogs@splunk.com.
This posting does not necessarily represent Splunk's position, strategies or opinion.
Related Articles
About Splunk
The Splunk platform removes the barriers between data and action, empowering observability, IT and security teams to ensure their organizations are secure, resilient and innovative.
Founded in 2003, Splunk is a global company — with over 7,500 employees, Splunkers have received over 1,020 patents to date and availability in 21 regions around the world — and offers an open, extensible data platform that supports shared data across any environment so that all teams in an organization can get end-to-end visibility, with context, for every interaction and business process. Build a strong data foundation with Splunk.
Subscribe to our blog
Get the latest articles from Splunk straight to your inbox.
Connect with Splunk on X
Follow @Splunk
