Splunk® Data Stream Processor

Connect to Data Sources and Destinations with DSP

Acrobat logo Download manual as PDF


On April 3, 2023, Splunk Data Stream Processor will reach its end of sale, and will reach its end of life on February 28, 2025. If you are an existing DSP customer, please reach out to your account team for more information.

All DSP releases prior to DSP 1.4.0 use Gravity, a Kubernetes orchestrator, which has been announced end-of-life. We have replaced Gravity with an alternative component in DSP 1.4.0. Therefore, we will no longer provide support for versions of DSP prior to DSP 1.4.0 after July 1, 2023. We advise all of our customers to upgrade to DSP 1.4.0 before July 1, 2023 in order to continue to receive full product support from Splunk.
Acrobat logo Download topic as PDF

Data sources and destinations

The can collect data from and send data to a variety of locations, including databases, monitoring services, and pub/sub messaging systems. The location that DSP collects data from is called a "data source", while the location that DSP sends data to is called a "data destination".

Each type of data source or destination is supported by a specific DSP function. For example, you must use the Splunk forwarders source function to receive data from a Splunk forwarder, and use the Amazon Kinesis Data Streams sink function to write data to a Kinesis stream. Functions that provide read access to data sources are called source functions, while functions that provide write access to data destinations are called sink functions.

Some sink functions are only available if you're using a Universal license for DSP. Specifically, the following sink functions require the Universal license:

See Licensing for the in the Install and administer the Data Stream Processor manual for more information.

The following diagram summarizes the data sources and destinations that DSP supports, and identifies the data destinations that require a Universal license:

See Deprecated and removed features for the list of source connectors that are no longer supported as of version 1.4.0.

The Splunk Data Stream Processor can collect data from sources such as Splunk forwarders, the Ingest service, the HTTP Event Collector (HEC), and Syslog data sources. The Splunk Data Stream Processor can send data to destinations such as the Splunk platform, Amazon Kinesis Data Streams, and Amazon S3.

Last modified on 20 September, 2022
PREVIOUS
Getting started with data connections
  NEXT
Data collection methods

This documentation applies to the following versions of Splunk® Data Stream Processor: 1.4.0, 1.4.1, 1.4.2, 1.4.3


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters