Splunk Cloud

Splunk Cloud User Manual

Download manual as PDF

Download topic as PDF

Overview of Splunk Cloud administration

In Splunk Cloud, you use Splunk Web to perform administrative tasks. Unlike Splunk Enterprise, you do not have access to the command line or file system of your Splunk Cloud deployment, so cannot use CLI commands or edit .conf files.

For the following tasks, file a ticket using the Support Portal and Splunk Support will work with you to arrange a maintenance window:

  • Installing or deleting Splunk apps.
  • Managing custom transforms
  • Managing capabilities and settings for roles
  • Any task that requires editing a .conf file directly.

Read more about settings in the Splunk Enterprise Admin Manual.

REST API access to Splunk Cloud

Many administrative tasks can be done using the Splunk REST API. Splunk Cloud supports the same REST endpoints as Splunk Enterprise. For details about REST endpoints, refer to the REST API Reference Manual. To use the REST API, you must have a paid subscription to Splunk Cloud.

You cannot use SAML authentication with the REST API.

To enable the Splunk REST API and SDKs, submit a support case on the Support Portal to request access. You can specify a range of IP addresses to control who can access the REST API.

  • Managed Splunk Cloud deployments: Use the following URL: https://<deployment-name>.cloud.splunk.com:8089
  • Self-service Splunk Cloud deployments: To get the required credentials, submit a support case on the Support Portal. After installing the credentials, use the following URL: https://input-<deployment-name>.cloud.splunk.com:8089
Forward data from files and directories to Splunk Cloud
Splunk Cloud data policies

This documentation applies to the following versions of Splunk Cloud: 6.6.3, 7.0.0, 7.0.2, 7.0.3, 7.0.5, 7.0.8, 7.1.3, 7.1.6, 7.2.3, 7.2.4, 7.2.6

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters