Scalable & Flexible

Deploy Splunk on a single host or across the data center to access, index and manage megabytes to terabytes of log and IT data each day. Got syslog? No problem, feed it to Splunk. But Splunk can also access and manage modern multi-line XML logging data from your infrastructure.

Access data from any live source:

• Mounted files: NFS/SMB, CIFS/AFP, NAS/SAN, FIFO,
• Remote files: rsync, scp/ftp/rcp,
• Network ports: UDP & TCP, syslog/syslog-ng, log4j/log4php, JMX/JMS, SNMP
• Databases: SQL/ODBC
• Splunk Servers: Access data locally on production hosts and forward it to another Splunk Server over SSL/TCP.

To learn more about deployment options see the Splunk Deployment Guide

Each Splunk Server can process 20,000-150,000 events per second on modest server - 3-5x faster than other log technologies and appliances. With the distributed search feature, you can flexibly manage your data and search it in real time across application, technology and geographic silos. Splunk stores all your original data and the Splunk indexes in an efficient datastore designed specifically for large-scale log and IT data.