Splunk Edge Processor Enhancements Offer Greater Data Access and Improve Data Management

On the heels of an exciting GA in March and the April announcement of its regional expansion, we are excited to share the latest updates to Splunk Edge Processor that will make it even easier for customers to have more flexibility and control over just the data you want, nothing more nothing less.  

Support Data Ingestion and Export Using HTTP Event Collector (HEC)

Users can now experience increased ingestion support from a wide range of applications and products that can send data to Splunk using HEC, and can take advantage of stream processing for third-party sources like VMWare Tanzu, Kubernetes, Kafka, among others.  Plus there’s better support for other Splunk-supported apps like Splunk Nozzle for VMware Tanzu, Splunk Connect for Kafka, Splunk Connect for Kubernetes, etc. that send data over HEC. What’s more, in addition to extended ingest support, Edge Processor now also supports exporting to Splunk using HEC.

Want to see it in action? Check out this short video on setting up Edge Processor to receive data from Kubernetes pods over HEC, and creating a pipeline to filter noisy events.

Assign a Default Destination per Edge Processor

To complement use cases involving data sovereignty, Splunk Admins can now configure a default destination for each Edge Processor node, where previously, only one global destination was available.  So, if desired, users  can direct unhandled data for each Edge Processor to a destination of  their choosing, giving  them the control and flexibility to choose how to access data and where to store it. This feature can also support the improvement of your organization's data compliance posture.  

Expanded Regional Availability in Four New Markets

Splunk Edge Processor expands its availability to Splunk Cloud stacks in EMEA with the addition of Frankfurt, Germany and London, England; and APAC which now includes Tokyo, Japan and Singapore. To get started using Splunk Edge Processor today, contact your Splunk Account Team to request activation, or send an email directly to with your company name, Splunk cloud stack name, and preferred Splunk Cloud region.  

For more about Splunk Edge Processor, including plans to support additional sources, destinations, and new functionality, see release notes and documentation.

Abbas Saboowala
Posted by

Abbas Saboowala

Abbas Saboowala is Principal Product Manager at Splunk. In this role, he has responsibility for developing data pipeline management capabilities in Splunk platform that serve to optimize data ingestion in order to reduce downstream storage and compute costs. He also manages data integration, data processing and data engineering products and services to fuel use cases for Security and Observability.

Abbas brings over 11 years of combined Product Management, Technical Support and Technical Consulting experience working with enterprise software products. He earned a B.E. in Electronic Engineering from University of Mumbai and a M.Sc. in Electrical Engineering Dynamics from The University of Toledo.  He lives in the San Francisco Bay Area.