Skip to main content

Splunk Cloud

Splunk Cloud

Splunk Forwarders send data to Splunk Cloud rather than the legacy on-premises infrastructure.
The previous shortcuts are no longer supported. Access Splunk by using this link.
Emailed Splunk alerts originate from the “alerts@splunkcloud.com," please consider updating any Outlook rules you may have used previously for “cio-sem-admin@osu.edu“.
For any questions or concerns, please email otdi-logsupport@osu.edu.

Networking Changes

If you have Splunk forwarders or HECs deployed in your environment that do not have outbound access, please make the following changes to your firewalls:

  1. Forwarder ingestion:
    1. Action: Allow
    2. Destination IPs: 52.20.208.232, 13.216.131.231, 34.231.216.90
    3. Destination FQDNs: inputs[1-15].osu.splunkcloud.com
    4. Protocol: TCP
    5. Port(s): 9997
  2. HEC ingestion:
    1. Action: Allow
    2. BEFORE SEPTEMBER 12th Destination IPs: 13.222.48.142, 34.236.83.232, 34.196.17.253
    3. Destination IPs: 13.216.131.231,34.231.216.90,52.20.208.232
    4. Destination FQDNs:
      1. JSON-formatted events: https://http-inputs-osu.splunkcloud.com:443/services/collector/event
      2. Raw events: https://http-inputs-osu.splunkcloud.com:443/services/collector/raw
    5. Protocol: TCP
    6. Port(s): 443
  3. API/Management:
    1. Action: Allow
    2. Destination IPs: 3.210.129.179, 34.230.146.78, 3.209.185.131
    3. Destination FQDNs: https://osu.splunkcloud.com
    4. Protocol: TCP
    5. Port(s): 8089

Forwarder Upgrades

Splunk Cloud requires Universal Forwarders to be upgraded to 9.x.
The Log Management team will contact units that require upgrades. If your unit is not contacted, no action is required — though upgrading to the latest version provided is still encouraged.
You can find the list of forwarders via the OneDrive links below. Additionally, instructions to upgrade can be found in the Upgrading the Forwarder instructional guide.
For all currently supported operating systems, please upgrade your forwarder to 9.4:

If you cannot upgrade to 9.4, please reach out to the Log Management team for alternatives.