topic Deploying Splunk Enterprise on Kubernetes in Knowledge Management

Deploying Splunk Enterprise on Kubernetes

fzel — Sun, 02 Nov 2025 01:23:37 GMT

Hi everyone,

We’re currently evaluating whether to deploy Splunk in a Kubernetes environment or continue running it on bare metal as we transition from a standalone setup to a high-availability (HA) architecture. I think I've read somewhere that running it in k8s is not recommended but I haven't found any reasons why.

I’d love to hear from anyone with experience or recommendations on this.

Any insights would be greatly appreciated. Thanks in advance!

Re: Deploying Splunk Enterprise on Kubernetes

thahir — Sun, 02 Nov 2025 08:10:27 GMT

@fzel , please refer this doc

https://help.splunk.com/en/splunk-cloud-platform/get-started/splunk-validated-architectures/applied-svas/splunk-operator-for-kubernetes

Re: Deploying Splunk Enterprise on Kubernetes

livehybrid — Mon, 03 Nov 2025 15:16:08 GMT

Hi @fzel

You can certainly deploy Splunk on K8s using "Splunk Operator for Kubernetes" as per the link that @thahir provided, which is a valid and supported Splunk Validated Architecture (SVA), with the biggest limitation being if you intend to run ITSI on it then this is not currently supported.

🌟 Did this answer help you? If so, please consider:

Adding karma to show it was useful
Marking it as the solution if it resolved your issue
Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing