I am pretty new to Splunk. What is the difference between Splunk on premises vs Splunk cloud vs AWS splunk? Please enlighten me.
That thread linked by @gcusello is relatively old but quite valid.
Generally speaking - in terms of the basic user's experience, they are prety similar and you could have difficult time telling one from the other.
The difference is who is responsible for the infrastructure and who does the "low-level" stuff on the environment (and what you can do there). Because obviously you don't have direct access to the underlying servers in Splunk Cloud. Some of the settings you normally can adjust from the CLI you can only manipulate via apps uploaded to the Cloud (and remember that your private apps go through the vetting process so you can't just throw anything in them). Some settings may only be set by support. Some cannot be changed. But you don't need to worry about mundane stuff like backups.
If you set up your Splunk environment in AWS (I assume that's what you mean by AWS Splunk), it's exactly like an on-prem Splunk Enterprise installation but without having to maintain the hardware.
Hi @splunklearner ,
Splunk on premise is installed on your own infrastructure.
Splunk Cloud is a service that is managed by Splunk itself and it's located on QWS infrastructure but it's transparent for you.
Splunk on QWS is a service from AWS, is similar to Splunk on premise but installed on a private clud on AWS.
You can find a comparative analysis between On-Premise and Cloud at:
https://www.conducivesi.com/about-splunk/splunk-enterprise-vs-splunk-cloud
Ciao.
Giuseppe
Hi @gcusello ,
Expecting it is not QWS it is AWS.(correct me if I am wrong)
Can you please illustrate more about Splunk cloud vs AWS splunk?
Hi @splunklearner ,
yes sorry, it was a mistyping!
I don't know exactly the differences between Splunk Cloud ans Splunk on AWS, probably they are very quite because the infrastructure is the same and the product is the same, it's different only who manages it.
If you want am on premise solution take in consideration Splunk on-premise, if you want a cloud solution, take in consideration Splunk Cloud.
Ciao.
Giueppe