Splunk Enterprise

Main differences between Splunk Enterprise and Splunk Cloud

JoeSco27
Communicator

Currently we have an all On-Prem Splunk enterprise environment. From an administration perspective what is the differences if we move to a Splunk Cloud environment. What will be the differences in managing the deployment of apps? Any and all information is welcome. Thank you.

0 Karma

sloshburch
Splunk Employee
Splunk Employee

I think some of the URLs have moved over time. So here's their location as of today:

mmacvicar_splun
Splunk Employee
Splunk Employee

andrewb_splunk
Splunk Employee
Splunk Employee

The Splunk Cloud documentation also provides a more detailed comparison of Splunk Cloud and Splunk Enterprise: http://docs.splunk.com/Documentation/SplunkCloud/6.4.1/User/Overview.

richgalloway
SplunkTrust
SplunkTrust

I am not a Cloud user, but did investigate moving in that direction. The key difference between Enterprise and Cloud is you have no control over the underlying infrastructure with Cloud. You can install and manage apps using the familiar GUI, but any changes to the platform (permissions changes, program installation, etc.) are done by Splunk support via a ticket.

As with any cloud service, there are also security considerations - that is, can Splunk Cloud still access all of your on-premises data sources.

---
If this reply helps you, Karma would be appreciated.

yannK
Splunk Employee
Splunk Employee

You will be sending the data to the splunkcloud deployment using a splunk forwarder installed on your on-prem servers. So you not need to open your inbound access, only outbound ports to send data to the cloud servers.,

Exceptions :
- if you have an app that uses a script to collect logs remotely using an API (ldap search, db connect, or AWS S3 monitoring by example), then the inputs collector may be on the cloud instance, and may require some firewall work.

Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...