Skip to content Skip to site navigation Skip to service navigation

Centralized Logging (Splunk)

Splunk searches, monitors, and analyzes machine-generated big data via a web interface and can generate graphs, reports, alerts, dashboards, and visualizations.

Splunk as a Service

The Splunk service includes:

Direct access to search your logs
All software licenses and annual maintenance, server hardware, and storage
18 months of log retention
6 months of log backup
System administration support for the servers and storage
Periodic log volume reports and alerts

Contact your University IT support team to learn how to access your logs.

Get started

Windows servers:

Splunk Universal Forwarder for Windows Servers (Restricted Access)

Linux server options:

Splunk Universal Forwarder for Linux Servers — Recommended (Restricted Access)
Splunk via rsyslog for Linux Servers (Restricted Access)

Learn more

How to Log in to Splunk and Perform a Search (Restricted Access)
Splunk Logging Standards (Restricted Access)

For more information or help, please submit a Help ticket.

Last modified April 21, 2017

At a glance

Eligibility

Stanford University and hospitals, SLAC

Requirements

Service subscription and a valid PTA in Oracle Financials.

Data Security

The Splunk service may be used with logging information generated by Low, Moderate, or High Risk systems as defined by the Stanford University Information Security Office, but do not send High Risk Data to Splunk.

Support

For assistance, please submit a Help ticket.

Rates

For systems managed by University IT, Splunk is included at no additional fee.
For systems not managed by University IT, Splunk is available for a monthly fee based on the average GB of logs ingested per day during the previous 30 days (see Rates).