Splunk Enterprise / Splunk Analytics for Hadoop / Splunk Light*

24 Jul 2021

Splunk Support Policy

Splunk Inc. provides Support Services for Purchased Offerings as set forth in the Splunk General Terms to Customers or (ii) applicable Partner Agreement to Partners (Partner to be defined as a “Customer” herein), with active subscriptions to a Support Program. Purchased Offerings may comprise either or both On-Premise Products (“Products”) and Hosted Services Offerings (“Services”). This Policy details the timelines during which specific Product versions are eligible for Support Services, as well as other policies that determine eligibility of both Products and Services for Support Services.

Product Version Numbering

Each Product release is identified with a numerical version comprising three sets of digits separated by decimals. The digit(s) to the left of the first decimal represent the major version, the digit(s) to the right of the first decimal represent the minor version, and the digit(s) to the right of the second decimal represent the maintenance version. Any version number that specifies the second digit(s) is referred to as a minor version, even if it is the first release of a new major version. For example, 7.0, 7.1, and 7.2 are all minor versions of the 7.x major version.

For the purposes of determining the Supported Version, any maintenance release that may be provided for a given minor version is considered part of that version and does not alter the minor version release date.

Page Sections

Product Version Numbering

Product Supported Version Timelines

Purchased Offering Support Services Policies

Core

Security

IT Operations

Product Supported Version Timelines

Any given Product version is considered a Supported Version (“Supported”) for a finite period following its release. The particular timelines for each Product are detailed below for all recent Product versions. Note that any prior version of any of these Products not listed here has reached End of Support.

Once a Product version is no longer Supported, it is considered End of Support. End of Support Product versions are not eligible for Support Services, and any software, associated product documentation, and Splunk Extensions that are not compatible with Supported Versions will no longer be available to Customers.

Splunk Core Products

Splunk Enterprise (Version 7.0 Onward)

Splunk Light (Version 7.x Only)

Splunk Analytics for Hadoop

Splunk Data Fabric Search

Splunk Data Stream Processor

Each minor version of these Products is Supported for twenty-four (24) months from the release of that minor version.

Splunk Enterprise & Splunk Light (Version 6.x Only)

Each minor version of Splunk Enterprise 6.x and Splunk Light 6.x was Supported from release of that minor version through the October 22, 2019 release of Splunk Enterprise 8.0. All Splunk Enterprise 6.x and all Splunk Light 6.x versions are End of Support.

Splunk Universal Forwarder (Version 7.0 Onward)

Starting with version 7.0, each minor version of Splunk Universal Forwarder is Supported from release for a total of sixty (60) months. During the first twenty-four (24) months from release of each version, the targeted Support response times will be determined by issue severity and priority, per the terms of the Support Program purchased for the underlying paid Offering. For the subsequent thirty-six (36) months, the targeted Support response times will be limited to the P3 level.

Splunk Universal Forwarder (Version 6.x Only)

Each minor version of Splunk Universal Forwarder version 6.x was Supported from release of that minor version through the October 22, 2019 release of Splunk Universal Forwarder 8.0.

Universal Forwarder versions 6.3 through 6.6 only will be Supported at the P3 level through the June 4, 2021 End of Support of Universal Forwarder 7.3. All minor versions of Splunk Universal Forwarder prior to version 6.3 have reached End of Support.

Security Products

Splunk Enterprise Security

Each minor version of Splunk Enterprise Security is Supported for twenty-four (24) months from release of that minor version.

Splunk Phantom

Starting with version 4.10, each minor version of Splunk Phantom is supported for twenty-four (24) months from the release of that minor version. Prior to release of 4.10, all minor versions of the latest Splunk Phantom major release and the last minor version of the prior major release are Supported.

Splunk User Behavioral Analytics

Each minor version of User Behavioral Analytics is Supported from release until the later of either:

Twelve (12) months from delivery to Customer of a license key for that version, or
Release of the second subsequent version.

IT Products

Splunk IT Service Intelligence

Each minor version of Splunk IT Service Intelligence is Supported for twenty-four (24) months from release of that minor version.

Supported Splunk Extensions

Each minor version of Splunk Extensions (free or paid) listed on Splunkbase or other Splunk-branded marketplace as “Splunk Supported” is Supported for twenty-four (24) months from release of that version. Support response times for these Splunk Extensions will be targeted at the P3 level.

Purchased Offering Support Services Policies

Unsupported Customers and Offerings

Support Services are provided only to Customers with an active subscription to a Support Program, exclusively for Products or Services that are part of a Customer’s Purchased Offering, or for Supported Splunk Extensions used in conjunction with such Products or Services.

Unsupported Splunk and Third Party Extensions

No Support Services are provided for any Splunk Extension listed on Splunkbase or other Splunk-branded marketplace as “Not Supported” or “Developer Supported”, nor are Support Services provided for any Third Party or Customer Extension.

Support for Multiple Offerings

When two or more Products, or any combination of Products and Services, are operated together, the versions of all must be listed as compatible in the applicable Splunk product documentation to be eligible for Support Services. For example, the Splunk Product compatibility matrix is located here and Splunk Cloud compatibility requirements can be found here.

When two or more Products are operated together, Support Services will be provided only if all Product versions are Supported. We encourage Customers to use the latest version of our Products as much as possible.

Operating System Support Status

For all Products except Splunk Universal Forwarder, no Support Services will be provided for any Product version when deployed on an operating system version that is no longer under mainstream support from its respective vendor (regardless of whether that Product version is otherwise eligible for Support Services herein). Mainstream support in this context means the period during which the vendor makes full support generally available for the operating system version, including the regular release of product enhancements and defect and security fixes, and the provision of full technical support.

The following operating system policy applies to currently-Supported minor versions of Splunk Universal Forwarder only (notwithstanding the Supported Version Timeline detailed above for Splunk Universal Forwarder):

The targeted Support response times will be limited to the P4 level when Splunk Universal Forwarder is deployed on a compatible operating system version that is under any form of limited support from its vendor.
Limited support in this context means an operating system vendor-defined life cycle phase following a general support phase, during which product defect and/or security fixes, but not ongoing product enhancements, are offered. If an active support subscription from the vendor is required to receive those product defects and/or security fixes, Customers must have that active support subscription to be eligible for the above described P4 level Support Services.

Support Services eligibility for a Universal Forwarder minor version on an operating system version past the end of mainstream support ends the sooner of:

The End of Support of that Universal Forwarder minor version, per the standard timelines for that version, or
The end of Customer’s active subscription to the applicable vendor support offering, or
(12) twelve months from the vendor-declared end of life of that operating system version, even if the vendor continues to offer support programs for that operating system version beyond that date.