Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Splunk Observability data ingestion daemon (splunkd) paired with the Splunk Real User Monitoring agent that captures browser performance and error data on websites.
splunkd is the core daemon of the Splunk platform. On a website, it is paired with the Splunk Real User Monitoring (RUM) agent, a JavaScript snippet that captures browser performance metrics (TTFB, LCP, INP), resource timings, JavaScript errors and optionally session replays. The agent ships events to splunkd through the HTTP Event Collector.
The RUM agent sets a first party visitor cookie (splunk_rum_id) and a session token (splunk_rum_session). Events sent to splunkd contain URL, user agent, IP, performance timings, JavaScript stack traces and optionally a user identifier set by the operator.
Setting splunk_rum cookies and reading information from the visitor browser triggers Article 5(3) ePrivacy. Consent must be obtained before the RUM agent loads. Stack traces and URLs can incidentally contain personal data, so input scrubbing is critical.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Splunk Cloud offers regional pods including the EU (AWS Frankfurt). Pick the EU region for European deployments, sign the Splunk Data Processing Addendum, sign Standard Contractual Clauses if any US support staff access data, and document the choice in your Record of Processing Activities.
Gate the RUM agent behind your CMP, configure input scrubbing and URL masking, set short retention for session replays, sign the DPA and SCCs as required, run a DPIA when sensitive data may flow into stack traces and review the configuration yearly.
Websites using Splunkd (Splunk RUM) must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended when Splunk RUM is bound to logged in users, when session replays are recorded, or when stack traces and URL parameters can incidentally contain personal data.
Sample consent text
We use Splunk RUM to monitor performance and detect errors. With your consent, the Splunk agent collects diagnostic data and sends it to splunkd in our chosen Splunk Cloud region.
Third-party domains contacted
splunk.comsignalfx.comrum-ingest.eu0.signalfx.comcdn.signalfx.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| splunk_rum_id | first_party | 1 year | Persistent visitor identifier used by the Splunk RUM agent to deduplicate users across sessions. |
| splunk_rum_session | first_party | Session | Session identifier used to group performance and error events from the same browsing session. |
| splunk_rum_exp | first_party | 90 days | Stores assignment to RUM experiment variants when the operator activates A/B sampling. |
Splunkd (Splunk RUM) collects user analytics data — you legally need a consent banner. Try FlowConsent free.
splunk_rum_id (visitor identifier) and splunk_rum_session (session). Optional cookies appear when the operator activates user identity propagation or experiments.
Yes. The cookies and the events sent to splunkd trigger Article 5(3) ePrivacy. Consent must be obtained before the RUM agent loads.
Consent (Art. 6(1)(a) GDPR) for the front end RUM agent. Legitimate interest (Art. 6(1)(f)) for purely server side log ingestion in splunkd that does not access the user device.
Default Splunk Cloud is in the US, but an EU region (AWS Frankfurt) is available. Choose the EU region for European deployments. Sign SCCs if any US support staff access data.
Recommended when RUM is bound to logged in users, when session replays are recorded or when stack traces and URLs can contain personal data.
Choose the EU region, gate the agent behind the CMP, configure input scrubbing, set short retention for replays, sign the DPA and SCCs, and document the agent in the cookie register.
Datadog RUM (EU site), New Relic Browser, Dynatrace RUM, Sentry, GlitchTip and self hosted Grafana Faro paired with Loki.
List splunk_rum_id and splunk_rum_session with name, purpose, retention and processor (Splunk LLC). Mention the chosen region and any SCCs in your privacy notice.