> Splunkd ingests browser performance and error data from Splunk RUM. Choose the EU region, sign SCCs and gate the JavaScript agent behind consent. > > Canonical: https://www.flowconsent.com/en/services/analytics/splunkd Analytics # Splunkd (Splunk RUM) Analytics · [Official website](https://splunk.com) Splunk Observability data ingestion daemon (splunkd) paired with the Splunk Real User Monitoring agent that captures browser performance and error data on websites. [Block Splunkd (Splunk RUM) until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=analytics) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Analytics](https://www.flowconsent.com/en/services/analytics) - Consent Analytics - Prior consent Required - Documented cookies 3 - Third-party domains 4 - Servers Operator chosen (Splunk Cloud regions worldwide, including AWS Frankfurt for EU residency, or self managed splunkd Enterprise instance) Overview ## What does Splunkd (Splunk RUM) do? ## **What splunkd does** splunkd is the core daemon of the Splunk platform. On a website, it is paired with the Splunk Real User Monitoring (RUM) agent, a JavaScript snippet that captures browser performance metrics (TTFB, LCP, INP), resource timings, JavaScript errors and optionally session replays. The agent ships events to splunkd through the HTTP Event Collector. ## **Data and cookies** The RUM agent sets a first party visitor cookie (splunk\_rum\_id) and a session token (splunk\_rum\_session). Events sent to splunkd contain URL, user agent, IP, performance timings, JavaScript stack traces and optionally a user identifier set by the operator. ## **GDPR and ePrivacy posture** Setting splunk\_rum cookies and reading information from the visitor browser triggers Article 5(3) ePrivacy. Consent must be obtained before the RUM agent loads. Stack traces and URLs can incidentally contain personal data, so input scrubbing is critical. ## **Region selection and transfers** Splunk Cloud offers regional pods including the EU (AWS Frankfurt). Pick the EU region for European deployments, sign the Splunk Data Processing Addendum, sign Standard Contractual Clauses if any US support staff access data, and document the choice in your Record of Processing Activities. ## **Implementation steps** Gate the RUM agent behind your CMP, configure input scrubbing and URL masking, set short retention for session replays, sign the DPA and SCCs as required, run a DPIA when sensitive data may flow into stack traces and review the configuration yearly. Compliance ## Splunkd (Splunk RUM) and the GDPR Splunkd (Splunk RUM) is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy) for the Splunk RUM cookies and front end visitor identifier. Legitimate interest (Art. 6(1)(f)) for purely server side log ingestion that does not read or write information on the user device. - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, UK GDPR, CCPA ### Impact assessment (DPIA) A DPIA is recommended when Splunk RUM is bound to logged in users, when session replays are recorded, or when stack traces and URL parameters can incidentally contain personal data. ### Sample text for your banner > We use Splunk RUM to monitor performance and detect errors. With your consent, the Splunk agent collects diagnostic data and sends it to splunkd in our chosen Splunk Cloud region. Cookies and trackers ## What Splunkd (Splunk RUM) sets and contacts - Tracking method JavaScript Real User Monitoring agent that captures browser performance, resource timings, errors and synthetic user actions, sent to a Splunk Observability Cloud or self managed Splunk Enterprise instance via the splunkd HTTP Event Collector. - Server location Operator chosen (Splunk Cloud regions worldwide, including AWS Frankfurt for EU residency, or self managed splunkd Enterprise instance) - Cookieless mode available Yes - Data transferred outside the EU Default Splunk Cloud is in the United States; an EU region (AWS Frankfurt) is available. Confirm the chosen region with Splunk and document the Article 46 GDPR transfer tools (Standard Contractual Clauses) and the TIA when US regions are used. ### Cookies set (3) | Name | Type | Duration | Purpose | | -------------------- | ------------ | -------- | ------------------------------------------------------------------------------------------------ | | splunk\_rum\_id | first\_party | 1 year | Persistent visitor identifier used by the Splunk RUM agent to deduplicate users across sessions. | | splunk\_rum\_session | first\_party | Session | Session identifier used to group performance and error events from the same browsing session. | | splunk\_rum\_exp | first\_party | 90 days | Stores assignment to RUM experiment variants when the operator activates A/B sampling. | ### Third-party domains contacted (4) - `splunk.com` - `signalfx.com` - `rum-ingest.eu0.signalfx.com` - `cdn.signalfx.com` Questions ## Frequently asked questions about Splunkd (Splunk RUM) Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does the Splunk RUM agent set? splunk\_rum\_id (visitor identifier) and splunk\_rum\_session (session). Optional cookies appear when the operator activates user identity propagation or experiments. ### Is consent required to load Splunk RUM? Yes. The cookies and the events sent to splunkd trigger Article 5(3) ePrivacy. Consent must be obtained before the RUM agent loads. ### What is the legal basis for processing through Splunk? Consent (Art. 6(1)(a) GDPR) for the front end RUM agent. Legitimate interest (Art. 6(1)(f)) for purely server side log ingestion in splunkd that does not access the user device. ### Does Splunk transfer data to the United States? Default Splunk Cloud is in the US, but an EU region (AWS Frankfurt) is available. Choose the EU region for European deployments. Sign SCCs if any US support staff access data. ### Do I need a DPIA for Splunk RUM? Recommended when RUM is bound to logged in users, when session replays are recorded or when stack traces and URLs can contain personal data. ### How do I implement Splunk RUM compliantly? Choose the EU region, gate the agent behind the CMP, configure input scrubbing, set short retention for replays, sign the DPA and SCCs, and document the agent in the cookie register. ### What are the alternatives to Splunk RUM? Datadog RUM (EU site), New Relic Browser, Dynatrace RUM, Sentry, GlitchTip and self hosted Grafana Faro paired with Loki. ### How do I update my cookie policy when adding Splunk RUM? List splunk\_rum\_id and splunk\_rum\_session with name, purpose, retention and processor (Splunk LLC). Mention the chosen region and any SCCs in your privacy notice. Same category ## More services: Analytics [See the whole category](https://www.flowconsent.com/en/services/analytics) ### [Userback](https://www.flowconsent.com/en/services/analytics/userback) [Userback is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Userback offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Userback empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/userback) [Analytics](https://www.flowconsent.com/en/services/analytics/userback) · ### [Quantcast Measure](https://www.flowconsent.com/en/services/analytics/quantcast-measure) [Quantcast Measure is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Quantcast Measure supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Quantcast Measure enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/quantcast-measure) [Analytics](https://www.flowconsent.com/en/services/analytics/quantcast-measure) · ### [web-vitals](https://www.flowconsent.com/en/services/analytics/web-vitals) [web-vitals is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. web-vitals supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, web-vitals ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/analytics/web-vitals) [Analytics](https://www.flowconsent.com/en/services/analytics/web-vitals) · ### [CNZZ](https://www.flowconsent.com/en/services/analytics/cnzz) [CNZZ is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. CNZZ supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, CNZZ enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/cnzz) [Analytics](https://www.flowconsent.com/en/services/analytics/cnzz) · ### [Inspectlet](https://www.flowconsent.com/en/services/analytics/inspectlet) [Inspectlet is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Inspectlet supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Inspectlet enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/inspectlet) [Analytics](https://www.flowconsent.com/en/services/analytics/inspectlet) · ### [Ensighten](https://www.flowconsent.com/en/services/analytics/ensighten) [Ensighten is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Ensighten offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Ensighten empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/ensighten) [Analytics](https://www.flowconsent.com/en/services/analytics/ensighten) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)