Data Feed API Errors and Incomplete results


The previous reported concern with Data Feed API has been resolved. The service is fully restored and there is no longer an impact to customers. This incident is resolved.


We have implemented a workaround that has remediated the underlying cause of this incident. Customers should no longer experience errors. Any customers seeing incomplete results are requested to reconfigure their Splunk application to a previous date. Note that this action will result in data duplication.

We continue to closely monitor connectivity and functionality of Data Feed API. We will provide another update as additional information becomes available.


The issue has been identified and a fix is being implemented.


We are aware of customers receiving error messages or incomplete results when querying the Data Feed API service.

We have engaged all appropriate resources and are working towards a resolution. Note that there is no impact to protection services, and all other aspects of our services remain functional. Any historic data will be available once the incident is resolved. We will provide further updates as new information becomes available.

Began at:

Affected components