Skip to content

Global service map

Does Splunk work in China?

. Regenerated with each Chinaready Landscape publish.

Quick answer: Splunk is usable in mainland China, but Chinaready labels it Limited because of significant restrictions. Splunk Enterprise can be deployed privately onshore, and AWS China regions support Splunk as a data-transfer destination. Splunk Cloud depends on overseas cloud providers, so mainland access is limited and unstable; some cloud features (mobile app downloads, +86 phone alert notifications) have been restricted or discontinued. When the business and users are in mainland China, prefer Alibaba Cloud Log Service (SLS), Tencent Cloud Security Lake / CLS, Huawei Cloud LTS. Availability in China: Limited.

Availability in China: Limited

Splunk availability in China

Splunk is available in mainland China, but with significant restrictions. Do not treat reachability as a green light for Splunk Cloud on a China-first stack.

What still works

  • Private on-prem deployment: Splunk Enterprise can be deployed locally so logs and security data stay onshore.
  • AWS China data transfer: Amazon Web Services China regions support Splunk as a data-transfer destination, which can keep ingest on a China-operated AWS partition.

What is constrained

  • Splunk Cloud: it depends on overseas cloud providers. Mainland access is limited and unstable.
  • Cloud-only features: some capabilities — including mobile app downloads and +86 phone alert notifications — have been restricted or discontinued.

Why Splunk is Limited

  • Network limits: overseas cloud services and APIs that Splunk Cloud depends on are slow or unreliable from mainland networks.
  • Compliance: mainland rules expect localized storage and data isolation for sensitive logs and security telemetry. Overseas SaaS is a poor fit for that bar.

Domestic log platforms commonly evaluated instead

When both the business and the target users are in mainland China, prefer a hyperscaler log platform on the cloud you already run:

Platform Core strengths Best fit
Alibaba Cloud Log Service (SLS) Native Alibaba Cloud log collection, storage, search, and analysis Workload already on Alibaba Cloud; need a Splunk-class logging path
Tencent Cloud Security Lake / CLS CLS for logs; Security Lake (安全湖) for SIEM-style security analytics Workload already on Tencent Cloud; logging plus security investigation
Huawei Cloud LTS Huawei Cloud Log Tank Service for collection, storage, and analysis Workload already on Huawei Cloud

How to choose

  • Keep Splunk Enterprise only when you will run a private on-prem (or similarly isolated) deployment and can operate it yourself.
  • Do not plan Splunk Cloud as the mainland production console or ingest path.
  • Alibaba-first stacks: use Alibaba Cloud Log Service (SLS).
  • Tencent-first stacks: use Tencent Cloud CLS for logs, and evaluate Tencent Cloud Security Lake when the job is closer to Splunk SIEM.
  • Huawei-first stacks: use Huawei Cloud LTS.

These candidates appear on the Splunk alternatives page only — Chinaready does not add them as Explore / Landscape product tiles. Confirm ingest, retention, alerting, and compliance before production adoption.

Splunk alternatives in China

Mapped China-ready candidates

Alibaba Cloud Log Service (SLS)

Release, Quality & Operations · Monitoring & Observability (APM / RUM) · China-ready candidate

Alibaba Cloud Log Service (SLS) is the native Alibaba Cloud log platform for collection, storage, search, and analysis — the practical Splunk-class logging path when the mainland stack already runs on Alibaba Cloud.

Tencent Cloud Security Lake / CLS

Release, Quality & Operations · Monitoring & Observability (APM / RUM) · China-ready candidate

Tencent Cloud Log Service (CLS) covers collection, search, and analysis; Tencent Cloud Security Lake (安全湖) is the closer Splunk SIEM / security-analytics path. Strongest when the China stack already runs on Tencent Cloud.

Huawei Cloud LTS

Release, Quality & Operations · Monitoring & Observability (APM / RUM) · China-ready candidate

Huawei Cloud LTS (Log Tank Service) is Huawei Cloud's log collection, storage, and analysis service — the practical path when the mainland stack already runs on Huawei Cloud.

FAQ

Does Splunk work in China?

Yes with significant restrictions. Chinaready labels Splunk as Limited. Splunk Enterprise can be deployed privately onshore, and AWS China regions support Splunk as a data-transfer destination. Splunk Cloud depends on overseas cloud providers, so mainland access is limited and unstable, and some cloud features (mobile app downloads, +86 phone alerts) have been restricted or discontinued.

Can teams use Splunk Cloud in mainland China?

Not as a reliable mainland production path. Splunk Cloud depends on overseas cloud providers, so access from China is limited and unstable. Some cloud-only features — including mobile app downloads and +86 phone alert notifications — have been restricted or discontinued. Prefer Splunk Enterprise on-prem, or a domestic log platform, when the business and users are in mainland China.

Why is Splunk Limited if Enterprise can be deployed in China?

On-prem Splunk Enterprise can keep data onshore, but that is not the default cloud experience. Splunk Cloud and related overseas APIs are hard to reach from mainland networks, and overseas SaaS storage struggles to meet mainland localization and data-isolation rules for sensitive logs and security telemetry.

What are the best China alternatives to Splunk?

When the business and users are in mainland China, Chinaready currently maps Splunk to Alibaba Cloud Log Service (SLS), Tencent Cloud Security Lake / CLS, Huawei Cloud LTS. Prefer Alibaba Cloud Log Service (SLS) on Alibaba Cloud, Tencent Cloud Security Lake / CLS on Tencent Cloud, and Huawei Cloud LTS on Huawei Cloud. Treat this as a research shortlist rather than a one-to-one endorsement.

How should teams choose among Alibaba Cloud SLS, Tencent Cloud Security Lake / CLS, and Huawei Cloud LTS?

Choose the log platform on the public cloud you already run. Use Alibaba Cloud Log Service (SLS) for Alibaba-stack logging, Tencent Cloud CLS (and Security Lake for SIEM-style analytics) for Tencent-stack workloads, and Huawei Cloud LTS for Huawei Cloud. Keep Splunk Enterprise only when you will operate a private on-prem deployment.

Where should teams go after shortlisting Splunk alternatives?

Validate ingest sources, retention, alerting, data residency, and compliance with your China entity. Use the interactive Chinaready Landscape for adjacent stack choices, then read Chinaready's main site for launch operating guidance. If the path remains unclear, book a call with Chinaready.