icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.

Accept License Agreements

Thank You

Downloading Eventgen
SHA256 checksum (eventgen_801.tgz) af377193ed27a250d1ff446996b70ae3f2cd032cabf0fdb4cec6332da1f59220 SHA256 checksum (eventgen_722.tgz) 573e0dcf495314fee0029cdfba2f69045fc259325c5f8630607b035ec2215c75 SHA256 checksum (eventgen_721.tgz) acbfa4dba41ff6d334e811418ef0ad3f79c6b516e855c7ab9c626bfc90cb0187 SHA256 checksum (eventgen_720.tgz) 454bc0e23d9a83f252efafd95479dae769d38fe026dddddb580ce8c077e237d8 SHA256 checksum (eventgen_653.tgz) dddd3e947b999f8c8bad589d740b1498c14b29f3cb15483ade7b21a5380f0fb7 SHA256 checksum (eventgen_711.tgz) d5207126f4a3ba198090f80738655be2325a9b061a5a0a23ff4550e7adbe7092 SHA256 checksum (eventgen_710.tgz) bbbe5af892a64ecbf9dd2dc54d6fd5243a6b9c138d7152b05ca882b28ba4134c SHA256 checksum (eventgen_700.tgz) 7789236c5d8546bc29e42bd67ca4feaf82d5814b88e91e4a16b675eae67ce6c8 SHA256 checksum (eventgen_652.tgz) 7b126cda72f709175502e74213dae6716e20760b17c5ac45b0c063809046269f SHA256 checksum (eventgen_651.tgz) 934a0c9b2f1937c42d71348a630248abe85db94c8c4fcf4bddf05efb1027df1c SHA256 checksum (eventgen_640.tgz) 2450f3ce272f11639ec42b205015ed6b52250103346161e8ca08075b0aa851a9 SHA256 checksum (eventgen_636.tgz) 83700bc628af9f5a8816521b21c1b838c4c88f13fdb92c83585e364f3c4ff1a3 SHA256 checksum (eventgen_634.tgz) 0ffb9d65a10c9f15685bca8ce88ac8161fb08c8e6562d638d708220e2f752a21 SHA256 checksum (eventgen_633.tgz) bf643a23f36dffe3ee983d8c06fa1b533f38ea16d08a1d2e2654275f962eecd4 SHA256 checksum (eventgen_632.tgz) 50e16ef95054650da4beb19ecafa1b915b4a773eb3432fc93673076f3e05dae8 SHA256 checksum (eventgen_631.tgz) 31adc066625e10dc1db7d8f4c81c1002502cf52507b6315113980f99e2c7ea85 SHA256 checksum (eventgen_630.tgz) 78df93484df3ef781a3f2fbc484b72709791187ed4afaaf7b6bb419ac075f933 SHA256 checksum (eventgen_621.tgz) fcd1ed79a78d972fdf5f4ede3bf6f7916980a83223d98e9969e52f9bcc7462de
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate



Splunk Cloud
Splunk Built
The Splunk Event Generator (Eventgen) is a utility which allows its users to easily build real-time event generators.

Eventgen allows an app developer to get events into Splunk to test their applications. It provides a somewhat ridiculous amount of configurability to allow users to simulate real data.

To join the development community, please go to https://github.com/splunk/eventgen.
For documentation, please go to the Eventgen Documentation(http://splunk.github.io/eventgen/).

The Splunk Event Generator

The Splunk Event Generator is a utility which allows its user to easily build real-time event generators.
The current maintainers of this project are Jack Meixensperger (jackm@splunk.com), Nicholas Good (ngood@splunk.com), and Martin Luo (haolel@splunk.com).

The goals of this project:

  • Provide a single data generation solution that all Splunk Apps can leverage
  • Enable portable and re-usable configurations that can be quickly adapted between use cases
  • Allow every type of Splunk event or transaction to be modeled inside Eventgen


Documentation is hosted at Eventgen Documentation.

For more information, please go to Eventgen Github Repository.

Release Notes

Version 8.0.1
June 13, 2022
  • Package size reduced to about 1/3 of original size
  • Updated version of golang module dependencies
Version 7.2.2
Aug. 9, 2021

For Splunk Cloud app certification

Version 7.2.1
Jan. 22, 2021
  • bugfix for perDayVolume
  • update dependency package versions
  • app is now cloud-vetted
  • app can be installed without restart
Version 7.2.0
Oct. 9, 2020
  • added support for “interval” option in replay mode
  • added new “splitSample” option
  • added new "counter" generator
  • added metrics logging
  • bugfix for logging verbosity
  • bugfix for replay mode threading and backfill generation
  • bugfix for csv file handling
  • bugfix for timeMultiple handling
    NOTE: this version does not support Splunk >= 8.0 on Windows 10
Version 6.5.3
July 22, 2020

Maintenance release with ujson version fix and updated userName samples

Version 7.1.1
July 21, 2020
  • fixed broken "fileRotator" config option
  • update to default "source" behavior: unless specified, the default source is set to the sample name
    NOTE: this version does not support Splunk >= 8.0 on Windows 10
Version 7.1.0
April 7, 2020
  • fixed oom error caused by ujson
  • added scp output plugin - use outputMode = scsout
  • added --multithread support for server/controller architecture
  • fix CI failures due to jinja in log config
    NOTE: this version does not support Splunk >= 8.0 on Windows 10
Version 7.0.0
Oct. 23, 2019
  • Python3 support on 8.0
  • Migrate to Python3 and 7.0.0 only supports Python3
  • Fix random token replacement bug
  • Enhance tutorial documentation
  • Add syslogAddHeader option
  • Fix timezone setting bug
  • Fix out of memory issue when using multiprocess mode
  • Remove some stale third party libraries

Please set "python.version = python3" in "server.conf" in $SPLUNK_HOME/etc/system/local in [general] stanza.

Version 6.5.2
Oct. 9, 2019
  • Fix zipfile bug
  • Fix random token replacement bug
  • Fix security vulnerability issue
  • Fix custom plugin stale docs
  • Fix timezone setting bug
  • Fix multiprocess OOM issue
  • Add syslogAddHeader config
Version 6.5.1
Aug. 1, 2019
  • Added metrics output mode
  • Fixed regex token replacement issue
  • Added test coverage information
  • Increased functional test coverage
  • Eventgen server complete revamp and standalone mode support
  • Added contributor license
  • Updated Dockerfile
  • Added documentation
  • Fixed bugs / stability / optimized speed
Version 6.4.0
June 5, 2019
  • Fix exception log error
  • Fix CircleCI status badage error
  • Fix navigation error for app if installed with Splunk Stream
  • Fix generatorWorkers not working error
  • Fix interval error when end = 1
  • Fix fileName in global stanza error
  • Add 3rd party libs in SA-Eventgen App
  • Add httpeventAllowFailureCount for httpevent
  • Add 3rd party libs in license credit
  • Disable logging queue in multiprocess mode
  • Change implementation of extendIndex for better performance
Version 6.3.6
May 10, 2019
  • Add functional tests for jinja template and modular input feature
  • Fix default jinja template directory is not correctly resolved when sampleDir is set issue
  • Fix verbose flag not working in splunk_eventgen command line issue
  • Fix index, source, sourcetype are not correct when using splunkstream mode issue
  • Fix ssh to container issue
  • Fix perdayvolume without end setting error
  • Update documentation for better reading and remove unrelated part
Version 6.3.4
March 15, 2019
  • Cleaned up documentation
  • Jinja template bugfix in SA-Eventgen app
  • Implementation of 'timeMultiple’ option
  • Templates for bugs/feature requests
  • Fixed Jinja test configuration stanzas
  • Fix for default behavior for 'count' edge cases
Version 6.3.3
March 5, 2019
  • Added performance metrics compared to Eventgen 5.x
  • New config option for generation-time metrics: outputCounter
  • Jinja template fixes
  • Timestamp parsing fix
  • Output queueing fix for outputMode splunkstream
  • Count rater fixes, now supports indefinite generation
Version 6.3.2
Nov. 20, 2018
  • Fixed verbosity bug from 6.3.1
  • Added documentation
Version 6.3.1
Nov. 16, 2018
  • Fixed Eventgen Volume APIs
  • Improved Eventgen Server Logging
  • Corrected Eventgen Server and Controller conf syncing issue
  • Adding verbosity options (ERROR, INFO, DEBUG) to Eventgen modinput
  • Implemented future event generation support in replay mode
  • Fixed Jinja template's missing default values
  • Adjusted logging message levels for less verbosity
  • Fixed event count off by 1 issue
  • Fixed unnecessary empty data generators being created
  • Updated dependency list
Version 6.3.0
Oct. 26, 2018
  • Bug fixes for the customer issues
  • Documentation upgrade
  • Code refactoring for version unification
  • Logging improvements
Version 6.2.1
June 1, 2018
  • Fixing SA-Eventgen Dashboard and log searching
  • Improving internal logging and fixing splunkd logging issue
  • Fixing timestamping in default generator
  • Fixing custom plugin integration
  • Fixing SA-Eventgen app settings
  • Supporting Eventgen 5 backward compatibility with additional features
  • Better modinput process management
  • Minor Bugfixes with various customer cases

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.