Skip to main content


Splunk Lantern

Load balancer data


Load balancers allocate external network traffic bound for a particular server or application across multiple redundant instances. There are two categories of load balancer: local, in which all resources in a load-balanced pool are on the same subnet; and global or distributed, where the resource pool is spread across multiple sites. In the Common Information Model, load balancer data is typically mapped to the Inventory data model

Load balancer logs provide operations teams with a record of overall traffic to systems or particular applications and provide indicators of each system’s traffic-handling capacity and health, along with the status and health of the load balancer itself.


When your Splunk deployment is ingesting load balancer data, you can use it to accomplish IT Ops use cases.


Guidance for onboarding data can be found in the Spunk Documentation, Getting Data In (Splunk Enterprise) or Getting Data In (Splunk Cloud).

Looking for more information on data types? Download the Splunk Essential Guide to Machine Data.