How to Deploy Grepr with Splunk: Reduce Log Costs by 90%

Jad Naous
May 16, 2025
Abstract technology visualization showing Splunk Heavy Forwarders in green on the left sending S2S data streams to a central violet hexagonal Grepr compression processor with inward compression arrows, storing complete data in a layered blue data lake below with SPL query access indicators, outputting compressed orange stream with embedded link chain icons and summary document indicators to Splunk platform on the top right, and a dashed blue backfill path connecting the data lake to Splunk on the bottom right for manual data retrieval

In this video we highlight Grepr's ability to work with Splunk. We have Grepr receiving data from Splunk Heavy Forwarders using S2S. We configure Splunk to reduce the data and forward it to Splunk. Grepr massively compresses the logs passing through, but the logs are still in the Grepr data lake. They can be queried using SPL, and sent back to Splunk with a manual backfill if needed. You can also see this compressed data stream in Splunk, and if you want to see the raw data that corresponds to a summary message, you can use the embedded link in summary messages to quickly get to it.

Share this post

More blog posts

All blog posts
A businessman in a gray suit lies spread-eagle on a floor covered in stacks of cash, surrounded by a clearing shaped like a money angel.
Engineering Guides

Regain Control of Your Datadog Spend

Modern microservices applications generate petabytes of observability data monthly, and most of it is noise Datadog still charges you to store.
February 27, 2026
Retro computer monitor displaying "Loading..." — a nod to observability systems struggling to keep up with modern data volume.
Signals

The Observability Reckoning Is Here. It's Why I'm at Grepr.

Observability was supposed to help teams control complexity in the cloud era. For many organizations, it has become one of the fastest-growing line items in the budget.
February 23, 2026
Red industrial robotic arms working on an automotive assembly line in a factory, moving in coordinated automated sequences along a production floor.
Signals

Why Automated Context Is the Real Future of Observability

The observability industry keeps building smarter tools on top of the same noisy data, and a recent post from a Sr. Engineering Manager at Walmart shows exactly why that approach hits a wall.
February 18, 2026

Get started free and see Grepr in action in 20 minutes.