Free vs. Enterprise

Splunk is available in Free and Enterprise versions. Which version is right for you?

Splunk Free

Designed for the individual user, typical profiles include:

  • Developers: Analyze application logs, trace logs and performance metrics to troubleshoot development and production environments
  • Sysadmins: Troubleshoot across every tier of your infrastructure - physical servers, virtual machines, applications and networks
  • Security Analysts: Identify and investigate attacks, incidents and anomalous events

Splunk Enterprise

Designed for large or small organizations seeking to:

  • Index higher data volumes (up to terabytes per day)
  • Distribute their Splunk deployment
  • Enable role-based access controls
  • Monitor and alert across their infrastructure
  • Provide authentication for multiple users
  • Leverage Splunk Solution Suites

What You Get When You Download

The free download automatically includes all the Enterprise features of Splunk for 60 days and lets users index 500 megabytes of data per day. After 60 days, or anytime before then, users can convert to a Splunk Free license or purchase an Enterprise license to continue using the expanded functionality designed for multi-user enterprise deployments and get full enterprise support. To trial Splunk for higher daily indexing volumes, please contact sales.

Download Splunk

Feature Comparison Table

Feature Description Free Enterprise  
Indexing Volume Indexing volume per day 500MB/day Unlimited
(depends on license)		  
Universal Indexing Index any IT data source      
Ad-hoc Search Search and investigate anything in your IT data      
Reporting Create ad-hoc reports, visualize and analyze your data      
Knowledge Mapping Add knowledge about events, fields, transactions, patterns and statistics to your IT data      
Personal Dashboards Create rich dashboards by combining pre-defined searches, charts and reports      
Enterprise Dashboards Create fast and scalable dashboards for use across the organization, with role based access controls and per user customization
   
Monitoring & Alerting Schedule searches for continual monitoring and alerting on events simple and complex
   
Distributed Deployments Support for distributed search, load balancing and failover
   
Forwarding & Receiving Support for forwarding and receiving data from other Splunk indexers      
Access Controls Support for user authentication and role-based access controls
   
Works with Free Apps and Add-Ons Supports free Apps and Add-ons distributed by Splunk and Partners      
Works with Premium Apps Supports premium Apps distributed by Splunk and Partners
   
Developer APIs Fully documented, programmatic interface to integrate IT data into any business or development workflow      
Community Support Access to full Product Documentation, Forums and IRC for answers to basic technical questions      
Enterprise Support Direct access to our Customer Support Team by phone, ability to manage cases online (tailored support levels also available)