Keep Your Splunk Investment Aligned With What Matters Most
Platform Kiana WheelerKey takeaways
- Activity Based Pricing measures data ingestion and search activity separately, helping organizations understand usage patterns and plan for future growth.
- Cloud Flex allows organizations to shift committed spending across different products as business priorities and operational needs evolve over time.
- Together, these pricing options help organizations align technology investments with how the platform is actually used across security, networking, and IT operations.
Organizations need to get clear value from every technology investment. But data volumes, search activity, and business priorities can change over time. A pricing approach that makes usage easier to understand and gives teams room to adapt, can help customers plan with greater confidence and put their Splunk investment to work where it matters most.
That need is growing as organizations have agentic operations and look to connect data across security, networking, and IT. Cisco Data Fabric provides the foundation for turning data into context and action. Activity Based Pricing and Cloud Flex give customers additional ways to align their Splunk investment with how they use the platform and where they see value.
When You Need To Understand What Drives Platform Usage
Activity Based Pricing is the newest core pricing model for Splunk Cloud Platform, joining workload-based (SVC) and ingest-based pricing as a third option. It measures ingest and search separately, helping customers understand how each activity draws down its respective commitment, plan for growth, and manage investment over time.
That visibility supports more informed decisions as teams expand data sources, increase search activity, or bring new use cases onto the platform. Customers can consider ingest and search needs independently and assess how their platform activity aligns with their goals.
When Your Priorities Change or You Want To Explore New Solutions
Cloud Flex gives customers flexibility to shift committed spend across the Splunk Cloud portfolio as needs evolve. A team might start with a defined set of products, then adjust capacity or explore additional solutions as its use cases and priorities develop.
Cloud Flex can help teams direct investment toward the work that matters now: a SOC can expand security monitoring to support new detection and investigation use cases, a NOC can strengthen network visibility as traffic or infrastructure changes, and observability teams can extend monitoring to new applications or services. As needs evolve, customers can shift committed spend across eligible Splunk Cloud products, subject to the products and terms in their agreement.
Choose the Option That Fits Your Next Move
Activity Based Pricing and Cloud Flex address different customer needs. Activity Based Pricing helps customers understand and manage platform activity across ingest and search. Cloud Flex gives customers more room to adapt committed investment across the portfolio.
Together, these options give customers more ways to align their Splunk plans with their data strategies, operating priorities, and evolving use cases. They support a more deliberate approach to value realization: understand how the platform is being used, identify where it can support more outcomes, and adjust investment as needs change.
Activity Based Pricing and Cloud Flex are now generally available. Contact your Splunk account team to discuss how they align with your goals and how to plan for your next stage of growth.
Related Articles

State of Security Research Details Essential Strategies for the Year Ahead

The New & Improved Splunk Guide to Risk-Based Alerting
