Skip to main content


Please note, as of February 13, 2020, this Agreement is no longer in use. Splunk now offers its products and services under the Splunk General Terms.

This Splunk Software License Agreement (“Agreement”) governs your use of Splunk software. By downloading and using Splunk software: (a) you are indicating that you have read and understand this Agreement, and agree to be legally bound by it on your behalf or on behalf of the entity for which you are acting; and (b) you represent and warrant that you have the authority to act on behalf of and bind this entity (if any). You, and the entity for which you work (if any), acknowledge that by submitting an order for the Splunk software, you and this entity (if any) have agreed to be bound by this agreement.

As used in this Agreement, “Splunk,” refers to Splunk Inc., a Delaware corporation, with its principal place of business at 270 Brannan Street, San Francisco, California 94107, U.S.A.; and “Customer” refers to the company, government, or other entity on whose behalf you have entered into this Agreement or, if there is no such entity, you as an individual.

  1. DEFINITIONS. Capitalized terms used but not otherwise defined in this Agreement are defined in Exhibit A.


    1. License Grant. Subject to Customer’s compliance with this Agreement, including Customer’s timely payment of all applicable fees, Splunk grants to Customer a nonexclusive, worldwide, nontransferable, nonsublicensable license during the Applicable Term to:

      1. use the Purchased Software within the Licensed Capacity solely for Customer’s Internal Business Purposes;

      2. use the Evaluation Software (if any) within the Licensed Capacity solely to evaluate whether Customer wishes to purchase a commercial license for the Software;

      3. use the Test and Development Software (if any) within the Licensed Capacity on a non-production system for non-production uses, including product migration testing or pre-production staging, or testing new data sources, types, or use cases. The Test and Development Software may not be used for any revenue generation, commercial activity, or other productive business or purpose;

      4. use the Free Software within the Licensed Capacity solely for Customer’s Internal Business Purposes;

      5. use subscribed content from a Content Subscription solely in connection with the designated Purchased Software and solely for Customer’s Internal Business Purposes. The term for this license will be for the subscription period included in the Order. This content will be treated as Purchased Software under this Agreement except that the warranty in section 9 will not apply;

      6. use Splunk Extensions solely in connection with applicable Software that Customer has licensed from Splunk, subject to the same limitations and restrictions (including with respect to Term and Licensed Capacity) that apply to this Software. Notwithstanding the foregoing, if any Splunk Extension is provided to Customer under a separate license agreement that grants Customer broader rights with respect to the Splunk Extension, then that separate license agreement, and not this Agreement, will govern Customer’s use of the Splunk Extension (but, for clarity, this Agreement will apply to all other Splunk Extensions); and

      7. (a) to copy, modify and use the Splunk Developer Tools solely to develop Extensions for use with the designated Software or Splunk Extensions (“Customer Extensions”), and (b) to distribute the Customer Extensions exclusively for use with the designated Software or Splunk Extension. The foregoing license is subject to the following conditions: (y) Customer may not remove or alter any Splunk proprietary legends or notices; and (z) Customer may not make any statement that Customer Extensions are certified, or that their performance is guaranteed by Splunk. Customer retains title to Customer Extensions, subject to Splunk’s ownership stated in section 4. Customer may license its end users of Customer Extensions to modify or distribute the Customer Extensions only with the designated Software or Splunk Extension and only if the license flows down the conditions in (y) and (z). Customer agrees to assume full responsibility for the performance and distribution of Customer Extensions.

    2. Open Source Software. Certain Software may contain Open Source Software identified in the end user documentation. Open Source Software that is delivered as part of Purchased Software, which may not be removed or used separately from the Purchased Software is covered by the warranty, support and indemnification provisions applicable to Purchased Software. Customer acknowledges that specific terms required by Open Source Software licensors may apply its use. These terms will be included in the documentation; however, these terms will not: (a) impose any additional restrictions on Customer's use of the Software, or (b) negate or amend Splunk’s responsibilities with respect to Purchased Software.

    3. License Restrictions. Unless otherwise expressly permitted by Splunk, Customer will not and has no rights to: (a) copy any Splunk Materials (except as required to run the Software and for reasonable backup purposes); (b) modify, adapt, or create derivative works of any Splunk Materials; (c) rent, lease, loan, resell, transfer, sublicense, distribute, disclose or otherwise provide any Splunk Materials (including Splunk license keys) to any third party; (d) decompile, disassemble or reverse-engineer any Splunk Materials, or determine or attempt to determine any source code, algorithms, methods or techniques embodied in any Splunk Materials, except to the extent expressly permitted by applicable law notwithstanding a contractual prohibition to the contrary; (e) access or use any Disabled Materials; (f) provide to any third party the results of any benchmark tests or other evaluation of any Splunk Materials without Splunk’s prior written consent; (g) attempt to disable or circumvent any license key or other technological mechanisms intended to prevent, limit, or control use or copying of, or access to, any Splunk Materials or Disabled Materials; (h) remove or obscure any copyright, trademark, patent, or other proprietary notices, legends or symbols from any Splunk Materials; (i) exceed the Licensed Capacity or violate other license limitations identified in Exhibit B or elsewhere in this Agreement; (j) separately use any of the applicable features and functionalities of the Splunk Materials with external applications or code not furnished by Splunk or any data not processed by the Software, except as otherwise specifically permitted in the user documentation; (k) misuse the Software or use the Software for any illegal, harmful, fraudulent, or offensive purposes; (l) otherwise access or use any Splunk Materials except as expressly authorized in this Agreement; or (m) encourage or assist any third party to do any of the foregoing. The Software may be configured to display warnings, reduce available functionality, or cease functioning if unauthorized or improper use is detected, including if the Term expires or the Licensed Capacity is reached or exceeded.

    4. Limitations. Notwithstanding anything to the contrary in this Agreement, Splunk does not provide maintenance and support, warranties, or indemnification for Evaluation Software, Test and Development Software, or Free Software.

  3. SERVICE PROVIDERS. Customer may permit its Service Providers to use the Software solely on Customer’s behalf in connection with providing services to Customer, subject to the terms and conditions of this Agreement. Customer will be jointly and severally liable for any Service Provider’s actions relating to or use of the Software. For avoidance of doubt, the aggregate use by Customer and all of its Service Providers must not exceed the Licensed Capacity and nothing in this section 3 is intended to or will be deemed to increase any Licensed Capacity.

  4. OWNERSHIP. Splunk, its suppliers or licensors own all worldwide right, title and interest in the Splunk Materials, including all related Intellectual Property Rights. Except for the licenses expressly granted to Customer in section 2, Customer will not acquire or claim any right, title or interest in any Splunk Materials or related Intellectual Property Rights, whether by implication, operation of law or otherwise. Notwithstanding anything to the contrary, the Software is licensed, not sold, to Customer. To the extent that Customer provides any Feedback, Customer grants to Splunk a perpetual, irrevocable, worldwide, nonexclusive, transferable, sublicensable, royalty-free, fully paid-up right and license to use and commercially exploit the Feedback in any manner Splunk deems fit.

  5. LICENSE AND SUBSCRIPTION FEES. Customer will pay all License Fees and Content Subscription fees listed in the Order (collectively the "Fees”) no later than 30 days after the date of Splunk’s applicable invoice. Without limitation of Splunk’s other termination rights, Splunk may terminate this Agreement and all licenses granted under this Agreement by notice to Customer if Customer fails to pay the Fees when due. All Fees are non-refundable once paid. Any fees and payment terms for Splunk Extensions not included in the Order will be listed on the download page for Splunk Extensions.

  6. MAINTENANCE AND SUPPORT. Splunk will provide the level of maintenance and support included in the Order (the “Support Services”) in accordance with the terms and conditions in Exhibit C.

  7. CONFIGURATION SERVICES. Subject to Customer’s payment of applicable fees, Splunk will provide the deployment, usage assistance, configuration, and training services (if any) listed in the Order (the “Professional Services”) in accordance with Splunk’s standard professional services terms and conditions provided at These terms are incorporated by reference and made a part of this Agreement.

  8. SOFTWARE VERIFICATION AND AUDIT. At Splunk’s request, Customer will furnish Splunk with a certification signed by Customer’s authorized representative verifying that the Software is being used in accordance with this Agreement and the applicable Order. If the Order includes an offering that requires usage reporting, Customer agrees to provide this reporting pursuant to the requirements identified by Splunk. Upon at least 10 business days’ prior written notice to Customer, and not more than once in a 12-month period, unless a material violation occurred in this period, Splunk may audit Customer’s (and its Service Providers’) use of the Software to ensure compliance with this Agreement and the applicable Order. Any audit will be conducted during regular business hours at Customer’s (and/or its Service Providers’) facilities, will not unreasonably interfere with Customer’s (or its Service Providers’) business and will comply with Customer’s (or its Service Providers’) reasonable security procedures. Customer will (and will ensure that its Service Providers) provide Splunk with reasonable access to all relevant records and facilities reasonably necessary to conduct the audit. If an audit reveals that Customer (and/or any Service Provider) has exceeded the Licensed Capacity or the scope of Customer’s license grant during the period audited, then Splunk will invoice Customer, and Customer will promptly pay Splunk, any underpaid Fees based on Splunk’s price list in effect at the time the audit is completed. If the excess usage exceeds 10% of the Licensed Capacity, Customer will also pay Splunk’s reasonable costs of conducting the audit. This section 8 will survive expiration or termination of this Agreement for a period of 1 year.

  9. WARRANTY. Splunk warrants that for a period of 30 days from the Delivery of Purchased Software, the Purchased Software will substantially perform the material functions described in Splunk’s user documentation, when used in accordance with the user documentation. The sole liability of Splunk (and its Affiliates and suppliers/licensors), and Customer’s exclusive remedy, for any failure of the Purchased Software to conform to this warranty, is for Splunk to do one of the following, at Splunk’s sole option and discretion: (a) modify, or provide an Enhancement for, the Purchased Software so that it conforms to the foregoing warranty, (b) replace Customer’s copy of the Purchased Software with a copy that conforms to the foregoing warranty, or (c) terminate the license with respect to the non-conforming Purchased Software and refund the License Fees paid by Customer for the non-conforming Purchased Software. All warranty claims must be made in writing by Customer to Splunk on or before the expiration of the warranty period. Splunk further warrants that (y) it has the full authority to enter into this Agreement, and (z) at the time of Delivery, there is no Virus in the Purchased Software. If it is determined by Splunk that the Purchased Software contains a Virus, Splunk will assist Customer in repairing or replacing the nonconforming Purchased Software as Splunk’s (and its Affiliates’ and suppliers’/licensors’) sole liability and Customer’s exclusive remedy for any failure of the Purchased Software to conform to this warranty. For the sake of clarity, features and functionality in the Purchased Software that ensure compliance with section 2 of this Agreement shall not be considered a Virus.

  10. WARRANTY DISCLAIMER. Except as expressly stated in section 9, the Splunk Materials, Open Source Software, Third Party Content, Support Services, and Professional Services are provided “AS IS” with no warranties, express or implied. To the full extent permitted by law, Splunk and its suppliers and licensors disclaim all warranties other than as expressly stated in section 9, including any implied warranties of merchantability, satisfactory quality, fitness for a particular purpose, noninfringement, or warranties arising out of course of dealing or trade usage. Splunk does not warrant that use of the Software or Splunk Materials will be uninterrupted, error free, secure, or that all defects will be corrected.

  11. LIMITATION OF LIABILITY. Except for breach of section 2, a party’s indemnification obligations, or either party’s gross negligence or willful misconduct, a party and a Party’s Entities will not be liable for any special, indirect, incidental, consequential, or punitive damages related to this Agreement, including any damages (a) arising from loss of use, loss of data, lost profits, lost revenue, business interruption, or cost of procuring substitute software or services; and (b) based on any theory of liability, including contract, indemnification, warranty, tort (including negligence), or strict liability. A party’s and a Party’s Entities’ total cumulative liability related to this Agreement will not exceed the amounts paid by Customer to Splunk for the Purchased Software in the 12 months prior to the event giving rise to this liability, even if the party or the Party’s Entities have been advised of the possibility of loss or damage. Customer, not Splunk, is solely responsible for the accuracy, quality, and security of Customer’s data and for maintaining a backup of all data and for ensuring the security and integrity of Customer’s (and its Service Provider’s) data, computers, networks, and systems (including protecting them against viruses and malware).
  12. INDEMNITY. Splunk will defend and indemnify Customer against any claim, demand, suit or proceeding brought against Customer by a third party alleging that Purchased Software infringes or misappropriates this third party’s Intellectual Property Rights (“Claim”). Splunk will pay all damages finally awarded against Customer by a court of competent jurisdiction as a result of the Claim, subject to the terms of this Agreement. Notwithstanding the foregoing, Splunk has no obligation to indemnify Customer with respect to: (a) use of the Purchased Software in a manner that is not permitted under this Agreement or that is inconsistent with Splunk’s applicable user documentation; (b) modifications to the Splunk Materials made by anyone other than Splunk; (c) the combination of Software with hardware or software not made by Splunk, or with third-party services, processes or materials where the infringement or misappropriation would not occur but for this combination; (d) Customer’s continued use of the Purchased Software or other allegedly infringing activity after receiving notice of the alleged infringement; or (e) any version of the Purchased Software that is no longer supported by Splunk ((a) through (e), collectively, “Excluded Matters”). If a Claim is made or appears likely to be made, Splunk may, at its option and expense, modify the affected Purchased Software so that it is non-infringing, or replace it with substantially functionally equivalent software. If Splunk determines that neither is reasonably feasible, Splunk may terminate Customer’s applicable license and refund Customer a pro rata refund of the Fees previously paid by Customer. The obligations in this section constitute Customer’s sole and exclusive remedy, and Splunk’s entire liability, with respect to any Claims. Customer will defend and indemnify Splunk against any claim brought against Splunk by a third party arising out of or relating to any Excluded Matter or any Customer Extension, and Customer will pay all damages finally awarded against Splunk by a court of competent jurisdiction as a result of this claim. Each party’s defense and indemnity obligations in this section 12 are conditioned upon the party seeking indemnification (x) providing prompt written notice to the other party of the applicable claim; (y) providing reasonable cooperation and assistance in the defense and negotiations; and (z) giving the indemnifying party sole control of the defense and settlement of the applicable claim, except that: (i) the indemnified party may participate in the defense with counsel of its choice at its own expense, and (ii) the indemnifying party will not agree to any settlement that imposes a material obligation on the indemnified party without the indemnified party’s prior written consent (not to be unreasonably withheld or delayed).


    1. Confidential Information. “Confidential Information” means any technical or business information, ideas, materials, know-how or other subject matter that is disclosed by one party (the “Discloser”) to the other party (the “Recipient”) that: (a) if disclosed in writing, is marked “confidential” or “proprietary” at the time of disclosure; (b) if disclosed orally, is identified as “confidential” or “proprietary” at the time of disclosure, and is summarized in a writing sent by the Discloser to the Recipient within 30 days after this disclosure; or (c) under the circumstances, a person exercising reasonable business judgment would understand to be confidential or proprietary.

    2. Use and Disclosure Restrictions. The Recipient agrees: (a) to maintain Confidential Information in strict confidence; (b) not to disclose Confidential Information to any third parties; and (c) to use Confidential Information only to exercise its rights or perform its obligations under this Agreement. Recipient will treat Confidential Information with the same degree of care as it accords to its own confidential information, but in no event with less than reasonable care. Recipient may disclose the Confidential Information to its directors, officers, employees, and subcontractors (collectively, “Representatives”), who have a bona fide need to know this Confidential Information and who are bound by terms at least as protective as the terms in this section 13. Recipient’s obligations under this section 13 will continue in effect for a period of three years from the date of last disclosure.

    3. Exclusions. The obligations of Recipient under section 13.2 will not apply to any Confidential Information that: (a) is or becomes generally known or available to the public, through no act or omission on the part of Recipient (or any of its Representatives, Affiliates, or agents) or any third party subject to any use or disclosure restrictions with respect to this Confidential Information; (b) was known by or lawfully in the possession of Recipient, prior to its receipt, without restriction as to use or disclosure; (c) is rightfully acquired by Recipient from a third party who has the right to disclose it and who provides it without restriction as to use or disclosure; or (d) is independently developed by Recipient without access, use, or reference to any Confidential Information.

    4. Required Disclosures. The provisions of section 13.2 will not restrict Recipient from disclosing Confidential Information to the extent required by any law enforcement agencies or regulators or compelled by a court or administrative agency of competent jurisdiction. To the extent permissible under law, Recipient will use reasonable efforts to give Discloser sufficient advance notice of any required disclosure to enable Discloser to prevent or limit disclosure.

    5. Return or Destruction of Confidential Information. Upon termination of this Agreement or of support and maintenance, Recipient will, at Discloser’s option, promptly return or destroy all tangible items and embodiments containing or consisting of Confidential Information and provide written certification of this destruction or return by an authorized person.

    6. Injunctive Relief. Recipient agrees that, due to the unique nature of the Confidential Information, the unauthorized disclosure or use of the Confidential Information will cause irreparable harm and significant injury to Discloser, the extent of which will be difficult to ascertain and for which there will be no adequate remedy at law. Accordingly, Recipient agrees that Discloser, in addition to any other available remedies, will have the right to an immediate injunction and other equitable relief enjoining any breach or threatened breach of this section 13, without the necessity of posting any bond or other security. Recipient will notify Discloser in writing immediately upon Recipient’s becoming aware of any breach or threatened breach.

  14. TERM. This Agreement will commence upon Splunk’s first Delivery of the Software and will remain in effect until the expiration of the applicable Software license term, unless earlier terminated pursuant to section 15 (the “Term”). For the avoidance of doubt, termination of a license term shall not affect the term of any other licenses applicable to other Splunk products and services that Customer has purchased. Further, termination of a Content Subscription shall not affect the term of the base license applicable to the Software that Customer has purchased.

    1. Purchased Software, etc. Unless otherwise indicated in the Order, the Term for Purchased Software, Free Software, Splunk Extensions and Splunk Developer Tools will continue indefinitely, unless and until terminated pursuant to section 15. If the Order indicates a Term of a specific duration, the applicable licenses granted to Customer will terminate automatically upon expiration of this Term. Upon expiration of any Term, the applicable Software will stop working automatically.

    2. Evaluation Software. The Term for Evaluation Software will be specified in the Order or with the license key. If no term is specified, the Term for Evaluation Software is 30 days from the date the license key is delivered. Any license keys provided for Evaluation Software will automatically expire and cause the Evaluation Software to become non-operational at the end of the Term. If Customer wishes to use the Evaluation Software after the Term expires, Customer must purchase a license for the Software.


    1. Termination Rights. Either party may terminate this Agreement by written notice to the other party in the event of a material breach of this Agreement that is not cured within 30 days of receipt of the notice. In addition, Splunk may immediately terminate this Agreement (in whole or in part) by written notice to Customer (a) if Customer materially breaches section 2, or (b) as stated in section 5. Splunk may also terminate Customer’s license to any Evaluation Software at any time with or without cause by notice to Customer. If Customer is the Government, then termination will be governed by 48 C.F.R. § 52.212-4.

    2. Effect of Termination. Upon any expiration or termination of this Agreement, the rights and licenses granted to Customer will automatically terminate, and Customer agrees to immediately (a) cease using the Splunk Materials, (b) return or destroy all copies of the Splunk Materials and other Splunk Confidential Information in Customer’s possession or control, and (c) certify in writing the completion of the return or destruction in accordance with section 13.5. Upon termination of this Agreement, Splunk will have no obligation to refund any Fees or other amounts received from Customer during the Term. Unless otherwise provided in this Agreement, Customer shall be required to pay all Fees due under an Order, even in the event of an early termination. Section 1 (Definitions), section 4 (Ownership), section 8 (Software Verification and Audit), section 10 (Warranty Disclaimer), section 11 (Limitation of Liability), section 12 (Indemnity), section 13 (Confidential Information), section 15 (Termination) and sections 16 (Export) through 22 (General) will survive any expiration or termination of this Agreement.

  16. EXPORT. Customer will comply fully with all relevant export laws and regulations of the United States and any other country (“Export Laws”) where Customer uses any of the Splunk Materials. Customer certifies that Customer is not on any of the relevant U.S. government lists of prohibited persons, including the Treasury Department’s List of Specially Designated Nationals and the Commerce Department’s List of Denied Persons or Entity List. Customer further certifies that Customer will not export, re-export, ship, transfer or otherwise use the Splunk Materials in any country subject to an embargo or other sanction by the United States, and that Customer will not use the Splunk Materials for any purpose prohibited by the Export Laws, including, but not limited to, nuclear, chemical, missile or biological weapons related end uses.

  17. GOVERNMENT END USER RIGHTS. Customer acknowledges that all Splunk Materials were developed entirely at private expense and that no part of the Splunk Materials was first produced in the performance of a government contract. Customer agrees that all Splunk Materials and their derivatives are “Commercial Items” as defined in 48 C.F.R. § 2.101, and if Customer is the Government, then the use, duplication, reproduction, release, modification, disclosure or transfer of this commercial product and data, is restricted in accordance with 48 C.F.R. § 12.211, 48 C.F.R. § 12.212, 48 C.F.R. § 227.7102-2, and 48 C.F.R. § 227.7202, as applicable. Consistent with 48 C.F.R. § 12.211, 48 C.F.R. § 12.212, 48 C.F.R. § 227.7102-1 through 48 C.F.R. § 227.7102-3, and 48 C.F.R. §§ 227.7202-1 through 227.7202-4, as applicable, the Splunk Materials are licensed to Government end users (a) only as Commercial Items and (b) with only those rights as are granted to all other users pursuant to this Agreement and any related agreement(s), as applicable. Accordingly, Customer will have no rights in the Splunk Materials except as expressly agreed to in writing by Customer and Splunk.

  18. PUBLICITY. Customer agrees that Splunk may publish a brief description of Customer’s deployment of the Software and identify Customer as a Splunk customer on any of Splunk’s websites, client lists, press releases, and other marketing materials.

  19. THIRD PARTY CONTENT DISCLAIMER. Certain Extensions and other materials or services made available for download or access on Splunkbase are developed and/or provided by third parties (“Third-Party Content”). Splunk makes Third-Party Content available for download on Splunkbase as a convenience to its customers. Splunk neither controls nor endorses, nor is Splunk responsible for, any Third-Party Content, including the accuracy, integrity, quality, legality, usefulness or safety of Third-Party Content. Certain Third-Party Content may, among other things, be inaccurate, nonfunctional, infringing or dangerous. Nothing in this Agreement or on Splunkbase will be deemed to be a representation or warranty by Splunk with respect to any Third-Party Content, even if a particular Extension or other item of Third-Party Content is identified as “certified” or “validated” for use with Software. Splunk has no obligation to monitor Third-Party Content, and Splunk may block or disable access to any Third-Party Content at any time. Customer’s use of Third-Party Content is at Customer’s own risk and may be subject to any additional terms, conditions and policies applicable to the Third-Party Content (such as license terms, terms of service, or privacy policies of the providers of the Third-Party Content).

  20. AUTHORIZED PARTNERS. If Customer acquired the Software through an authorized reseller, partner or OEM of Splunk (“Authorized Partner”) then, notwithstanding anything to the contrary in this Agreement: (a) Customer’s use of the Software is subject to any additional terms in the agreement provided by the Authorized Partner (“Partner Agreement”); (b) Customer agrees to pay the Authorized Partner the Fees and other applicable fees, and Customer will have no direct Fee payment obligations to Splunk for this Software; (c) the Partner Agreement is between Customer and the Authorized Partner and is not binding on Splunk; and (d) Splunk may terminate this Agreement (including Customer’s right to use the Software) if Splunk does not receive payment for Customer’s use of the Software from the Authorized Partner or if Customer breaches any term of this Agreement. If the warranty and support terms in the Partner Agreement are different from those in this Agreement, then those different terms are solely between Customer and the Authorized Partner and Splunk has no obligations to Customer with respect to the different terms. Except as stated in the preceding sentence, if there is any conflict or inconsistency between this Agreement and the Partner Agreement, this Agreement will control as between Splunk and Customer.

  21. CHOICE OF LAW AND DISPUTES. Unless Customer is the Government, this Agreement will be governed by and construed in accordance with the laws of the State of California, as if performed wholly within the state and without giving effect to the conflicts of law principles of any jurisdiction or the United Nations Convention on Contracts for the International Sale of Goods, the application of which is expressly excluded. Any legal action or proceeding arising under this Agreement will be brought exclusively in the federal or state courts located in San Francisco, California, and the parties consent to personal jurisdiction and this venue (except that Splunk may seek injunctive relief to prevent improper or unauthorized use or disclosure of any Splunk Materials in any court of competent jurisdiction). If Customer is the Government, this Agreement will be governed by and interpreted in accordance with the Contract Disputes Act of 1978, as amended (41 U.S.C. §§ 7101-7109). Failure of the parties to reach agreement on any request for equitable adjustment, claim, appeal, or action arising under or relating to this Agreement will be a dispute to be resolved in accordance with the clause at 48 C.F.R § 52.233-1, which is incorporated in this Agreement by reference.

    1. Purchase Order. Customer’s issuance of a purchase order constitutes acceptance of this Agreement notwithstanding anything to the contrary in the purchase order. Splunk expressly rejects any terms and conditions in Customer’s purchase order that differ from those in this Agreement. Any different or additional terms and conditions will not become a part of the agreement between the parties notwithstanding any subsequent acknowledgement, invoice or license key that Splunk may issue.

    2. Notices. All notices required or permitted under this Agreement will be in writing and delivered in person, by overnight delivery service, or by registered or certified mail, postage prepaid with return receipt requested. All notices will be deemed given upon receipt. All communications will be sent to the addresses in the applicable Order or to any other address specified to a party in accordance with this section.

    3. Assignment. Customer may not assign, delegate or transfer this Agreement, in whole or in part, by agreement, operation of law or otherwise without the prior written consent of Splunk. Splunk may assign this Agreement in whole or in part to an Affiliate or in connection with an internal reorganization or a merger, acquisition, or sale of all or substantially all of Splunk’s assets. Splunk may also assign its rights to receive payment due as a result of performance of this Agreement to a bank, trust company, or other financing institution, including any federal lending agency in accordance with the Assignment of Claims Act (31 U.S.C. § 3727) and may assign this Agreement in accordance with the provisions at 48 C.F.R § 42.12, as applicable. Any attempt to assign this Agreement other than as permitted in this Agreement will be null and void. Subject to this section, this Agreement will bind and inure to the benefit of the parties’ permitted successors and assigns.

    4. Force Majeure. Neither party will be responsible for any failure or delay in its performance under this Agreement (except for the obligation to make payments) due to causes beyond its reasonable control, including, but not limited to, labor disputes, war, acts of terror, riot, acts of God, or governmental action.

    5. Rights and Remedies. Except as otherwise expressly stated in this Agreement, the rights and remedies of either party stated in this Agreement are not exclusive and are in addition to any other rights and remedies provided by law or at equity.

    6. Waiver; Severability. The waiver by either party of a breach of or a default under this Agreement will be effective only if in writing. The failure by either party to enforce any provisions of this Agreement will not constitute a waiver of any right under this Agreement or of any subsequent enforcement of any provision. If a court of competent jurisdiction holds any provision of this Agreement invalid or unenforceable, the remaining provisions of the Agreement will remain in full force and effect, and the provision affected will be construed so as to be enforceable to the maximum extent permissible by law.

    7. Operational Metrics and Usage Data. The Software and Splunk Extensions may be configured to allow Splunk to collect and process technical and related information about Customer’s use of the Software (which may include, without limitation, ingest volume, search concurrency, number of unique user logins, Internet protocol addresses, page views, session duration, and other similar data) and certain aggregated, anonymized information about the Software environment (such as hardware identification, operating system, application version), performance, configuration and other usage information. Splunk uses this information to support and troubleshoot issues, provide updates, automate invoices, analyze trends and improve Splunk’s products or services. Participation in the collection and processing of this data by Splunk is voluntary (except for certain Free or Evaluation Software or other programs as designated by Splunk, which may require Customer’s participation in an in-product analytics program as a condition of receiving access to and using the Software). Instructions on how to disable these in-product collection features are included in Splunk’s end user documentation. Splunk collects and processes the information it collects subject to Splunk’s Privacy Policy, which can be found at and is incorporated by reference and made a part of this Agreement.

    8. Integration; Entire Agreement. This Agreement, along with any additional terms incorporated by reference, including the Order and the Exhibits hereto, constitute the complete and exclusive understanding and agreement between the parties and supersedes any written or oral prior or contemporaneous agreements, communications and understandings. Any waiver, modification or amendment of any provision of this Agreement will be effective only if in writing and signed by duly authorized representatives of both parties. Any terms and conditions contained or referenced by either party in a quote, purchase order, acceptance, invoice or any similar document purporting to modify the terms and conditions contained in this Agreement will be disregarded and have no effect unless otherwise expressly agreed to by the parties in accordance with the preceding sentence.



  1. “Affiliate,” with respect to a party, means a corporation, partnership or other entity controlling, controlled by or under common control with the party, but only so long as the control continues to exist. For purposes of this definition, “control” means ownership, directly or indirectly, of greater than fifty percent (50%) of the voting rights in the entity (or, in the case of a noncorporate entity, equivalent rights).

  2. “Authorized Partner” has the meaning stated in section 20.

  3. “Claim” has the meaning stated in section 12.

  4. “Confidential Information” has the meaning stated in section 13.1.

  5. “Content Subscription” means the right for Customer to receive content applicable to the Purchased Software (such as models, rules, and configurations, as further described in the relevant end user documentation) on a periodic basis for the duration of the subscription period. Content Subscriptions are purchased as an add-on service to the license for Purchased Software as identified in the Order.

  6. “Customer Extensions” has the meaning stated in Section 2.1.7.

  7. “Delivery” means the date of Splunk’s initial delivery of the license key for the applicable Software or otherwise making the applicable Software available for download by Customer.

  8. "Disabled Materials” means certain materials (including programs, modules or components, functionality, features, documentation, content or other materials) that may be contained in or provided with the Software that are disabled or hidden in Customer’s setting, because Customer either: (a) does not have the relevant license or license key, or (b) has not paid the applicable Fees, for those materials.

  9. “Enhancements” means any updates, upgrades, releases, fixes, enhancements or modifications to the Purchased Software made generally commercially available by Splunk to its support customers under the terms and conditions in Exhibit C.

  10. “Evaluation Software” means Software that is specified in an Order as provided under an evaluation license or a free trial license.

  11. “Excluded Matters” has the meaning stated in section 12.

  12. "Extension” means any separately downloadable suite, configuration file, add-on, technical add-on, example module, command, function, playbook, content or application that extends the features or functionality of the applicable Software.

  13. “Feedback” means all suggestions for improvement or enhancement, recommendations, comments, opinions, code, input, ideas, reports, information, know-how or other feedback provided by Customer (whether in oral, electronic, or written form) to Splunk in connection with Splunk Materials. Feedback does not include any data, results or output created or generated by Customer using the Software, unless specifically submitted or communicated by Customer to Splunk as part of the Feedback.

  14. “Free Software” means Software specified in an Order without charge (other than Evaluation Software).

  15. “Government” means an agency, department, or instrumentality of the United States government.

  16. “Intellectual Property Rights” means all patent, copyright, trademark, and trade secret rights and other intellectual property and proprietary rights, whether registered or unregistered.

  17. “Internal Business Purpose” means Customer’s use for its own internal business operations on Customer’s systems, networks and devices with Customer’s data. This use does not include use by Customer on a service bureau basis or otherwise to provide services to, or process data for, any third party.

  18. “Licensed Capacity” means the maximum usage of the Software (e.g., aggregate daily volume of data indexed, based on source types, number of Nodes, number of monitored accounts, number of users, storage capacity, search and compute units, etc.) that is permitted under the type of license included in an Order. The Licensed Capacity associated with each Purchased Software is stated in Exhibit B.

  19. “License Fees” means all license fees listed in an Order.

  20. “Open Source Software” means software or similar subject matter that is distributed under an open source license such as (by way of example only) the GNU General Public License, GNU Lesser General Public License, Apache License, Mozilla Public License, BSD License, MIT License, Common Public License, any derivative of any of the foregoing licenses, or any other license approved as an open source license by the Open Source Initiative.

  21. “Order” means Splunk’s quote, statement of work, or ordering document (including online order form) accepted by Customer via Customer’s purchase order or other ordering document submitted to Splunk (including directly or indirectly through an Authorized Partner) to order Splunk Materials or services, which references the products, services, pricing and other applicable terms.

  22. “Party’s Entities” means a party’s affiliates, subsidiaries, officers, directors, employees, agents, partners and licensors.

  23. “Professional Services” has the meaning stated in section 7.

  24. “Purchased Software” means Software licensed to Customer for which Customer has paid a License Fee to Splunk, directly or through an Authorized Partner.

  25. “Service Providers” has the meaning stated in section 3.

  26. “Software” means the software products listed in an Order and any Enhancements thereto made available to Customer by Splunk.

  27. “Splunkbase” means Splunk’s online directory of or platform for Extensions, currently located at and any and all successors, replacements, new versions, derivatives, updates and upgrades thereto and any other similar platform(s) owned and/or controlled by Splunk.

  28. “Splunk Developer Tools” means the standard application programming interfaces, configurations, software development kits, libraries, command line interface tools, other tooling (including scaffolding and data generation tools), integrated development environment plug-ins or extensions, code examples, tutorials, reference guides and other related materials provided by Splunk to facilitate or enable the creation of Extensions or otherwise support interoperability between the Software and Customer’s system or environment.

  29. “Splunk Extensions” means Extensions made available through Splunkbase that are identified on Splunkbase as published by Splunk and not by any third party.

  30. “Splunk Materials” mean the Software, Software license keys, Splunk Developer Tools, Splunk Extensions and end user documentation relating thereto.

  31. “Support Services” has the meaning stated in section 6.

  32. “Term” has the meaning stated in section 14.

  33. “Test and Development Software” means Software that is specified in an Order as provided under a test and development license.

  34. “Third-Party Content” has the meaning stated in section 19.

  35. “Virus” means any harmful or malicious code, hidden programs or data incorporated in the Purchased Software that destroys or impairs the Purchased Software.



The Licensed Capacity and other license limitations associated with each Purchased Software can be found here:



Customer agrees that the following terms and conditions (“Support Terms”) will govern the delivery of any support or maintenance services by Splunk (“Support”) listed on an Order entered into pursuant to the Software License Agreement (the “Agreement”) to which these Support Terms are attached. Subject to Customer’s termination rights stated in the Agreement, ordering any Support from Splunk or any Authorized Partner indicates Customer’s acceptance of these Support Terms. These Support Terms are effective upon receipt and confirmation of acceptance of Customer’s purchase order by Splunk or an Authorized Partner.

  1. DEFINITIONS. Unless otherwise defined in these Support Terms, capitalized terms have the meanings stated in the Agreement.


    1. Services. Subject to Customer’s timely payment of the applicable annual Support fees listed in the Order (the “Support Fees”), Splunk will provide the level of Support identified in the Order in accordance with these Support Terms. No other maintenance or support for the Software is included.

    2. Support Fees. Support Fees will be due and payable in accordance with the Order. Splunk will notify (electronically or otherwise) Customer of the then-current annual Support Fee for Customer’s level of Support in each notice of term renewal. Support Fees are non-refundable once paid.

    3. Exclusions. Splunk will have no obligation to provide Support for issues caused by any of the following (each, a “Licensee-Generated Error”): (i) modifications to the Software not made by Splunk; (ii) use of the Software other than as authorized in the Agreement or as provided in the documentation for the Software; (iii) damage to the machine on which the Software is installed; (iv) Customer’s failure to use the Software in ways other than stated in the documentation; (v) versions of the Software other than the Supported Version (defined in section 2.6.6); (vi) third-party products not expressly supported by Splunk and described in the documentation; or (vii) conflicts related to replacing or installing hardware, drivers, and software that are not expressly supported by Splunk and described in the documentation. Splunk will notify Customer as soon as reasonably possible that a support issue is a Licensee-Generated Error. If the parties agree in writing that Splunk will provide support for the Licensee-Generated Error, Splunk may invoice Customer at Splunk’s then-current time and materials rates for this support.

    4. Support for Splunk Extensions. Subject to Customer’s payment of the applicable annual Support Fees, Splunk will provide an Initial Response and Acknowledgement in accordance with P3 terms as described in the Support Programs (as defined below) for Splunk Extensions labeled as “Splunk Supported”, and updates will be provided when made generally available. For clarity, Splunk does not support Splunk Extensions labeled “Not Supported.” No other sections in these Terms and Conditions apply to Splunk Extensions.

    5. Restrictions. Support is delivered only in English unless Customer is in a location where Splunk has made localized Support available.

    6. Support Descriptions.

      1. Splunk Support. Customer’s Order will identify the level of Support Customer purchased for the applicable Purchased Software. The different support programs and levels are described here: (“Support Programs”). Support cases are handled based on case priority levels described in the Support Programs. When submitting a case, Customer will select the priority for initial response by logging the case online in accordance with the priority guidelines in the Support Programs. Splunk may change the priority if the issue does not conform to the criteria for the selected priority. Splunk will provide Customer with notice (electronic or otherwise) of this change.

      2. Authorized Support Contacts. Support will be provided solely to the authorized individual(s) specified by Customer (“Support Contacts”). Splunk strongly recommends that Customer’s Support Contact(s) be trained on the Purchased Software. The number of Support Contacts under a Support Program are based on the type and size of Customer’s license entitlement. Customer will be asked to provide the primary email address and login ID for all Support Contacts.

      3. Defect Resolution. If Splunk determines there is a defect in the Purchased Software, Splunk will, in its discretion, (a) repair the defect in the version of the Purchased Software, (b) instruct Customer to install a newer version of the Purchased Software with the defect repaired, or (c) provide Customer a workaround in lieu of fixing the defect.

      4. Support Hours. Support is provided via telephone, email and web portal. Support will be delivered by a member of Splunk’s technical support team during the regional hours of operation listed in the Support Programs.

      5. Customer’s Obligation to Assist. If Customer reports a purported defect in the Purchased Software to Splunk, Splunk may require Customer to provide the following information: (a) a general description of the operating environment, (b) a list of all hardware components, operating systems and networks, (c) a reproducible test case, and (d) log, trace, and systems files. Customer’s failure to provide this information or participate in a screen share session may prevent Splunk from identifying and fixing that purported defect or lead to increased resolution times.

      6. Software Upgrades and Software Support Policy. Splunk provides updates, upgrades, maintenance releases and reset keys only to Splunk Support customers pursuant to Splunk’s Support Policy provided at: (“Support Policy”). Software comes with a three-digit number version. The first digit represents the major release (i.e., upgrade), the second digit identifies the minor releases (i.e., updates) and the third digit identifies the maintenance releases. With a new major version, the number to the left of the decimal is changed and for minor releases, the number to the right of the decimal point is increased. Splunk provides Support for the duration specified in the Support Policy following the initial release date of each major or minor version. The current version and the releases within the support period will be “Supported Versions”.

    7. Changes in Support and Software. Subject to the Support Policy, Customer acknowledges that Splunk has the right to discontinue the manufacture, development or distribution of and Support for, any Software at any time in its sole discretion. However, Splunk agrees to continue Support for the Software during the then-current Support Term, subject to the terms in section 3. Splunk reserves the right to alter Support from time to time, using reasonable discretion, but in no event will alterations result in (a) diminished support from the level of Support in these Support Terms; (b) materially diminished obligations for Splunk; (c) materially diminished Customer’s rights; or (d) higher Support Fees during the then-current Support Term. Splunk will provide Customer 30 days’ prior written notice of any material changes to the Support.

    1. Term. These Support Terms will commence on Delivery and continue for a period of 1 year (or for term purchased if different than one year) (the “Initial Term”) unless terminated earlier in accordance with the terms of the Agreement. These Support Terms will automatically renew for additional 1 year terms (or for term purchased if different than one year) (each, a “Renewal Term,” and the Initial Term and the Renewal Terms, may be referred to as the “then-current Support Term”), unless either party provides the other written notice of its intent not to renew at least 30 days prior to the end of the then-current Support Term. If Customer purchases Support from an Authorized Partner, Customer will provide the notice to the Authorized Partner. If Customer purchases Support, Customer must purchase and renew Support for all of the licenses for a particular Software product. If a Support Term lapses, Customer may seek to re-activate Support by submitting a purchase order that includes fees for the lapsed period plus a reinstatement fee.

    2. Termination. Either party may terminate these Support Terms by written notice to the other party in the event of a material breach and does not cure the breach within 30 days of receiving notice of the breach. If Customer terminates the Agreement for Splunk’s uncured material breach of these Terms and Conditions, then Splunk will refund any unused prepaid fees to Customer as Customer’s sole and exclusive remedy. When Customer accepts a term license or cloud subscription in an Order that also terminates the Customer’s perpetual licenses of a Software (“Prior Software”), all rights granted with respect to the Prior Software are terminated upon the effective date of the Order, unless otherwise specified on the Order. There will be no refund of any Fees previously paid with respect to the Prior Software. Customer will certify in writing within 30 business days of the date of a request from Splunk, the destruction of all of the Prior Software including all Software copies and related license keys.

Last Updated 10.21.19

*As of November 1, 2019, all Splunk products and services will feature term licenses. We will no longer sell any products with perpetual licenses. For more information click here.