Suitification Licensing

Suites

This page describes the capabilities included in the various cloud suite offerings listed below as well as what each unit of licensing metric entitles customers to consume in such capabilities.

IT Cloud

	Standard Edition	Plus Edition
IT Cloud	Splunk Cloud Platform - Includes 35 GB storage per Host - 1 SVC per 30 Hosts	Splunk Cloud Platform and Splunk IT Service Intelligence - Includes 45 GB storage per Host - 1 SVC per 20 Hosts
IT Cloud	Splunk Infrastructure Monitoring Enterprise Edition - Each Host allows: 20 Containers 200 Custom Metrics 50 High Resolution Metrics
Logging Add-On	Splunk IT Cloud Logging - Per Asset: The logging capacity for Splunk Cloud and ITSI in Splunk IT Cloud can be added by purchasing a Splunk IT Cloud Logging add-on (per Asset) specific to the Splunk IT Cloud suite. 1 SVC is provisioned to Splunk IT Cloud customers for each 20 additional Assets subscribed. Each Asset includes 45 GB storage

“Host” means a virtual machine or physical server with a dedicated operating system up to 64 GB of memory.

An "Asset" refers to any Protected Devices or API endpoints (e.g., serverless functions, ActiveDirectories, M365 service, or Twitter feed) sending data directly to Splunk but that is not already counted as a Host.

Security Cloud

	Standard Edition	Plus Edition
Security Cloud	Splunk Cloud Platform - Includes 3 GB storage per Protected Device - 1 SVC per 333 Protected Device	Splunk Cloud Platform and Enterprise Security - Includes 4.5GB storage per Protected Device - 1 SVC per 222 Protected Device
Security Cloud	Splunk Security Essentials

“Protected Device” means any device on the customer network whose IP address is referenced in any data ingested into Splunk platform. It is not just the devices sending logs to Splunk but also the devices that are mentioned in the logs. For example, a firewall supporting 1,000 desktop PC’s connecting to the Web would be 1,001 devices total, as each desktop PC will be referenced in the firewall events, even though all those events are being sent from the single firewall device to Splunk.

Observability Cloud

	Standard Edition	Plus Edition
Observability Cloud (service limits per Host)	Splunk Infrastructure Monitoring Enterprise Edition 20 Containers or Serverless Functions 200 Custom Metrics 50 High Resolution Metrics	Splunk Infrastructure Monitoring Enterprise Edition 20 Containers or Serverless Functions 200 Custom Metrics 50 High Resolution Metrics
	Splunk Application Performance Monitoring Enterprise Edition 20 Containers or Serverless Functions 40 Monitoring MetricSet 400 Troubleshooting MetricSet 20.48 MB TraceVolume ingested per min	Splunk Application Performance Monitoring Enterprise Edition 20 Containers or Serverless Functions 40 Monitoring MetricSet 400 Troubleshooting MetricSet 20.48 MB TraceVolume ingested per min
	Splunk Logs Observer Enterprise Edition 3 GB/month index & 15 GB/month ingest	Splunk Logs Observer Enterprise Edition 3 GB/month index & 15 GB/month ingest
		Real User Monitoring 10K Sessions per month

“Host” means a virtual machine or physical server with a dedicated operating system up to 64 GB of memory.
Please see Specific Terms for Splunk Observability at www.splunk.com/SpecificTerms for additional definitions.

Updated on May 5, 2021