Skip to main content


Suites

This page describes the capabilities included in the various cloud suite offerings listed below as well as what each unit of licensing metric entitles customers to consume in such capabilities.
 
IT Cloud
  Standard Edition Plus Edition
IT Cloud

Splunk Cloud Platform

 - Includes 35 GB storage per Host

 - 1 SVC per 30 Hosts

Splunk Cloud Platform and Splunk IT Service Intelligence

 - Includes 45 GB storage per Host

 - 1 SVC per 20 Hosts

Splunk Infrastructure Monitoring Enterprise Edition

- Each Host allows:

  •  20 Containers
  •  200 Custom Metrics
  •  50 High Resolution Metrics
Logging Add-On

Splunk IT Cloud Logging - Per Asset: The logging capacity for Splunk Cloud and ITSI in Splunk IT Cloud can

be added by purchasing a Splunk IT Cloud Logging add-on (per Asset) specific to the Splunk IT Cloud suite. 

1 SVC is provisioned to Splunk IT Cloud customers for each 20 additional Assets subscribed. Each Asset includes 45 GB storage
 
“Host” means a virtual machine or physical server with a dedicated operating system up to 64 GB of memory.
An "Asset" refers to any Protected Devices or API endpoints (e.g., serverless functions, ActiveDirectories, M365 service, or Twitter feed) sending data directly to Splunk but that is not already counted as a Host.


Security Cloud
  Standard Edition Plus Edition
Security Cloud

Splunk Cloud Platform

 - Includes 3 GB storage per Protected Device

 - 1 SVC per 333 Protected Device

Splunk Cloud Platform and Enterprise Security

- Includes 4.5GB storage per Protected Device

- 1 SVC per 222 Protected Device

Splunk Security Essentials
 
“Protected Device” means any device on the customer network whose IP address is referenced in any data ingested into Splunk platform. It is not just the devices sending logs to Splunk but also the devices that are mentioned in the logs. For example, a firewall supporting 1,000 desktop PC’s connecting to the Web would be 1,001 devices total, as each desktop PC will be referenced in the firewall events, even though all those events are being sent from the single firewall device to Splunk.


Observability Cloud
  Standard Edition Plus Edition
Observability Cloud (service limits per Host)

Splunk Infrastructure Monitoring Enterprise Edition

  •  20 Containers or Serverless Functions
  •  200 Custom Metrics
  •  50 High Resolution Metrics

Splunk Infrastructure Monitoring Enterprise Edition

  •  20 Containers or Serverless Functions
  •  200 Custom Metrics
  •  50 High Resolution Metrics

Splunk Application Performance Monitoring Enterprise Edition

  •  20 Containers or Serverless Functions
  •  40 Monitoring MetricSet
  •  400 Troubleshooting MetricSet
  •  20.48 MB TraceVolume ingested per min

Splunk Application Performance Monitoring Enterprise Edition

  •  20 Containers or Serverless Functions
  •  40 Monitoring MetricSet
  •  400 Troubleshooting MetricSet
  •  20.48 MB TraceVolume ingested per min

Splunk Logs Observer Enterprise Edition

  •  3 GB/month index & 15 GB/month ingest

Splunk Logs Observer Enterprise Edition

  • 3 GB/month index & 15 GB/month ingest
 

Real User Monitoring

  •  10K Sessions per month
 
“Host” means a virtual machine or physical server with a dedicated operating system up to 64 GB of memory.
Please see Specific Terms for Splunk Observability at www.splunk.com/SpecificTerms for additional definitions.
 
Updated on May 5, 2021

 

WHY SPLUNK?
WHY SPLUNK?
SUPPORT
SUPPORT
RESOURCES
RESOURCES
FOR DEVELOPERS
FOR DEVELOPERS
COMPANY
COMPANY
SPLUNK SITES
SPLUNK SITES
Sitemap
Privacy
Website Terms of Use
Splunk Licensing Terms
Export Control
Modern Slavery Statement
Splunk Patents

© 2005 - 2022 Splunk Inc. All rights reserved.

Splunk, Splunk>, Turn Data Into Doing, and Data-to-Everything are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners.