Can I buy Splunk Enterprise Security as a standalone product?
Yes. Splunk Enterprise Security deployed on-premises requires a Splunk Enterprise license, but that is the only requirement for purchase. Please contact us to request additional pricing information for Splunk Enterprise Security.
What does the license metric “Index Volume/Day” mean?
“Index Volume/Day” is one of several pricing options for Splunk Enterprise Security, and it represents the amount of data you send to your Splunk installation in a day. If you opt for Index Volume/Day pricing, we recommend that you purchase a license size that aligns with the maximum amount of data you expect to send to Splunk in one day. With this pricing model, you pay once to index the data and then can perform unlimited searches against that data, as well as store as much data as you like. You also have complete flexibility in infrastructure deployment, with no restriction on the number of nodes, cores or sockets.
Do I get a volume discount if I buy a larger Splunk Enterprise Security license?
Yes. Splunk Enterprise Security pricing has built-in volume discounts. You pay based on the amount of data indexed by your Splunk instance on a daily basis, calculated in GB per day. We determine the total plan price by multiplying your desired daily index volume by the unit price per GB.
Can I buy an index volume not mentioned here?
Yes. You can buy any index volume from 1 GB/day to multiple terabytes of data per day. If you are looking for pricing at an index volume not shown here, please contact us.
What Pricing Options Apply for Splunk Enterprise Security when deployed on-premises?
Ingest pricing, predictive pricing, workload pricing. Learn more about these pricing options here.
Are there alternatives to volume-based pricing?
Splunk now offers a number of different pricing options depending on an organization's needs. Traditionally, Enterprise Security has been priced by index volume. While this pricing still stands, qualifying customers now have the option to purchase via workload pricing determined by the amount of compute power assigned to a Splunk instance. This pricing model removes data limits and is familiar to many in the industry. Additionally, the predictive pricing program may also be available.
Contact us for more information or visit the Pricing updates page for more information.
Do I need to buy support every year?
If you purchase an Annual (Term) License, support is included in the license price. Splunk Enterprise Security’s support offerings include all major and minor software updates and customer support. You can find more information about Splunk Enterprise Security’s support offerings here.
What are the licensing options for Splunk Enterprise Security?
Splunk offers Term Licenses for Splunk Enterprise Security. A Term License is for a specific time period, usually a year, during which you are allowed to access and use the software. At the end of the term, you must stop using the software or purchase new licenses. Splunk also offers multi-year term license options for customers interested in a longer term commitment.
For the Annual (Term) License, the per unit price quoted above includes Standard support. If you renew your Annual (Term) License at the end of your license period, you will also get Standard support included.
If I already own Splunk Enterprise Security, do I get a discount for Splunk User Behavior Analytics (UBA) and/or Splunk SOAR?
Yes. Splunk offers discounts for customers who purchase multiple products from the Splunk Security Operations Suite, which includes Splunk Enterprise Security, Splunk User Behavior Analytics and Splunk SOAR.