© 2005 - 2026 Splunk LLC All rights reserved.
Can I buy Splunk Enterprise Security in the Cloud as a standalone product?
Yes. Splunk Enterprise Security in the Cloud requires a Splunk Cloud license, but that is the only requirement for purchase. Please contact us to request additional pricing information for Splunk Enterprise Security.
What are the pricing options for Splunk Enterprise Security in the Cloud?
Workload Pricing: This pricing model is based on compute capacity consumed, measured in Splunk Virtual Compute (SVC) units. For more information on Workload pricing, please refer to the Pricing Programs FAQ or contact us.
Do I get a volume discount if I buy a larger Splunk Enterprise Security Cloud instance?
Yes. Splunk Enterprise Security pricing has built-in volume discounts. Contact us to learn more.
What license types apply?
Workload pricing applies to both on-prem and cloud deployments of Splunk Enterprise Security. It does not currently apply to Splunk SOAR.
Do the pricing plans include Technical Support?
Yes, Splunk product purchases include support. Support offerings include all major and minor software updates and technical support. You can find more information about our Support offerings here.
Can I buy more storage with Splunk Cloud?
Yes. Please contact us for more details around purchasing additional storage.
Have more questions about Splunk Enterprise Security in the Cloud?
Analytics-Driven SIEM
Splunk Enterprise Security in the Cloud
Can I buy Splunk Enterprise Security as a standalone product?
Yes. Splunk Enterprise Security deployed on-premises requires a Splunk Enterprise license, but that is the only requirement for purchase. Please contact us to request additional pricing information for Splunk Enterprise Security.
What does the license metric “Index Volume/Day” mean?
“Index Volume/Day” is one of several pricing options for Splunk Enterprise Security, and it represents the amount of data you send to your Splunk installation in a day. If you opt for Index Volume/Day pricing, we recommend that you purchase a license size that aligns with the maximum amount of data you expect to send to Splunk in one day. With this pricing model, you pay once to index the data and then can perform unlimited searches against that data, as well as store as much data as you like. You also have complete flexibility in infrastructure deployment, with no restriction on the number of nodes, cores or sockets.
Do I get a volume discount if I buy a larger Splunk Enterprise Security license?
Yes. Splunk Enterprise Security pricing has built-in volume discounts. You pay based on the amount of data indexed by your Splunk instance on a daily basis, calculated in GB per day. We determine the total plan price by multiplying your desired daily index volume by the unit price per GB.
Can I buy an index volume not mentioned here?
Yes. You can buy any index volume from 1 GB/day to multiple terabytes of data per day. If you are looking for pricing at an index volume not shown here, please contact us.
What Pricing Options Apply for Splunk Enterprise Security when deployed on-premises?
Ingest pricing, predictive pricing, workload pricing. Learn more about these pricing options here.
Are there alternatives to volume-based pricing?
Splunk now offers a number of different pricing options depending on an organization's needs. Traditionally, Enterprise Security has been priced by index volume. While this pricing still stands, qualifying customers now have the option to purchase via workload pricing determined by the amount of compute power assigned to a Splunk instance. This pricing model removes data limits and is familiar to many in the industry. Additionally, the predictive pricing program may also be available.
Contact us for more information or visit the Pricing updates page for more information.
Do the pricing plans include Technical Support?
Yes, Splunk product purchases include support. Support offerings include all major and minor software updates and technical support. You can find more information about our support offerings here.
What are the licensing options for Splunk Enterprise Security?
Splunk offers Term Licenses for Splunk Enterprise Security. A Term License is for a specific time period, usually a year, during which you are allowed to access and use the software. At the end of the term, you must stop using the software or purchase new licenses. Splunk also offers multi-year term license options for customers interested in a longer term commitment.
For the Annual (Term) License, the per unit price quoted above includes Standard support. If you renew your Annual (Term) License at the end of your license period, you will also get Standard support included.
If I already own Splunk Enterprise Security, do I get a discount for Splunk User Behavior Analytics (UBA) and/or Splunk SOAR?
Yes. Splunk offers discounts for customers who purchase multiple products from the Splunk Security Operations Suite, which includes Splunk Enterprise Security, Splunk User Behavior Analytics and Splunk SOAR.
Analytics-Driven SIEM
Splunk Enterprise Security On-Premises
© 2005 - 2026 Splunk LLC All rights reserved.