Let's turn data into doing

With scalable, flexible and predictable pricing options, Splunk can help you bring data to every question, every decision and every action. Our pricing options by data volume or compute power allow you to find the right fit for your needs.

We offer significant volume discounts

Get Actionable Intelligence

Splunk Enterprise

Can I try Splunk Enterprise before I buy it?

Yes. Download a free trial of Splunk Enterprise here.

 

What pricing options apply to Splunk Enterprise?

Infrastructure-based Pricing, Predictive Pricing Program, Ingest Pricing, Rapid Adoption Packages

 

What does the Infrastructure-based pricing license metric “Number of vCPUs” mean?

Under the Infrastructure-based pricing model, Splunk Enterprise offers a license allocation based on compute capacity, unlike ingest licensing which is based on data volume. Under the hood, Infrastructure-based pricing has two different implementations depending on cloud or on-remises. The Cloud metric is called a Splunk Virtual Compute (SVC) while the on-rem metric is called a Virtual Central Processing Unit (vCPU). Both are calculations of the CPU resources allocated and available to Splunk for Search Head and Indexer components only. This industry standard, value-oriented metric aligns your Splunk investment with your search activity providing you flexibility to bring in data volume without ingest limits.

 

What does the Ingest license metric “Index Volume/Day” mean?

Under the Ingest (volume-based) pricing model, Splunk Enterprise software is priced by how much data you send into your Splunk installation in a day. We recommend that you purchase a license size that aligns with the maximum amount of data you expect to send to Splunk in one day. With this pricing model, you pay once to index the data and then can perform unlimited searches against that data, as well as store it for as long as you like. You also have complete flexibility in infrastructure deployment, with no restriction on the number of nodes, cores or sockets.

 

Do I get a volume discount if I buy a larger Splunk Enterprise license?

Yes. Splunk Enterprise pricing has built-in volume discounts. You pay based on the amount of data indexed by your Splunk instance on a daily basis, calculated in GB per day. We determine the total plan price by multiplying your desired daily index volume by the unit price per GB. For example, the unit price per GB decreases by more than 50% as total daily index volume grows from 1GB/day to 100 GB/day. A similar discount is applied if you opt for Infrastructure-based pricing with reduced price per SVC/vCPU as you scale up in your infrastructure purchase.

pricing chart

 

Can I buy an index volume not mentioned here?

Yes. You can buy any index volume from 1 GB/day to multiple terabytes of data per day. If you are looking for pricing at at a particular index volume, please contact us and we will get the pricing information to you.

 

What license types apply?

These pricing options apply to on-premises term licenses.

 

Do I have to make any change to my traditional Ingest Pricing?

Splunk now offers a number of different pricing options depending on an organization's needs. Traditionally, Splunk Enterprise has been priced by index volume. While this pricing still stands, qualifying customers now have the option to purchase via infrastructure-based pricing, which is determined by the amount of compute power assigned to a Splunk instance. This pricing model removes data limits and is similar to many in the industry. Additional alternatives, including our Predictive Pricing and Rapid Adoption package pricing may also be available. Contact us for more information or visit the Data-to-Everything Pricing updates page for more information.

 

Is support included in the price?

Yes, for term on-prem licenses, support is included in the license price. Splunk Enterprise’s support offerings include all major and minor software updates and customer support. You can find more information about Splunk Enterprise’s support offerings here.

 

What licensing options are available for Splunk Enterprise?

Splunk offers Term Licenses for Splunk Enterprise. A Term License is for a specific time period, usually a year, during which you are allowed to access and use the software. At the end of the term, you must stop using the software or purchase new licenses. Splunk also offers multi-year term license options for customers interested in a longer term commitment.

For the Annual (Term) License, the per unit price quoted above includes Standard support. If you renew your Annual (Term) License at the end of your license period, you will also get Standard support included.

If you previously purchased a Splunk Enterprise Perpetual License, please note that it requires an active support contract to receive future updates and enhancements. The first year of support was mandatory for the license purchase. To continue to receive support in subsequent years, you have the option to renew support.

 

Where can I find pricing for Splunk Premium Solutions, such as Splunk Enterprise Security or Splunk IT Service Intelligence?

Splunk Premium Solutions can be purchased along with Splunk Enterprise. You can learn more about each solution here:

Still have questions? Contact us.

*As of November 1, 2019, all Splunk products and services will feature term licenses. We will no longer sell any products with perpetual licenses. For more information click here.

How much can you save with Splunk?

Fastest Time: Data to Answers

Splunk Cloud

Can I try Splunk Cloud before I buy it?

Yes. Begin a free trial of Splunk Cloud here.

 

What Pricing Options Apply to Splunk Cloud?

Splunk offers a number of different pricing options depending on an organization’s needs. Available pricing options are Workload Pricing, Predictive Pricing Program, Ingest Pricing, Rapid Adoption Packages

 

What does the Workload-based pricing license metric “Number of SVCs” mean?

Under the Workload Pricing model, Splunk Cloud offers license allocation based on compute capacity, unlike ingest licensing which is based on data volume, measured in SVC units. Splunk Virtual Compute (SVC) is a unit of cloud compute, memory and I/O resources. Workload pricing is an industry standard and value oriented pricing option that can help align your Splunk investment with your search activity and provide the flexibility to bring data volume without ingest limits.

 

What does the license metric “Index Volume/Day” mean?

Ingest-based pricing model is based on how much data you send into Splunk Cloud in a day. We recommend that you purchase a subscription that aligns with the maximum amount of data you expect to send to Splunk in one day. With this pricing model, you pay once to index the data and then can perform unlimited searches against that data.

 

Do I get a volume discount if I buy a larger Splunk Cloud instance?

Yes. Splunk Cloud ingest-based pricing has built-in volume discounts. You pay based on the amount of data indexed by Splunk Cloud on a daily basis, calculated in GB/day. We determine the total plan price by multiplying your desired daily index volume by the unit price per GB. The unit price per GB decreases by more than 50% as total daily index volume grows from 5 GB/day to 100 GB/day and beyond.

 

What index volumes are available?

You can buy any index volume from 5 GB/day to multiple terabytes of data per day.  If you are looking for pricing at an index volume not shown here, please contact us and we will get the pricing information to you.

 

What License Types Apply?

This pricing option applies to cloud licenses.

 

Does the plan price include support?

Yes, Splunk Cloud pricing includes support. Splunk Cloud’s support offerings include all major and minor software updates and customer support. You can find more information about Splunk Enterprise’s support offerings here.

 

Can I buy more storage with Splunk Cloud?

Your Splunk Cloud annual subscription includes storage equivalent to 90 days of indexed data. If you need additional storage, please contact us.

 

Which regions will Splunk Cloud be available in?

Splunk Cloud is available in the following global regions:
US (Oregon, Virginia and GovCloud)
EU (Dublin, Frankfurt, London)
Asia Pacific (Singapore, Seoul, Sydney, Tokyo)
Canada (Central)

 

Where can I find Cloud pricing for Splunk Premium Solutions, such as Splunk Enterprise Security or Splunk IT Service Intelligence?

Splunk Premium Solutions can be purchased along with Splunk Cloud. You can learn more about each solution here:

Have more questions about Splunk Cloud?

Read the technical FAQs

Still have questions? Contact us.

We offer significant volume discounts

Collect, process, then deliver data to Splunk and other destinations

Splunk Data Stream Processor

What is Splunk Data Stream Processor?

Splunk Data Stream Processor (DSP) is a real-time stream processing solution that collects, processes and delivers data to Splunk or other destinations in milliseconds. The processing capability includes functions such as filtering, formatting, aggregating plus many more that allow customers to deliver rich, contextual data to analysts and other end users.

 

Can I try Splunk Data Stream Processor before I buy it?

Contact sales to learn how you can experience Splunk Data Stream Processor.

 

Can I buy Splunk Data Stream Processor as a standalone product?

Yes, you can buy Splunk Data Stream Processor as a standalone product. However, for the best experience we highly encourage using Splunk Enterprise with Splunk Data Stream Processor. The combination of Splunk Data Stream Processor and Splunk Enterprise allows you to combine the benefits of stream processing with Splunk Enterprise’s core ability to solve IT, security and business process use cases.

 

What is the license metric for Splunk Data Stream Processor and how does it work?

Splunk Data Stream Processor will follow our on-premises infrastructure- based pricing model and will be based on the amount of Virtual Central Processing Units (vCPUs). For DSP, the amount of vCPUs will be impacted by data volume, speed at which the customer needs to process data, and the level of processing that needs to be executed (e.g. filtering, formatting, aggregating, or routing).

 

What are the licensing options for Splunk Data Stream Processor?

Splunk solely offers Term Licenses for Splunk Data Stream Processor. A Term (Annual) License is for a specific time period, usually a year, during which you are allowed to access and use the software. At the end of the term, you must stop using the software or purchase new licenses. Splunk also offers multi-year term license options for customers interested in a longer term commitment.

 

Do I get a volume discount with the Splunk Data Stream Processor license?

Yes. Splunk Data Stream Processor has built-in volume discounts.

 

Does my plan price include support?

Yes, support is included in the license price.