Splunk
$9,097–$498,881per year
Fast, fair, easy pricing. No sales call required.
How much does Splunk cost?
Median buyer pays
$83,341
Based on data from 144 purchases, with buyers saving 13% on average.per year
Median: $83,341
$9,097$498,881
LowHigh
See detailed pricing for your specific purchase
About Splunk
Splunk Overview
Splunk Inc. provides the leading platform for Operational Intelligence. Customers use Splunk to search, monitor, analyze and visualize machine data.
Splunk's 11 Products
Splunk Application Performance Monitoring (APM) provides full-fidelity tracing and always-on profiling to enhance application performance, allowing organizations to keep their digital systems secure and reliable.
Automate threat analysis of suspected malware and credential phishing threats. Identify and extract associated forensics for accurate and timely detections.
Splunk Cloud is a cloud-powered platform for petabyte-scale data analytics, offering powerful insights and automation. It provides an array of solutions to ensure digital resilience and deliver innovative customer experiences.
Splunk Enterprise is a powerful data platform that provides expansive data access, analytics, and automation capabilities. It offers a range of products and solutions to help organizations keep their digital systems secure and reliable.
Splunk Enterprise Security is an analytics-driven SIEM that provides powerful insights to quickly detect and respond to potential threats, helping organizations keep their digital systems secure and reliable. It also offers a modern unified work surface for threat detection, investigation, and response.
Splunk Infrastructure Monitoring provides instant visibility and accurate alerts to improve hybrid cloud performance, enabling organizations to keep their digital systems secure and reliable.
Splunk Observability Cloud is a cloud-powered platform that provides petabyte-scale data analytics and insights for improved hybrid cloud performance. It provides advanced threat detection, security orchestration automation and response, and incident intelligence to ensure service performance.
Splunk On-Call is a powerful analytics and automation platform designed to help organizations access expansive data and keep their digital systems secure and reliable. It offers a unified work surface for threat detection, investigation and response, as well as incident intelligence and full visibility to ensure service performance.
Splunk Real User Monitoring (RUM) is a cloud-powered data platform designed to provide powerful analytics and automation for expansive data access. It is trusted by organizations around the world to help keep their digital systems secure and reliable.
Splunk SOAR is a security orchestration, automation, and response platform designed to supercharge your SOC. It provides analytics-driven SIEM to quickly detect and respond to threats, as well as one modern unified work surface for threat detection, investigation, and response.
Splunk Synthetic Monitoring offers powerful analytics and automation to help organizations access and analyze petabyte-scale data across the hybrid cloud. It also provides instant visibility and accurate alerts for improved hybrid cloud performance.
Compare prices for similar companies
| Supplier | Splunk | AWS |
|---|---|---|
| Median Contract Value | $83,341 | $2,300,000 |
| Avg Savings | 13.25% | 10.17% |
Security and compliance
DPA available
SOC2 attestation
Annual penetration tests
Negotiation insights
Discount levers
Success potential
What you can give to move the needle on pricing
RenewalsNew purchases
Low chances of successMedium chances of successHigh chances of successVendr community insights for Splunk
Company with 201-1000 employeesThis month
"Splunk's recent earnings reports show strong cloud revenue growth and a successful transition to a cloud-first model, with total ARR reaching $4.2 billion and cloud ARR reaching $2.186 billion, up 15% and 23% year-over-year, respectively.
"Company with 201-1000 employeesThis month
"We had an existing contract with Splunk but were consistently outpacing our Storage. We were able to leverage our growth of 200GB/day in both storage capacity and Enterprise Security to secure a ~46% discount on our unit price."Company with 201-1000 employeesThis month
"We were able to secure a max 5% renewal price cap rather than Splunk's new standard increase table based on term length. This took much back and forth between legal teams and was helped by significant growth to our agreement as well."Company with 201-1000 employeesThis year
"We added on the Splunk Attack Analyzer and got a 50% discount on the product. "Company with 201-1000 employeesThis year
"They imposed a 7% uplift on our renewal for no functionality benefit. We fought back and cited budget restrictions to get it down to a 3.5% uplift. "Company with 201-1000 employeesThis year
"Splunk has a standard uplift fee of 9%, we were able to counter back and push on competition and got it down to 4% without growth. We leveraged that our team makes us open an RFP when anything is over 3% in uplift. "Company with 201-1000 employeesThis year
"When dealing with workload-based pricing, it's essential to negotiate your SVC limits with your Splunk sales representative. Users have reported that their actual usage is significantly lower than the allocated SVCs, leading to potential overpayment. It's important to understand that you are billed based on your SVC limit rather than actual usage, so negotiating a lower limit could result in cost savings"Company with 201-1000 employeesThis year
"To reduce SVC usage, optimizing search performance is critical. This includes disabling unused scheduled searches, switching to summary indexes, truncating unneeded events before indexing, and staggering the times of scheduled searches. Tools like the Cloud Monitoring Console and the Chargeback App can help identify inefficient searches that consume excessive SVCs. Additionally, ensuring that searches are well-defined and avoiding wildcard searches can significantly reduce SVC consumption"Company with 201-1000 employeesThis year
"Many users find SVC pricing challenging due to its complexity and difficulty in forecasting utilization. The model is more transparent for cloud users as it directly correlates with compute power provisioned. However, for those running numerous searches, the unpredictability of user behavior can lead to unexpected costs"Company with 201-1000 employeesThis year
"Splunk is transitioning from volume-based licensing to workload-based models, especially for those ingesting more than 200 GB per day. This shift means that administration will now focus on managing compute resources rather than data volumes. While this model may simplify billing for small or low-usage environments, it can be detrimental for high-performance applications like Enterprise Security, where search activity is intensive"Company with 201-1000 employeesThis year
"We looked at ELK, Humio, and Devo as alternatives to Splunk "Company with 201-1000 employeesThis year
"It's crucial to define your use case clearly before engaging with Splunk or any other SIEM solution. Different solutions may be better suited for different scenarios. For example, some users have found that while Splunk is excellent for certain types of data analysis and security monitoring, other tools like Elastic or DataDog might be more cost-effective depending on the specific requirements. Understanding your organization's needs will help you make a more informed decision and potentially save costs.
"Company with 201-1000 employeesThis year
"Splunk offers the best discounting in Jan at their fiscal year end"Company with 201-1000 employeesThis year
"When renewing through AWS we were quoted on Splunk's old price book and able to take advantage of renewing without their new increased pricing."Company with 201-1000 employeesThis year
"Splunk is holding firm on their newly implemented YoY price increases but they have some flexibility for early renewals. "Company with 201-1000 employeesThis year
"We were able to secure pricing of $5,239 which was down from the original $5,886 by purchasing via a different seller, AWS marketplace. We confirmed that the current scope was correct and moved quickly through reviews to secure the discounted offer."Company with 201-1000 employeesThis year
"In our renewal discussion with Splunk we aimed to maintain status quo for Enterprise- Team licenses and renew flat. Splunk communicated that they had a price increase this year and moving forward all renewals will have a ~9% uplift for 12 month commitments, 7% for 24 months and 5% for 36 months We successfully pushed back on the uplift citing lack of notice and budget constraints in order to renew for 12 months with a reduce ~5.8% uplift. "Company with 201-1000 employeesThis year
"We grew from 30 to 60 seats for Splunk On Call Enterprise upon renewal. We were paying $299 per seat and they automatically dropped us to $285. We made an additional push and got to $270 simply by asking for deeper discounts because of our growth. "Company with 201-1000 employeesThis year
"We didn't have favorable pricing on our SVCs and Data Storage pricing so we pushed on the per unit pricing so we could best scale with Splunk in the future. We got a really good discount but had to add on the their observability tool to get to where we wanted to get to. This didn't change our total contract value too significantly but it helped with our price per unit economics. "Company with 201-1000 employeesA while ago
"Upon our renewal Splunk had significantly reduced our discounting. We were able to work with them to maintain the same unit costs and implement a 3.5% max uplift. "Company with 201-1000 employeesA while ago
"Cisco acquired Splunk for $28 billion on 9/21 https://investor.cisco.com/news/news-details/2023/Cisco-to-Acquire-Splunk-to-Help-Make-Organizations-More-Secure-and-Resilient-in-an-AI-Powered-World/default.aspx"Company with 201-1000 employeesA while ago
"Splunk would not remove 9% price cap language after escalating to a Sales Director, this was the response: "The messaging Splunk provides is that each contract is still negotiated individually and that these caps are only the maximum Splunk can offer as a renewal increase. What I have been able to get approved is to reduce that cap amount. Of course you can also secure pricing through longer term agreements.
I wish I could offer you something more. But in reality, even if we remove that language Splunk still can effectively increase your renewal by the same amount (9%) or more as each agreement is negotiable. So by removing this language you're offered even less protection.""Company with 201-1000 employeesA while ago
"We were able to secure a 5% renewal cap, Net60 payment terms, and removal of auto renew on a new purchase. "Company with 201-1000 employeesA while ago
"We were able to secure a 40% discount on a new purchase based on firm budget and quick movement, protecting the discount originally offered for a larger scope."Company with 201-1000 employeesA while ago
"We got Splunk down from 38% to 50% discount at the end of the quarter on a $400K 1 year deal, net new. "Company with 201-1000 employeesA while ago
"Splunk has a per Ingest Model and a newer workload/SVC model. Reps are incentivized to push companies towards the SVC model which is typically only for companies at $250K+ ARR and can be significantly cheaper. A disadvantage of the SVC model is they tell you that you have unlimited compute but they actually throttle this to make it slower during busy periods which was a deal breaker for us. They will use this as a bargaining chip for higher volume accounts at $1M+ ARR (I've seen this at past companies). This is essentially like unlimited phone plans that will diminish service during busy periods. "Company with 201-1000 employeesA while ago
"Splunk has been in the process over the past year of moving higher spend customers from an ingest per day model to a SVC model. The ingest per day model is measured by all data sent to Splunk while the SVC measures specific workloads, with the goal of billing based on the highest value use case, so what we're paying Splunk matches the value better.
Splunk reps are incentivized to move customers to the SVC model, so it's important to negotiate heavily when the switch is initially made. We've seen $2,500-$7,750 per SVC. This can usually be done by stalling the upgrade until EOQ or end of Fiscal (1/31) and turning around a quick signature for a last ditch offer. "Company with 1-200 employeesA while ago
"We got a 14% discount on a 3 year term by agreeing to a quick turnaround on signatures ahead of the end of the year."Company with 201-1000 employeesA while ago
"Purchasing through reseller like CDW may help with discounting."Company with 1-200 employeesA while ago
"Splunk suggested they don't support redlines for contracts under $100k, but we pushed back and were able to secure a 5% cap on renewal as well as NET45 payment terms."Company with 1-200 employeesA while ago
"Since Splunk wasn't particularly flexible with payment terms, we ended up doing a 7 month renewal to better manage our cash."Company with 1-200 employeesA while ago
"We were able to negotiate a 6 month extension by pointing to the fact that the renewal would be more intricate due to an acquisition."About Vendr
How can Vendr help me?
Vendr guarantees a low cost for software, no sales calls needed.
Vendr FAQs
AI Quote Analysis
Upload your quote to check if you’re getting a fair price, under 2 minutes and completely free.