The 2025 SaaS Trends Report:Uncover the top purchases, pricing trends, and AI's impact  
The 2025 SaaS Trends Report: Uncover the top SaaS purchases, pricing trends, and AI's impact on software buying
Vendr's purple icon logo
Sellers
About
Splunk
$9,097–$498,881per year
Fast, fair, easy pricing. No sales call required.
Marketplace
Categories
DevOps
Application Performance Monitoring (APM)
Splunk

Splunk

Splunk Inc. provides the leading platform for Operational Intelligence. Customers use Splunk to search, monitor, analyze and visualize machine data.

|Visit splunk.com

How much does Splunk cost?

Median buyer pays
$83,341
per year
Based on data from 144 purchases, with buyers saving 13% on average.
Median: $83,341
$9,097
$498,881
LowHigh
See detailed pricing for your specific purchase

About Splunk

Splunk Overview

Splunk Inc. provides the leading platform for Operational Intelligence. Customers use Splunk to search, monitor, analyze and visualize machine data.

Splunk's 11 Products

Splunk Application Performance Monitoring (APM) logo
Splunk Application Performance Monitoring (APM)

Splunk Application Performance Monitoring (APM) provides full-fidelity tracing and always-on profiling to enhance application performance, allowing organizations to keep their digital systems secure and reliable.

Splunk Attack Analyzer logo
Splunk Attack Analyzer

Automate threat analysis of suspected malware and credential phishing threats. Identify and extract associated forensics for accurate and timely detections.

Splunk Cloud logo
Splunk Cloud

Splunk Cloud is a cloud-powered platform for petabyte-scale data analytics, offering powerful insights and automation. It provides an array of solutions to ensure digital resilience and deliver innovative customer experiences.

Splunk Enterprise logo
Splunk Enterprise

Splunk Enterprise is a powerful data platform that provides expansive data access, analytics, and automation capabilities. It offers a range of products and solutions to help organizations keep their digital systems secure and reliable.

Splunk Enterprise Security logo
Splunk Enterprise Security

Splunk Enterprise Security is an analytics-driven SIEM that provides powerful insights to quickly detect and respond to potential threats, helping organizations keep their digital systems secure and reliable. It also offers a modern unified work surface for threat detection, investigation, and response.

Splunk Infrastructure Monitoring logo
Splunk Infrastructure Monitoring

Splunk Infrastructure Monitoring provides instant visibility and accurate alerts to improve hybrid cloud performance, enabling organizations to keep their digital systems secure and reliable.

Splunk Observability Cloud logo
Splunk Observability Cloud

Splunk Observability Cloud is a cloud-powered platform that provides petabyte-scale data analytics and insights for improved hybrid cloud performance. It provides advanced threat detection, security orchestration automation and response, and incident intelligence to ensure service performance.

Splunk On-Call logo
Splunk On-Call

Splunk On-Call is a powerful analytics and automation platform designed to help organizations access expansive data and keep their digital systems secure and reliable. It offers a unified work surface for threat detection, investigation and response, as well as incident intelligence and full visibility to ensure service performance.

Splunk Real User Monitoring (RUM) logo
Splunk Real User Monitoring (RUM)

Splunk Real User Monitoring (RUM) is a cloud-powered data platform designed to provide powerful analytics and automation for expansive data access. It is trusted by organizations around the world to help keep their digital systems secure and reliable.

Splunk SOAR logo
Splunk SOAR

Splunk SOAR is a security orchestration, automation, and response platform designed to supercharge your SOC. It provides analytics-driven SIEM to quickly detect and respond to threats, as well as one modern unified work surface for threat detection, investigation, and response.

Splunk Synthetic Monitoring logo
Splunk Synthetic Monitoring

Splunk Synthetic Monitoring offers powerful analytics and automation to help organizations access and analyze petabyte-scale data across the hybrid cloud. It also provides instant visibility and accurate alerts for improved hybrid cloud performance.

Compare prices for similar companies

Supplier
Splunk
AWS
Median Contract Value$83,341$2,300,000
Avg Savings13.25%10.17%

Security and compliance

DPA available
SOC2 attestation
Annual penetration tests

Negotiation insights

Discount levers
Success potential
What you can give to move the needle on pricing
RenewalsNew purchases
Multi-Year
yellow circle with white dashyellow circle with white dash
Case Study / Reference
red circle with arrow pointing downred circle with arrow pointing down
Expected Growth / Economies of Scale
green circle with white arrow pointing upgreen circle with white arrow pointing up
End of Quarter Signature
yellow circle with white dashgreen circle with white arrow pointing up
Quick Sales Process / Signature
yellow circle with white dashyellow circle with white dash
red circle with arrow pointing downLow chances of success
yellow circle with white dashMedium chances of success
green circle with white arrow pointing upHigh chances of success

Vendr community insights for Splunk

Company with 201-1000 employeesThis month
"Splunk's recent earnings reports show strong cloud revenue growth and a successful transition to a cloud-first model, with total ARR reaching $4.2 billion and cloud ARR reaching $2.186 billion, up 15% and 23% year-over-year, respectively. "
Company with 201-1000 employeesThis month
"We had an existing contract with Splunk but were consistently outpacing our Storage. We were able to leverage our growth of 200GB/day in both storage capacity and Enterprise Security to secure a ~46% discount on our unit price."
Company with 201-1000 employeesThis month
"We were able to secure a max 5% renewal price cap rather than Splunk's new standard increase table based on term length. This took much back and forth between legal teams and was helped by significant growth to our agreement as well."
Company with 201-1000 employeesThis year
"We added on the Splunk Attack Analyzer and got a 50% discount on the product. "
Company with 201-1000 employeesThis year
"They imposed a 7% uplift on our renewal for no functionality benefit. We fought back and cited budget restrictions to get it down to a 3.5% uplift. "
Company with 201-1000 employeesThis year
"Splunk has a standard uplift fee of 9%, we were able to counter back and push on competition and got it down to 4% without growth. We leveraged that our team makes us open an RFP when anything is over 3% in uplift. "
Company with 201-1000 employeesThis year
"When dealing with workload-based pricing, it's essential to negotiate your SVC limits with your Splunk sales representative. Users have reported that their actual usage is significantly lower than the allocated SVCs, leading to potential overpayment. It's important to understand that you are billed based on your SVC limit rather than actual usage, so negotiating a lower limit could result in cost savings"
Company with 201-1000 employeesThis year
"To reduce SVC usage, optimizing search performance is critical. This includes disabling unused scheduled searches, switching to summary indexes, truncating unneeded events before indexing, and staggering the times of scheduled searches. Tools like the Cloud Monitoring Console and the Chargeback App can help identify inefficient searches that consume excessive SVCs. Additionally, ensuring that searches are well-defined and avoiding wildcard searches can significantly reduce SVC consumption"
Company with 201-1000 employeesThis year
"Many users find SVC pricing challenging due to its complexity and difficulty in forecasting utilization. The model is more transparent for cloud users as it directly correlates with compute power provisioned. However, for those running numerous searches, the unpredictability of user behavior can lead to unexpected costs"
Company with 201-1000 employeesThis year
"Splunk is transitioning from volume-based licensing to workload-based models, especially for those ingesting more than 200 GB per day. This shift means that administration will now focus on managing compute resources rather than data volumes. While this model may simplify billing for small or low-usage environments, it can be detrimental for high-performance applications like Enterprise Security, where search activity is intensive"
Company with 201-1000 employeesThis year
"We looked at ELK, Humio, and Devo as alternatives to Splunk "
Company with 201-1000 employeesThis year
"It's crucial to define your use case clearly before engaging with Splunk or any other SIEM solution. Different solutions may be better suited for different scenarios. For example, some users have found that while Splunk is excellent for certain types of data analysis and security monitoring, other tools like Elastic or DataDog might be more cost-effective depending on the specific requirements. Understanding your organization's needs will help you make a more informed decision and potentially save costs. "
Company with 201-1000 employeesThis year
"Splunk offers the best discounting in Jan at their fiscal year end"
Company with 201-1000 employeesThis year
"When renewing through AWS we were quoted on Splunk's old price book and able to take advantage of renewing without their new increased pricing."
Company with 201-1000 employeesThis year
"Splunk is holding firm on their newly implemented YoY price increases but they have some flexibility for early renewals. "
Company with 201-1000 employeesThis year
"We were able to secure pricing of $5,239 which was down from the original $5,886 by purchasing via a different seller, AWS marketplace. We confirmed that the current scope was correct and moved quickly through reviews to secure the discounted offer."
Company with 201-1000 employeesThis year
"In our renewal discussion with Splunk we aimed to maintain status quo for Enterprise- Team licenses and renew flat. Splunk communicated that they had a price increase this year and moving forward all renewals will have a ~9% uplift for 12 month commitments, 7% for 24 months and 5% for 36 months We successfully pushed back on the uplift citing lack of notice and budget constraints in order to renew for 12 months with a reduce ~5.8% uplift. "
Company with 201-1000 employeesThis year
"We grew from 30 to 60 seats for Splunk On Call Enterprise upon renewal. We were paying $299 per seat and they automatically dropped us to $285. We made an additional push and got to $270 simply by asking for deeper discounts because of our growth. "
Company with 201-1000 employeesThis year
"We didn't have favorable pricing on our SVCs and Data Storage pricing so we pushed on the per unit pricing so we could best scale with Splunk in the future. We got a really good discount but had to add on the their observability tool to get to where we wanted to get to. This didn't change our total contract value too significantly but it helped with our price per unit economics. "
Company with 201-1000 employeesA while ago
"Upon our renewal Splunk had significantly reduced our discounting. We were able to work with them to maintain the same unit costs and implement a 3.5% max uplift. "
Company with 201-1000 employeesA while ago
"Cisco acquired Splunk for $28 billion on 9/21 https://investor.cisco.com/news/news-details/2023/Cisco-to-Acquire-Splunk-to-Help-Make-Organizations-More-Secure-and-Resilient-in-an-AI-Powered-World/default.aspx"
Company with 201-1000 employeesA while ago
"Splunk would not remove 9% price cap language after escalating to a Sales Director, this was the response: "The messaging Splunk provides is that each contract is still negotiated individually and that these caps are only the maximum Splunk can offer as a renewal increase. What I have been able to get approved is to reduce that cap amount. Of course you can also secure pricing through longer term agreements. I wish I could offer you something more. But in reality, even if we remove that language Splunk still can effectively increase your renewal by the same amount (9%) or more as each agreement is negotiable. So by removing this language you're offered even less protection.""
Company with 201-1000 employeesA while ago
"We were able to secure a 5% renewal cap, Net60 payment terms, and removal of auto renew on a new purchase. "
Company with 201-1000 employeesA while ago
"We were able to secure a 40% discount on a new purchase based on firm budget and quick movement, protecting the discount originally offered for a larger scope."
Company with 201-1000 employeesA while ago
"We got Splunk down from 38% to 50% discount at the end of the quarter on a $400K 1 year deal, net new. "
Company with 201-1000 employeesA while ago
"Splunk has a per Ingest Model and a newer workload/SVC model. Reps are incentivized to push companies towards the SVC model which is typically only for companies at $250K+ ARR and can be significantly cheaper. A disadvantage of the SVC model is they tell you that you have unlimited compute but they actually throttle this to make it slower during busy periods which was a deal breaker for us. They will use this as a bargaining chip for higher volume accounts at $1M+ ARR (I've seen this at past companies). This is essentially like unlimited phone plans that will diminish service during busy periods. "
Company with 201-1000 employeesA while ago
"Splunk has been in the process over the past year of moving higher spend customers from an ingest per day model to a SVC model. The ingest per day model is measured by all data sent to Splunk while the SVC measures specific workloads, with the goal of billing based on the highest value use case, so what we're paying Splunk matches the value better. Splunk reps are incentivized to move customers to the SVC model, so it's important to negotiate heavily when the switch is initially made. We've seen $2,500-$7,750 per SVC. This can usually be done by stalling the upgrade until EOQ or end of Fiscal (1/31) and turning around a quick signature for a last ditch offer. "
Company with 1-200 employeesA while ago
"We got a 14% discount on a 3 year term by agreeing to a quick turnaround on signatures ahead of the end of the year."
Company with 201-1000 employeesA while ago
"Purchasing through reseller like CDW may help with discounting."
Company with 1-200 employeesA while ago
"Splunk suggested they don't support redlines for contracts under $100k, but we pushed back and were able to secure a 5% cap on renewal as well as NET45 payment terms."
Company with 1-200 employeesA while ago
"Since Splunk wasn't particularly flexible with payment terms, we ended up doing a 7 month renewal to better manage our cash."
Company with 1-200 employeesA while ago
"We were able to negotiate a 6 month extension by pointing to the fact that the renewal would be more intricate due to an acquisition."

About Vendr

How can Vendr help me?

Vendr guarantees a low cost for software, no sales calls needed.
calculator
Price EstimatesShare your purchase details for personalized price ranges.
price tags
Price ChecksWondering if you're getting a fair price? Upload your quote or contract to find out.

Vendr FAQs

AI Quote Analysis

Upload your quote to check if you’re getting a fair price, under 2 minutes and completely free.Chart showing an example of a price range
Chart showing an example of a price range

Other companies you might be interested in

AWS
Axiom
Coralogix
Datadog