Splunk

Splunk provides enterprise data and analytics products for security, observability, IT operations, and related workflows. Splunk Platform and Splunk Cloud ingest and search machine data, while Enterprise Security, SOAR, Observability Cloud, IT Service Intelligence, and AppDynamics support security operations, application monitoring, incident response, and service management. Splunk AI adds assistants and analytics to supported workflows. Deployment and pricing vary across cloud, hybrid, on-premises, and air-gapped environments; the official pricing model includes workload, ingest, entity, and Cloud Flex options. This is an enterprise platform, not a generic AI agent.

✨ Key Features

• Machine-data ingestion — Collect logs, metrics, traces, and events from infrastructure and applications.
• Search and investigation — Query data to investigate operational and security signals.
• Dashboards and analytics — Turn machine data into operational views and insights.
• Enterprise Security — Support threat detection, investigation, and security operations.
• SOAR workflows — Automate supported security response processes.
• Observability Cloud — Monitor infrastructure, applications, real users, and services.
• IT Service Intelligence — Connect service health with business impact and operations.
• AppDynamics — Monitor application performance and dependencies.
• AI Assistant and ML tools — Use supported generative and machine-learning capabilities.
• Cloud Flex — Combine eligible Platform, Security, Observability, AI, storage, and federated-search products.
• Flexible deployment — Support cloud, hybrid, on-premises, and air-gapped requirements.
• Governance and security — Apply enterprise access, data, and compliance controls.

💳 Pricing

• Platform — Workload or data-ingest pricing depending on the product and deployment.

• Security/Observability — Entity, usage, session, metric time-series, or product-specific models.

• Cloud Flex — Flexible consumption across eligible Splunk products.

• Enterprise — Contact sales for large-scale, private, hybrid, or air-gapped deployments.

• Observability examples (1 October 2026) — Annual billing: Infrastructure Monitoring starts at $15/host/month, App & Infra at $60/host/month, and End-to-End at $75/host/month. AppDynamics Infrastructure Monitoring starts at $6/vCPU/month. These are separate product rates, not a universal Splunk subscription.

• Observability Cloud Free Edition — Ongoing access for up to 15 hosts, with no time-limited trial. This free edition does not make all Splunk security or platform products free.

⚖️ Alternatives Compared

🎯 Use Cases

• Security operations: Detect, investigate, and respond to threats.
• Log analytics: Search and correlate machine data across systems.
• Application monitoring: Diagnose performance and dependency problems.
• Incident response: Automate and coordinate operational or security response.
• Service health: Link technical signals to service-level and business impact.
• Cloud observability: Monitor infrastructure, applications, and real users.
• Compliance investigations: Retain and search evidence under enterprise controls.
• Hybrid operations: Analyze data across cloud, on-premises, or air-gapped environments.