Logs & Observability · Reviewed 27 Oct 2026

Splunk

Unified data platform for security, observability, and AI at scale.

from $13.75 · free tier · splunk.com ↗

Paid against free › Logs & Observability › Splunk

Splunk at a glance

Overview

01

Summary

The useful answer before the supporting detail.

Splunk is a data platform that unifies security, observability, and AI at petabyte scale S1. It is used by security operations, IT, and engineering teams to detect and respond to threats, monitor applications and infrastructure, and leverage AI with trusted data S1. The platform provides cross-domain context and keeps telemetry where it lives, reducing costs and enabling faster remediation S1.

02

Product identity and positioning

Name, category, positioning, audience, and first-party claims.

  • Identity: Splunk, a data platform for security, observability, and AI S1.
  • Core purpose: Unify machine data to enable threat detection, monitoring, and AI S1.
  • Intended users: Security operations, IT, and engineering teams S1.
  • Product scope: A unified platform with security, observability, and AI capabilities S1.
  • Positioning: The data platform for trusted AI at scale S1.
  • Claimed distinction: Recognized as a leader by global analyst firms S1.
03

Use cases and audiences

Who the product serves and the jobs it is designed to handle.

AudiencePractical use case
Security operations teamsDetect, investigate, and respond to threats with SIEM and SOAR S1 S51.
IT operations teamsMonitor infrastructure and cloud services to ensure uptime and performance S1 S51.
Financial institutionsDetect and investigate fraud and financial crime using data aggregation and machine learning S150.
Healthcare organizationsImprove patient and business outcomes through data-driven solutions S144.
Platform engineersBuild observable platforms by integrating observability into platform engineering S146.

Features

09

Features and capabilities

Core functions and evidence-backed product capabilities.

CapabilityWhat it does
Security Information and Event Management (SIEM)Provides comprehensive visibility, accurate detections, and operational efficiency across security operations S51.
ObservabilityOffers instant insight into applications, cloud data, infrastructure, and advanced analytics for faster detection and resolution S1.
AI capabilitiesEmbeds AI across threat detection, investigation, and response workflows S51.
Data managementSearch and analyze data where it lives to reduce costs S1.
IntegrationsConnect and act on data with integrations and apps on Splunkbase, including OpenTelemetry support, SDKs, and agents S1.
SOARAutomates security workflows, reducing manual effort and response times S51.
Threat IntelligenceIntegrates threat intelligence enrichment, including Cisco Talos, at no additional cost S51.
10

Integrations and ecosystem

Connected products, exports, APIs, and workflow compatibility.

Integration or interfaceTypeWhat it enables
SplunkbaseIntegration marketplaceConnect and act on data with integrations and apps across cloud, SaaS, IT, and machine data S1.
OpenTelemetryIntegrationInstrument applications with native OpenTelemetry support S1.
SDKs and agentsSDKInstrument applications with SDKs and agents S1.
Cisco TalosIntegrationLeverage threat intelligence enrichment at no additional cost S51.
Google MarketplaceIntegrationAvailable for purchase or deployment via Google Marketplace S51.
IT service management integrationsIntegrationIntegrates with 100+ IT service management tools S51.

Pricing

11

Pricing and plans

Published plans, free access, trials, credits, and pricing limitations.

Plan or offerVerified price and billingIncludedLimits
Observability Cloud — Infrastructure$15 per host per month, billed annually S46Log Observer Connect reads logs stored in the Splunk platform S46Not published S46
Observability Cloud — App & Infra$60 per host per month, billed annually S46Adds APM and synthetic API monitoring S46Not published S46
Observability Cloud — End-to-End$75 per host per month, billed annually S46Adds real user and browser monitoring S46Not published S46
Splunk Cloud PlatformContact sales S46Activity-based, ingest or workload pricing S46Not published S46
Splunk EnterpriseContact sales S46Ingest or workload pricing S46Self-managed, private cloud or on-premises S46
Application Security$13.75 per month, per CPU core, billed annually S51Not establishedNot established
Free tierFree edition offered for Observability Cloud S46Not establishedLimits not stated S46

Competition

12

Competitive landscape

Domains competing for the same organic search demand.

Sampled competitors

CompetitorFirst-page appearancesSampled queriesAverage positionQueries observed
reddit.com2259 nines, advanced analytics software
store.steampowered.com1119 nines
tellius.com111advanced analytics software
ninesnyc.com1129 nines
sigmacomputing.com112advanced analytics software
en.wikipedia.org1139 nines
instagram.com1149 nines
revelate.co114advanced analytics software
steamcommunity.com1159 nines
gartner.com115advanced analytics software

Website intelligence — Collected evidence

Customers, testimonials, and first-party review claims

No supporting public-page evidence was collected for this category.

Independent review sources discovered

Website intelligence — Scout synthesis

First-party claims:

  • Splunk claims to be ranked first in every use case in the 2025 Gartner Critical Capabilities for SIEM report W104.
  • The report assessed SIEM capabilities for three use cases: Out-of-the-Box SIEM, Customizable SIEM, and Threat Detection, Investigation, and Response W104.
  • Splunk Enterprise Security is described as an "industry-defining SIEM and security analytics solution" W109.

Scout inference:

  • The site leverages third-party recognition to differentiate from competitors in the SIEM market W103W104.
13

AI visibility

Measured ChatGPT and Google AI mentions with cited sources.

AI-assistant referral traffic

  • Estimated current generative-AI referral share: 1.5%
MonthSource
—All AI assistants
—All AI assistants
—All AI assistants

Website intelligence — Collected evidence

Site-stated AI capabilities

Page typeEvidenceSource
featuresUnify security and observability at petabyte scale on the Splunk data platform for trusted AI. Stop threats and prevent downtime at machine speed.https://www.splunk.com/
featuresGet cross-domain context for security, observability, and AI on the unified platform that keeps telemetry where it lives.https://www.splunk.com/
featuresThe data platform for trusted AI at scalehttps://www.splunk.com/
featuresSplunk unifies petabyte-scale machine data — wherever it lives — for security, observability, and trusted AI.https://www.splunk.com/
featuresSearch and analyze data where it lives to reduce costs. Give your teams and AI real-time context across domains to power resilient, agentic operations with custom AI.https://www.splunk.com/
featuresAI for security and observabilityhttps://www.splunk.com/
featuresPreserve full access and context for AI and analytics without the ingest tax or unnecessary data movement. Process, route, and search telemetry where it lives — at petabyte scale.https://www.splunk.com/
featuresSplunk Enterprise Security is an industry-defining SIEM and security analytics solution trusted by SOCs around the globe. Its powerful capabilities enable you to realize comprehensive visibility, empower accurate detection with context, and fuel operational efficiency. A platform powered by AI capabilities ensures analytics at scale for continuous security monitoring and helps ensure cost-effective data optimization. This foundation enables you to detect what matters, investigate holistically, and respond rapidly.https://www.splunk.com/en_us/form/gartner-critical-capabilities-siem.html
featuresStep into a new era of security with Splunk Enterprise Security, the leading AI-powered SecOps platform designed to end analyst fatigue, deliver faster security outcomes, and build resilience against today's most sophisticated threats.https://www.splunk.com/en_us/form/splunk-enterprise-security-premier-product-tour.html
featuresGet cross-domain context for security, observability, and AI on the unified platform that keeps telemetry where it lives.https://www.splunk.com/
featuresPowered by the Galileo acquisition. Observe and secure AI agents, models, and infrastructure.https://www.splunk.com/
featuresThe data platform for trusted AI at scalehttps://www.splunk.com/
featuresSplunk unifies petabyte-scale machine data — wherever it lives — for security, observability, and trusted AI.https://www.splunk.com/
featuresSearch and analyze data where it lives to reduce costs. Give your teams and AI real-time context across domains to power resilient, agentic operations with custom AI.https://www.splunk.com/
featuresDetect every attack and respond autonomously. Outpace AI threats with trusted, governed defense with experts in the loop. Mitigate any vulnerability across any attack surface.https://www.splunk.com/
featuresOptimize AI at scalehttps://www.splunk.com/
featuresMaximize infrastructure resilience. Evaluate and govern agent behavior, optimize AI tokenomics, and troubleshoot autonomously to prevent downtime.https://www.splunk.com/
featuresAI for security and observabilityhttps://www.splunk.com/
featuresThe Splunk Fraud and Crime Outcome Brief details how financial institutions can leverage Splunk's advanced data aggregation and machine learning capabilities to detect, investigate, and respond to financial fraud and crime. By gaining comprehensive visibility into anomalies and potential threats, organizations can reduce fraud risks, protect customer data, and improve operational efficiency.https://www.splunk.com/en_us/form/combat-financial-fraud-and-crime-with-splunk-data-driven-solutions.html
featuresImprove operational efficiency with advanced data analytics and machine learning.https://www.splunk.com/en_us/form/combat-financial-fraud-and-crime-with-splunk-data-driven-solutions.html

These are first-party product claims, not independent measurements of AI-search visibility.

Website intelligence — Scout synthesis

First-party claims:

  • The homepage emphasizes AI capabilities: "Turn data into agentic action" and "power resilient, agentic operations with custom AI" W19W20.
  • The platform page mentions "unlock machine data for model training and agentic action" W192.
  • Splunk Agent Observability is introduced as a new product to "Observe and secure AI agents, models, and infrastructure" W13W14.
  • The platform page includes a section on Artificial Intelligence W179.

Scout inference:

  • AI-related keywords and messaging are prominent across the site, likely targeting AI-driven search queries W17W19W191.
14

Marketing opportunities

Actions calculated directly from the collected evidence.

OpportunityRecommended actionEvidence
Competitor gap2 first-page appearances across 9 nines, advanced analytics software

Website intelligence — Collected evidence

Website evidence gaps

  • integrations: no usable public page was collected; verify whether the site publishes this evidence.
  • customers: no usable public page was collected; verify whether the site publishes this evidence.
  • reviews: no usable public page was collected; verify whether the site publishes this evidence.
  • changes: no usable public page was collected; verify whether the site publishes this evidence.
  • identity: no usable public page was collected; verify whether the site publishes this evidence.
  • technical: no usable public page was collected; verify whether the site publishes this evidence.

Website intelligence — Scout synthesis

First-party claims:

  • The site offers multiple free trials and downloads: Splunk Cloud Platform free trial (14 days, no credit card) W232, Splunk Enterprise free trial W47, and general downloads W12.
  • Interactive product tours are available for the cloud platform and enterprise security W121W145.
  • The pricing page highlights cost-saving features like Ingest and Edge Processors, Federated Search, and Cloud Flex W35.
  • The Gartner report form is a lead-generation asset W97.

Scout inference:

  • The site uses trials, tours, and gated content to capture leads and drive product adoption W11W12W43W47W232W233.

Trust and proof

15

Customers, proof, and reviews

Published proof, customer signals, and review evidence.

Independent reviews

PlatformPageHow it was foundNote
G2 / Gartner Peer InsightsSplunk Product Reviews & Ratings - Enterprise, Cloud & ES / SplunkGrounded web searchSo, take a look at what these three products deliver to users. We’ll break down reviews from top software review platforms on what users think about these products. We draw insights from G2, TrustRadius, PeerSpot and Gartner Peer Insights™, all trusted software review platforms, to highlight what customers love about these Splunk products. ... ### G2 review of Splunk Enterprise ... G2 also shows that Splunk has an above-average rating of 4.3 out of 5, from the 410 reviews of the product. Most re
Gartner Peer InsightsCisco Systems (Splunk) Reviews, Ratings & Features 2026 / Gartner Peer InsightsGrounded web searchGartner or its affiliates. Gartner does not endorse any vendor, product or service ... , about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.
CapterraSplunk Enterprise Pricing, Cost & Reviews - Capterra UK 2026Grounded web search### Overall rating Based on 267 reviews 4.6 ### Reviews sentiment Positive 95% Neutral 5% Negative 0% ... Splunk is a great Log streaming and Analytics tool. Could do better if ... as a holistic Observability platform for all needs, with focus
TrustRadiusOur Outcomes from Using Splunk ES / TrustRadiusGrounded web search20 client environments, each with different infrastructures and compliance needs. The main challenge it addresses is ... , our SOC relied on separate SIEM tools for certain customers, which meant fragmented investigations and duplicated alerts. Now Splunk
G2Compare Datadog and Splunk Enterprise Social Share OptionsGrounded web searchfor quick response Splunk Enterprise(419)4.3 out of 5Splunk Enterprise By Cisco ... all 3 pricing plans Splunk Enterprise Star Rating (419) 4.3 out of 5 Market Segments Enterprise (65.4% of reviews) Entry-Level Pricing No pricing available
G2Compare Microsoft Sentinel and Splunk Enterprise Security Social Share OptionsGrounded web searchMicrosoft Sentinel(289)4.4 out of 5Microsoft Sentinel By Microsoft Splunk Enterprise Security(222)4.3 out of 5Splunk Enterprise Security By Cisco ... Splunk Enterprise Security Star Rating (222) 4.3 out of 5 Market Segments Enterprise (62.1% of
G2Compare Better Stack and Splunk Enterprise Social Share OptionsGrounded web searchBetter Stack(273)4.9 out of 5Better Stack By Better Stack Try for free Splunk Enterprise(419)4.3 out of 5Splunk Enterprise By Cisco ... Better Stack Star Rating (273) 4.9 out of 5 Market Segments Small-Business (92.4% of reviews)

Customer proof

Proof typeNamed customer or sourceEvidence
TestimonialChildren's National Hospitaltestimonial — By bringing all that valuable telemetry into the Splunk environment, we gain the visibility needed to protect data, no matter where it lives. (Customers / Splunk)
Case study2C2Pcustomer case study — To simplify processes, 2C2P needed an automated log analytics solution that could replace its laborious manual processes while providing full-stack visibility into operations across its AWS Cloud environment, distribu… (2C2P / Customer Success / Splunk)
Case studyMolina Healthcarecustomer case study — ## Outcomes 63% reduction in Molina’s MTTR 1/5 the number of IT incidents after using Splunk 4.2M individuals benefiting from better healthcare services, thanks to Molina’s ability to mine data and understand trends (Molina Healthcare / Customer Success / Splunk)

External links were grounded in one live web search. Search snippets are leads, not independently scraped page content; rejected links remain available in Review evidence.

16

Company, security, and trust

Ownership, policies, security signals, and public trust evidence.

SignalFindingSource
Company and ownershipFrom defending against cyber threats to scaling business performance, Splunk is with you every step of the way. Have questions? Reach out to our team.source
Contact and support/ Pinpoint and resolve slow queriesDatabase Monitoring / Optional add-on. Contact us to learn more. /source
Legal and privacyNot published on the collected pages.—
Security and complianceData Encryption Methods and Typessource
Uptime and status pageWith Splunk, Singapore Airlines can now find and fix issues faster — maximizing service uptime, optimizing customer experience, and keeping the brand’s reputation sky-high.source
Domain registered2001-12-07—
Domain expires2026-12-07—

Not found on the collected pages: legal and privacy. This only means Scout did not find it on the pages it read; it says nothing about the company itself.

17

Documentation and product updates

Help resources, product guidance, and visible changes over time.

Resource or updateTypeWhat is availableDate or freshness
Product FAQFAQAnswers common product, workflow, pricing, privacy, ownership, API, and team questions. (source)Not dated

Not found in the collected public sources: public roadmap, changelog or release notes, status page, separate help center or knowledge base.

Technical

18

Technical and delivery signals

Delivery model, platforms, API, data ownership, reliability claims and release activity.

SignalFindingSource
Delivery model (cloud, self-hosted, desktop, browser extension)Splunk-managed SaaS, private cloud, or on-premises deployment options S51.S51
Platforms and appsWeb-based platform S1.S1
API and extensibility (API, SDK, webhooks, MCP, plugins)Native OpenTelemetry support, SDKs, and agents S1.S1
Data ownership and exportNot published on the collected pages.—
Performance and reliability claimsUnifies petabyte-scale machine data S1.S1
Release activityNot published on the collected pages.—
19

Measured infrastructure

Domain, certificate, and hosting signals, measured directly.

SignalFinding
Domain registered2001-12-07 — MarkMonitor Inc.
Domain expires2026-12-07
First archived2002-01-22 — web archive
TLS certificateDigiCert Inc, valid, expires 2027-04-06
Security headersHSTS, CSP, X-Content-Type-Options, X-Frame-Options
Headers not servedReferrer-Policy
Mail handled byalln-mx-01.cisco.com, rcdn-mx-01.cisco.com
Nameserversha3.markmonitor.zone, ha4.markmonitor.zone

Not measurable: rdap: exceeded the overall budget; wayback: exceeded the overall budget; tls: exceeded the overall budget; dns: exceeded the overall budget; headers: exceeded the overall budget. A gap here means the lookup was unavailable, not that the finding is negative.

20

Technical site audit

A bounded multi-page crawl with page-level issues and URLs.

Scout — Bounded technical crawl

  • Pages crawled: 15 of 15 maximum
  • Technical health: 96/100
  • Critical issues: 0
  • Warnings: 5
  • Notices: 17

Issues

SeverityIssueValueAffected URL
noticeImages are missing alt text3https://www.splunk.com/
noticeImages are missing alt text3https://www.splunk.com/
noticeMeta description length should be reviewed207https://www.splunk.com/de_de
noticeImages are missing alt text3https://www.splunk.com/de_de
warningTitle length should be reviewed72https://www.splunk.com/fr_fr
noticeMeta description length should be reviewed220https://www.splunk.com/fr_fr
noticeImages are missing alt text3https://www.splunk.com/fr_fr
noticeImages are missing alt text3https://www.splunk.com/ja_jp
noticeImages are missing alt text4https://www.splunk.com/ko_kr
noticeImages are missing alt text4https://www.splunk.com/zh_cn
noticeImages are missing alt text4https://www.splunk.com/zh_tw
noticeImages are missing alt text10https://www.splunk.com/en_us/products/splunk-cloud-platform.html
noticeImages are missing alt text12https://www.splunk.com/en_us/products/splunk-enterprise.html
noticeImages are missing alt text2https://www.splunk.com/en_us/products/platform.html
noticeImages are missing alt text1https://www.splunk.com/en_us/solutions/splunk-artificial-intelligence.html
noticeImages are missing alt text2https://www.splunk.com/en_us/products/federated-search.html
noticeImages are missing alt text3https://www.splunk.com/en_us/solutions/data-management.html
noticeImages are missing alt text1https://www.splunk.com/en_us/products/ai-toolkit.html
warningDuplicate title in audit sample2https://www.splunk.com/
warningDuplicate title in audit sample2https://www.splunk.com/
warningDuplicate meta description in audit sample2https://www.splunk.com/
warningDuplicate meta description in audit sample2https://www.splunk.com/

Crawled pages

StatusTitleH1sWordsResponseURL
200Splunk \Data Platform for Security, Observability & AI1169879 ms
200Splunk \Data Platform for Security, Observability & AI11698115 ms
200Splunk \Die Datenplattform für Security, Observability und KI117621,615 ms
200Splunk \Plateforme de données pour la sécurité, l’observabilité et l’IA121501,053 ms
200Splunk \セキュリティ、オブザーバビリティ、AIのためのデータプラットフォーム1508147 ms
200Splunk \보안, 옵저버빌리티 & AI를 위한 데이터 플랫폼11599214 ms
200Splunk \用于数字韧性的统一安全与可观测性163185 ms
200Splunk \用於數位韌性的統一安全與可觀測性1651279 ms
200Splunk Cloud Platform \Splunk11359378 ms
200Splunk Enterprise \Splunk1132081 ms
200Splunk Platform \Data Platform for Trusted AI at Scale \Splunk11561
200Splunk AI solutions \Activate AgenticOps \Splunk11364
200Federated Search \Splunk11246810 ms
200Data Management \Splunk11397294 ms
200AI Toolkit \Splunk11531868 ms

This is a bounded Scout crawl. Core Web Vitals and Lighthouse scores are not claimed unless a dedicated performance audit is connected.

21

Search Console and Analytics

First-party search and behavioral data connection state.

Modeled acquisition channels

ChannelEstimated share
direct29.2%
search41.8%
search organic37.4%
search paid4.3%
social3.1%
social organic2.7%
social paid0.4%
referrals22.1%
paid referrals1.2%
mail1.3%
gen ai1.5%
affiliate0.0%
other0.0%

First-party connections

IntegrationStatusData available after connection
Google Search ConsoleNot connectedClicks, impressions, CTR, average position, queries, pages, countries, and devices
Google AnalyticsNot connectedOrganic sessions, engagement, landing pages, conversions, geography, and devices

No first-party Search Console or Analytics numbers are shown until the site owner authorizes the corresponding Google account. Scout traffic model values above are modeled estimates, not private analytics totals.

Limits and method

22

Limitations and open questions

Known constraints and missing evidence from the collected pages.

The collected pages do not mention specific competitors. Evidence gaps include lack of detailed pricing for Splunk Cloud Platform and Enterprise, no explicit security compliance certifications, and no uptime status page details. Open questions remain about free tier limits and trial lengths.

23

Sources, method, and limitations

Evidence inventory, collection method, provider use, and constraints.

This report is based on 15 collected pages from splunk.com, including the homepage, pricing pages, pricing models, perpetual license FAQ, pricing calculator, and several form/white paper pages. The catalog includes 180 evidence items. External proof search was performed but no external review profiles were scraped. Limitations: some pages were not fully rendered, and pricing details for enterprise plans require contacting sales.

Paid against free, in your inbox

One job at a time: the paid tools worth paying for, the free ones you can run yourself, and who should pick which.

No tracking pixels. One click to leave. We use your address to send Stack Radar and nothing else. Privacy.