Pricing snapshot
Splunk prices products using activity-based, ingest, workload, and entity models. Splunk Cloud Platform supports activity-based, ingest, or workload pricing; Splunk Enterprise supports ingest or workload pricing. Both state unlimited users.
Scroll sideways to see all columns. With a keyboard, focus this table and use the arrow keys.
| Product | Starting rate | Billing basis |
|---|---|---|
Splunk Observability Cloud Infrastructure | Starts at $15 | Per host/month, billed annually |
Splunk Observability Cloud App & Infra | Starts at $60 | Per host/month, billed annually |
Splunk Observability Cloud End-to-End | Starts at $75 | Per host/month, billed annually |
Splunk AppDynamics Infrastructure Edition | Starts at $6 | Per vCPU/month, billed annually |
Choose a host-based published rate when buying the listed Observability Cloud editions. For Splunk Cloud Platform, Splunk Enterprise, Enterprise Security, SOAR, and Attack Analyzer, the pricing page directs buyers to get a quote; select the pricing model and deployment that match the product and workload.
Plan and deployment details
Splunk Cloud Platform is Splunk-managed SaaS and offers activity-based, ingest, or workload pricing for unlimited users.
Splunk Enterprise can be deployed in a private cloud, on premises, or in air-gapped environments, with ingest or workload pricing for unlimited users.
Splunk Enterprise Security is available in Essentials and Premier editions, in cloud and self-managed or on-premises environments.
Splunk states that product purchases include standard support, including major and minor software updates and technical support; premium support is also available.
What drives the bill
For Splunk Enterprise, compute pricing is based on vCPUs allocated and available to Search Head and Indexer components. Its data-ingest option is based on the maximum daily data expected to be sent to the installation; the vendor says that model permits unlimited searches against indexed data and storage for as long as desired. Splunk says overages are charged when purchased data-ingestion or storage capacity is consistently exceeded.
Ingest and Edge Processors can filter, redact, and route data before indexing.
Federated Search can access and analyze data where it resides, including Amazon S3.
Cloud Flex allows spend to be reallocated across the Splunk portfolio without restarting procurement.
Buying take
Use the published host or vCPU starting rates as an entry point for the relevant observability editions. For platform, security, and deployment choices that use ingest, workload, or activity pricing, bring expected daily ingestion, allocated vCPUs, product scope, and deployment requirements to the quote discussion. If usage may change across Splunk products, evaluate whether Cloud Flex fits the intended allocation model.
Evaluate this price
Sources
Pricing and billing details: Splunk pricing page. Enterprise licensing and capacity detail: Splunk Enterprise product features page.