Splunk

Splunk is the leading platform for security information and event management (SIEM) and IT observability, now part of Cisco. The platform ingests, indexes, and correlates machine-generated data from virtually any source to provide real-time operational intelligence.

Splunk Enterprise Security provides SIEM capabilities including threat detection, investigation, and response. The platform processes security events from endpoints, networks, cloud services, and applications, correlating them with threat intelligence to identify attacks.

Splunk Observability Cloud provides infrastructure monitoring, APM, real-time alerting, and log analytics. The platform supports OpenTelemetry for vendor-neutral instrumentation.

The Splunk Processing Language (SPL) provides a powerful query language for searching and analyzing data. Splunk AI Assistant enables natural language queries and automated alert explanations.

Splunk Cloud: Starting at $15/GB/day ingestion pricing

Splunk Enterprise: Per-GB or per-host pricing

Splunk Observability: Based on hosts and metrics

Enterprise license agreements for predictable pricing at scale.