Splunk

Splunk is an enterprise data platform specializing in security information and event management (SIEM), log management, and IT operations analytics. Founded in 2003 and acquired by Cisco in 2024 for $28 billion, Splunk ingests machine-generated data from servers, networks, applications, and security devices, then provides search, visualization, and alerting capabilities. Splunk's SPL (Search Processing Language) allows complex real-time and historical log analysis without predefined schemas — data is indexed as-is and queried on read. Splunk Enterprise Security (ES) is one of the leading SIEM platforms used by Fortune 500 companies and government agencies for threat detection, incident response, and compliance reporting (PCI DSS, HIPAA, SOX). Splunk SOAR (Security Orchestration, Automation and Response) automates security playbooks. Splunk Observability Cloud (formerly SignalFx) provides infrastructure monitoring and APM. Pricing is notoriously high — Splunk's ingest-volume pricing model can cost hundreds of thousands of dollars annually for large enterprises, which has driven migration to ELK Stack and Datadog alternatives. Splunk Cloud (SaaS) has grown substantially as an alternative to on-premises deployment. The Cisco acquisition brings integration with Cisco's networking and security portfolio, potentially reshaping Splunk's competitive position in network security analytics.