Splunk
Data platform for security and observability that searches machine data at scale and adds AI assistants and agents.
Splunk is a data platform that gathers and searches machine data for security, observability and AI operations. Splunk is used through its Cloud Platform or Enterprise edition, with Enterprise Security for threat detection and response, Observability Cloud for application and infrastructure monitoring, and AI assistants and agents that help investigate and resolve issues.
Best for Large organisations whose security and IT operations teams need to search and correlate high volumes of logs and telemetry in one platform.
- Platforms
- MCP
- Pricing model
- Contact sales
- Free trial
- Yes
- Made by
- Splunk LLC, a Cisco company
- Added
Last verified: . Information taken from splunk.com.
What is Splunk?
Splunk is a data platform that collects and analyses machine data for security, observability and AI operations. Its core is offered as Splunk Cloud Platform, delivered as a service, and as Splunk Enterprise. On top of that sit Enterprise Security, which covers SIEM, SOAR, user behaviour analytics and detection development, and Observability Cloud, which covers application performance, infrastructure monitoring and digital experience analytics, alongside IT Service Intelligence and AppDynamics. Federated search lets teams query data where it is stored instead of moving it. AI features include assistants and agents for security and site reliability work, an AI Toolkit for building custom models, an MCP server that connects AI tools to Splunk data, and Agent Observability for monitoring AI agents, models and token costs. More than 2,000 integrations are available through Splunkbase, with native OpenTelemetry support. Splunk is a Cisco company.
Key Features
Search and Analytics Platform
Indexes and searches machine data from cloud, SaaS, IT, OT and IoT sources in the cloud service or the Enterprise edition.
Federated Search
Queries telemetry across different storage locations without first ingesting or relocating it.
Enterprise Security
Combines SIEM, SOAR and user and entity behaviour analytics for threat detection, investigation and response.
Observability Cloud
Monitors applications, infrastructure and end-user experience, with AI-assisted troubleshooting of root causes.
Agent Observability
Tracks the behaviour, quality and token usage of AI agents and models so their cost and drift can be governed.
AI Toolkit and MCP Server
Provides tooling to build, test and deploy custom AI and a server that gives AI assistants governed access to Splunk data.
Screenshots
Use Cases
- Security Monitoring
- Centralise logs to detect threats and investigate incidents in a security operations centre.
- Incident Response Automation
- Orchestrate response playbooks so routine steps run without manual effort.
- Microservices Troubleshooting
- Trace a performance problem across services to its source.
- Reducing Alert Noise
- Correlate and prioritise alerts so on-call staff see the ones that matter.
- Governing AI Spend
- Attribute LLM token usage to teams and applications to keep costs visible.
Things to know
- Pricing through sales
- The pricing page shows a contact form for a pricing expert in place of a price list.
- Several separate products
- Security, observability, IT Service Intelligence and AppDynamics are distinct offerings built around the core platform.
- Owned by Cisco
- The site states that Splunk is now a Cisco company and links to Cisco support.
FAQs
What is Splunk?
Splunk is a data platform for security, observability and AI that searches and analyses machine data. It is a Cisco company.
What is Splunk used for?
Splunk is used to monitor IT systems and applications, detect and respond to security threats, and analyse logs and telemetry at large scale.
Does Splunk use AI?
Yes. Splunk offers AI assistants and agents for security and observability tasks, an AI Toolkit for custom models and Agent Observability for monitoring AI agents.
How much does Splunk cost?
Splunk does not list prices on the pricing page reviewed. The page describes pricing models and directs visitors to contact a pricing expert.
Is there a Splunk free trial?
Yes. Splunk's site offers free trials and downloads of its products.
Does Splunk have an MCP server?
Yes. Splunk lists an MCP Server among its platform capabilities for connecting AI tools to Splunk data securely.
What integrations does Splunk offer?
Splunk says more than 2,000 integrations and apps are available on Splunkbase, and that it supports OpenTelemetry natively along with SDKs and agents.
Who it's for
- Security operations teams
- IT operations
- Site reliability engineers
- DevOps teams
- Enterprises
Comments
No comments yet. If you have used Splunk, tell other readers how it went.
Alternatives to Splunk
| Tool | Free plan | Starting price | API |
|---|---|---|---|
 DynatraceObservability platform that monitors applications, infrastructure, logs and security and analyses the data with AI. |
— | — | Yes |
 OpenReplayOpen-source session replay and product analytics suite that can be self-hosted or run as a managed instance. |
Yes | — | Yes |
 PostHogProduct data platform combining analytics, session replay, feature flags, error tracking and a warehouse, with AI on top. |
Yes | — | Yes |
 AtriaAI ad workflow platform for researching, briefing, generating, launching and analysing Meta ads. |
— | — | Yes |
 LangChainOpen source agent frameworks plus the LangSmith platform for tracing, evaluating and deploying AI agents. |
Yes | — | Yes |
Listed in the same categories as Splunk. A starting price appears only where we checked it on the maker’s pricing page; a dash means not checked or not published. All DevOps & Monitoring tools