How much does Splunk cost?

Splunk Cloud pricing starts around $150 per GB per day indexed on smaller plans, though Cisco (which acquired Splunk in 2024) no longer publishes a public rate card. Enterprise licenses run $1,800 to $2,400 per GB per day for on-premise deployments. Infrastructure Monitoring (formerly SignalFx) uses per-host pricing starting around $25 to $38 per host per month.

Does Splunk have a free tier?

Splunk Enterprise has a free version limited to 500 MB of data per day. Splunk Cloud has a free trial but no permanent free tier. Splunk Infrastructure Monitoring (SignalFx) does not have a free tier.

Why is Splunk so expensive?

Splunk's ingest-based pricing means costs scale directly with your log volume. A 10x increase in logging - common as applications scale - produces a 10x increase in the Splunk bill. Teams with high-volume application logs often pay $10,000 to $50,000 per month at enterprise scale.

What is a cheaper alternative to Splunk?

For log management, Grafana Cloud (Loki), Datadog Log Management, and Elastic Cloud offer lower per-GB costs. For infrastructure monitoring specifically, Datadog, New Relic, and Grafana Cloud all undercut Splunk Infrastructure Monitoring on per-host pricing. For uptime and availability monitoring, Vantaj starts at $9/month.

What happened to Splunk after the Cisco acquisition?

Cisco acquired Splunk in March 2024 for $28 billion. The product portfolio has continued under the Splunk brand. Pricing negotiations now run through Cisco's enterprise sales teams. Public pricing has become even less transparent post-acquisition.

Splunk Pricing 2026: Infrastructure Monitoring Costs, Hidden Fees, and Cheaper Alternatives

Splunk built its business on log indexing and search. At small volumes, it's one of the most capable log analysis platforms available. At enterprise scale, it's one of the most expensive - and the billing model makes costs hard to predict before you're already running large.

In 2026, Splunk sits under Cisco following a $28 billion acquisition. The product line covers Splunk Cloud (managed SaaS), Splunk Enterprise (on-premise), and Splunk Infrastructure Monitoring (the former SignalFx metrics platform). Each uses a different billing model.

Splunk's Three Pricing Models

Splunk charges differently depending on which product you use:

Ingest-based pricing (Splunk Cloud and Enterprise): You pay per GB of data indexed per day. The more logs your applications emit, the higher your bill.

Workload-based pricing (Splunk Cloud option): An alternative to ingest pricing where you pay for compute workloads consumed by searches and pipelines, not raw data volume. Available on Splunk Cloud as a different contract structure.

Per-host pricing (Splunk Infrastructure Monitoring / SignalFx): You pay per monitored host per month, plus optional add-ons for APM, RUM, and synthetic monitoring.

Splunk Cloud Pricing

Splunk does not publish current pricing publicly. The figures below reflect current market rates based on documented enterprise contracts and reseller pricing:

Volume	Estimated annual cost
1 GB/day	~$54,000/year ($4,500/month)
5 GB/day	~$150,000/year ($12,500/month)
10 GB/day	~$210,000/year ($17,500/month)
50 GB/day	Negotiated enterprise - typically $500,000+/year

These are list prices. Annual contract negotiations with Cisco/Splunk often produce discounts of 20 to 40% from these figures. Smaller teams pay closer to list price. Enterprise teams with significant bargaining leverage can negotiate meaningfully lower.

Minimum contract size: Most Splunk Cloud contracts have an annual minimum. Teams with under 5 GB/day of data often pay a premium relative to Splunk's true per-GB rate because contracts are structured around minimum commitments.

Splunk Enterprise (On-Premise) Pricing

Splunk Enterprise is licensed annually or as a perpetual license, also based on daily data ingest volume:

License	Approximate annual cost
500 MB/day (free)	$0
1 GB/day	$1,800–$2,400
5 GB/day	$12,000–$18,000
10 GB/day	$25,000–$40,000
100 GB/day	$150,000–$250,000+

Infrastructure costs (servers, storage) sit on top of this. Teams running Splunk Enterprise at 10 GB/day often spend $50,000 to $100,000 per year total when you factor in hardware, storage, and the license.

Maintenance and support: Annual maintenance renews at 20 to 25% of the original license cost per year. A $25,000 Enterprise license costs $5,000 to $6,000/year to maintain.

Splunk Infrastructure Monitoring (SignalFx) Pricing

Splunk Infrastructure Monitoring - acquired as SignalFx in 2019 - is a separate product with per-host pricing:

Product	Price
Infrastructure Monitoring	~$25/host/month
APM	~$55/host/month
RUM	~$10/10,000 sessions/month
Synthetic Monitoring	~$15/10,000 test runs/month

These figures come from pre-Cisco published pricing; post-acquisition rates are negotiated. The per-host structure is similar to Datadog's, but Splunk Infrastructure Monitoring positions itself as an enterprise product with a minimum contract typically exceeding $50,000/year.

Indexed spans and custom metrics: APM pricing includes baseline trace volume, but indexed span storage and high-cardinality custom metrics cost extra. Teams instrumenting microservices at depth often find APM costs 50 to 100% higher than the per-host base rate suggests.

What Drives Splunk Bills Higher Than Expected

Log verbosity growth. Applications emit more logs as they scale. A service logging 5 GB/day in its first year may log 50 GB/day two years later. Splunk bills scale linearly with this growth - doubling log volume doubles the Splunk bill.

Debug logging in production. Applications deployed with DEBUG-level logging can emit 10x the volume of INFO-level logging. Teams that forget to set production log levels to INFO or WARN find their Splunk bill 5 to 10x higher than expected.

High-cardinality metrics in Infrastructure Monitoring. Like Datadog, SignalFx charges by the metric dimension. Services emitting metrics with high-cardinality labels (user IDs, request IDs) generate millions of metric time series. The bill reflects this.

Overage pricing on committed contracts. Splunk Cloud contracts include committed ingest volumes. Overage pricing - what you pay when you exceed the committed volume - runs higher than the base rate. Teams that outgrow their committed volume mid-contract pay premium overage rates until renewal.

Splunk vs. Alternatives for Infrastructure and Uptime Monitoring

Tool	Pricing model	Free tier	Typical monthly cost (mid-size team)	Best for
Splunk Cloud	Ingest-based ($/GB/day)	Trial only	$4,500–$17,500	Log search and SIEM at enterprise scale
Splunk Infrastructure Monitoring	Per host	None	$250–$550 (10 hosts)	Metrics + APM for SignalFx users
Datadog	Per host + per GB	5 hosts (1-day retention)	$500–$1,500	Unified APM + logs + infra
Grafana Cloud	Per 1,000 metric series + per GB	10k series, 50 GB logs	$400–$900	Teams preferring OSS-based stack
New Relic	Per user	100 GB/month	$0–$300	Smaller teams, per-user cost efficiency
Vantaj	Per monitor (flat)	20 monitors	$9–$29	Uptime and availability monitoring

For teams using Splunk specifically for uptime alerts - knowing when a service is down - the economics do not work. Splunk is built for high-volume log analysis. Running it as an uptime monitor means paying enterprise log platform costs for a use case that dedicated tools handle at a fraction of the price.

Grafana Cloud as a Splunk Alternative

For log management, Grafana Cloud (using Loki under the hood) costs $0.50/GB versus Splunk's effective $150/GB/day for comparable volumes. At 5 GB/day (150 GB/month):

	Splunk Cloud	Grafana Cloud
Monthly cost	~$12,500	~$75 (after 50 GB free)

Grafana Cloud lacks Splunk's log search speed for very large volumes and does not include the SIEM capabilities that make Splunk valuable for security teams. For operational log analysis, the cost difference is significant.

When Splunk Is Worth the Price

Splunk earns its cost for teams that:

Run security operations centers (SOC) requiring compliance-grade log retention
Need enterprise audit trails with strict chain-of-custody logging
Use Splunk's ML-based threat detection and UEBA features
Operate at scale where Splunk's search performance beats cheaper alternatives

Splunk does not earn its cost for teams that:

Use it primarily for log forwarding and dashboards
Need uptime monitoring and alerting (cheaper dedicated tools exist)
Want infrastructure metrics without log management
Are evaluating log management for the first time (Grafana Cloud's free tier covers far more)

The Bottom Line

Splunk is the most expensive log management platform at scale and one of the most expensive options for infrastructure monitoring. In 2026, under Cisco ownership, pricing is negotiated rather than published - which means smaller teams rarely get competitive rates.

For uptime and availability monitoring specifically, Splunk is not designed for this use case. Tools built around synthetic checks - Vantaj, Better Stack, UptimeRobot - monitor services at flat monthly rates that make Splunk's economics look like a category error.