search legion

Price check · Nov 6, 2026

Splunk pricing

Splunk has free observability editions, but its core platform and security pricing is mostly usage-based or quote-based.

4.0/10Value score

We may earn a commission if you buy through links on this page. It never changes a score or a ranking. How we make money

Short answer

Paid plans start at $6/mo. There's also a free plan.

Splunk has free observability editions, but its broad platform does not have one public price. The lowest listed paid rate is AppDynamics Infrastructure Edition at $6 per vCPU per month, shown as a monthly equivalent billed annually. Splunk Cloud Platform and Splunk Enterprise are usage-based with no public rate in the published pricing details; security products are also usage-based, while SOAR and Attack Analyzer require custom quotes. Host-, vCPU- and span-based rates are not directly comparable.

01Every plan, line by line

PlanBilled annuallyBilled monthlyBuilt for
Splunk Cloud Platform—QuoteTeams wanting managed cloud analytics
Splunk Enterprise—QuoteTeams deploying on-prem or privately
Enterprise Security Essentials—QuoteHuman-led, AI-accelerated security teams
Enterprise Security Premier—QuoteTeams needing autonomous security operations
Splunk SOAR—QuoteTeams automating security response
Splunk Attack Analyzer—QuoteTeams analyzing phishing and malware
Observability Cloud Free edition—$0Teams evaluating observability
Observability Cloud Infrastructure$15—Teams monitoring infrastructure
Observability Cloud App & Infra$60—Teams monitoring apps and infrastructure
Observability Cloud End-to-End$75—Teams needing full-stack observability
Agent Observability Free edition—$0Teams evaluating agent monitoring
Agent Observability$100—Teams monitoring AI agent behavior
AppDynamics Infrastructure Edition$6—Teams monitoring infrastructure performance
AppDynamics Premium Edition$33—Teams monitoring application performance
AppDynamics Enterprise Edition$50—Teams needing enterprise application monitoring

Add-ons and overages

  • Database Monitoring: optional add-on; contact sales for pricing
  • Secure Application: optional add-on; contact sales for pricing
  • Agent Observability: additional Luna tokens and extended data retention available; prices not published

What a team pays per month

Plan1 seat5 seats10 seats25 seats
Observability Cloud Infrastructure$15$75$150$375
Observability Cloud App & Infra$60$300$600$1,500
Observability Cloud End-to-End$75$375$750$1,875
AppDynamics Premium Edition$33$165$330$825
AppDynamics Enterprise Edition$50$250$500$1,250

02What the plan grid doesn't tell you

Usage-based core plans

Splunk Cloud Platform and Splunk Enterprise list activity, ingest or workload pricing, but no public dollar rate; costs depend on the selected meter.

Different billing units

Observability rates use hosts, Agent Observability uses spans, and AppDynamics uses hosts or vCPUs. These prices are not directly comparable.

Sales-priced extras

Database Monitoring and Secure Application are optional add-ons priced through sales. Extra Luna tokens and extended retention have no published prices.

Annual billing context

Published rates are monthly equivalents billed annually. Billing terms for quote-based products are not published.

03Which plan should you buy?

If you are…GetWhy
Teams evaluating observabilityObservability Cloud Free editionThe pricing details list a free edition, making it the no-cost starting point for evaluating observability.
Infrastructure monitoring teamsObservability Cloud InfrastructureListed at $15 per host per month, billed annually, with Infrastructure Monitoring and other listed infrastructure features.
Human-led security teamsEnterprise Security EssentialsThe listed package includes AI, SIEM, threat intelligence, Detection Studio and ExposureAnalytics; pricing is usage-based.

04Is Splunk worth the money?

Splunk covers machine-data search, security and observability, with options for cloud, on-premises and private deployments. That breadth may suit teams consolidating those needs, but the public pricing details do not give a clear total for the core platform or security plans. Rates use different units, and some products and add-ons require a quote. Buyers should treat the listed $6 starting rate as an AppDynamics infrastructure price—not a price for Splunk’s full platform.

Cheaper Splunk alternatives →

Splunk pricing FAQ

Is Splunk free to use?

The pricing details list free editions for Observability Cloud and Agent Observability. They do not list a free edition for Splunk Cloud Platform, Splunk Enterprise or the Enterprise Security plans. Splunk SOAR has a free trial available, but its price is a custom quote.

How difficult is IT to learn Splunk?

The published pricing information does not describe Splunk’s learning curve, training requirements or technical prerequisites, so we can’t give a sourced difficulty rating. It does describe products for searching data, monitoring systems and investigating threats, but that alone does not establish how difficult they are to learn.

What is the difference between Splunk and Splunk Enterprise Security?

Splunk is described as a data platform for security, observability and AI. Enterprise Security is a security product family: Essentials lists SIEM, threat intelligence and detection features, while Premier adds SOAR, UEBA and Automated Threat Analysis. Both security plans are usage-based.

Is Splunk open source?

The published pricing information does not identify Splunk as open source or provide licensing terms. It lists paid, usage-based and quote-based products, plus free observability editions and a SOAR trial. Those pricing options do not, by themselves, establish whether any product’s source code is open.