Turn your machine data into answers

Splunk® Enterprise

Customers have high expectations. Splunk Enterprise delivers the answers you need to exceed them. Machine data is the key.

Watch Video

Any Data. Any Question. In Real Time.

Splunk Enterprise monitors and analyzes machine data from any source to deliver Operational Intelligence to optimize your IT, security and business performance. With intuitive analysis features, machine learning, packaged applications and open APIs, Splunk Enterprise is a flexible platform that scales from focused use cases to an enterprise-wide analytics backbone.

  • Collects and indexes log and machine data from any source
  • Powerful search, analysis and visualization capabilities empower from across an organization
  • An expansive Splunkbase app ecosystem provides solutions for security, IT ops, business analysis and more
  • Available as on-premises software or as a cloud service

Product Tour

Splunk Enterprise 7.0

Splunk Enterprise 7.0 delivers advancements in machine learning, with massive scale and speed for data analytics, monitoring and alerting.


Numerical data points captured over time, that can be compressed, stored, processed and retrieved more efficiently than events. In the new release, the use of metric data boosts the speed of monitoring, searching and alerting by at least 20X over previous releases.

Machine Learning Toolkit

Enhancements to the toolkit include an improved API, role-based access controls for machine learning models and new out-of-the-box algorithms to make it even easier for you to predict future IT, security, and business outcomes.

Event Annotation

Decipher what is and is not actionable from disparate data sources. Event Annotation unifies and correlates log events, annotations and metrics into a single view.

Splunkbase™ App Ecosystem

Our app ecosystem just keeps getting better. Splunkbase boosts the power of Splunk Enterprise 7.0 with 1,000+ solutions, providing ready-to-use analytics, alerts, dashboards, and visualizations.

Flexible License Enforcement

Unanticipated data growth or bursts of new data during an incident investigation will no longer interrupt your mission-critical Splunk operations.

Free Dev/Test Licenses

Splunk customers can now use free Dev/Test licenses to explore new data sources and use cases before moving to production.

An Enterprise-Class Architecture

The enterprise machine data fabric provides a flexible data architecture that facilitates insights from your data to provide Operational Intelligence.

Any Machine Data

Using no predefined schema, Splunk Universal Forwarders and collection methods such as syslog, HTTP direct API, scripted inputs, and the mobile SDK can index unstructured data from sources such as applications, sensors, endpoint devices, mainframes, industrial systems and network packet streams. Splunk can also combine your machine data with data in your relational databases, data warehouses, and Hadoop and NoSQL data stores.

Enterprise-Class High Availability and Scale

Multi-site clustering and automatic load balancing scale to support hundreds of terabytes of data per day, optimize response times and provide continuous availability. Search Head Clustering provides support for a virtually unlimited number of concurrent users and searches. In addition, the High Performance Analytics Store, the Metrics Store and other acceleration technologies enable you to generate reports on big data at lightning fast speeds.

Enterprise Security and Administration

A robust security model provides secure data transfer, granular role-based access controls, LDAP integration and single sign-on, auditability and data integrity. Every transaction is authenticated, whether through the web and mobile interfaces, command line interface or the Splunk Enterprise API. The distributed management console provides enterprise-wide administration and maintains a complete, signed audit trail of administrative actions and search history.

Splunkbase Apps and Add-Ons

Apps from Splunk, our partners and our community enhance and extend the power of the Splunk platform. Optimize data collection and analysis from your favorite sources. Empower users with pre-built visualizations and functions for security, IT management, business analysis and more. Whatever your need, these apps help you get powerful results right out of the box. Browse Splunkbase to take advantage of the 1,000+ apps and add-ons that you can immediately use with Splunk.

Open Development Platform

The Splunk platform makes it easy to customize Splunk Enterprise to meet the needs of any project. Developers can build custom Splunk applications or integrate Splunk data into other applications by using the Splunk REST API or SDKs for JavaScript, JSON, Java, Python, Ruby and PHP. Your custom applications can leverage the rich functionality of the Splunk platform as well as existing applications available in the Splunk applications library.

Enterprise Integration

Splunk Enterprise is the foundation for your enterprise-wide Operational Intelligence. Embed Splunk reports and data in any application. Enrich your relational databases and reports with Splunk insights, trigger actions in ticketing or other systems, or use our ODBC integrations to access Splunk Operational Intelligence in familiar applications such as Microsoft Excel or Tableau.

Case Study

Download the Dubai Airports Flies Into The Future With Splunk