About Splunk

Splunk Inc. (Splunk) delivers solutions that enable organizations to harness the value of their data to help keep their digital systems secure, available and performant. Splunk helps customers build a safer and more resilient digital world. The company’s solutions for security and observability empower Security Operations (‘SecOps’), IT Operations (‘ITOps’), and Development Operations (‘DevOps’) teams to maintain resilient systems by monitoring and securing them more quickly and efficiently. The company’s offerings empower operational transformation, helping customers move from reactive, non-scalable and ineffective approaches to proactive, automated, and machine learning (‘ML’)-assisted processes that drive better outcomes even as the scale and complexity of their technology continue to grow. Splunk Products Splunk offers the Unified Security and Observability Platform, which is consisted of the following: Splunk Security: Includes Splunk Enterprise Security (‘SIEM’), Splunk Security Orchestration, Automation and Response, Splunk User Behavior Analytics, Splunk Attack Analyzer and Splunk Mission Control. Splunk Security helps security leaders fortify their organization’s digital resilience by effectively mitigating cyber risk and meeting compliance requirements. SecOps leaders can achieve this by leveraging Splunk Security to scale the SecOps team capability in order to rapidly detect, investigate and respond to sophisticated threats with advanced analytics, automation and a unified security operations experience. Splunk Observability: Includes Splunk IT Service Intelligence, and Splunk Observability Cloud, which provides fully integrated capabilities for Splunk Application Performance Monitoring (‘APM’), Splunk Infrastructure Monitoring, Splunk Real User Monitoring (‘RUM’), and Splunk Synthetic Monitoring. Splunk Observability provides complete visibility across the full stack of infrastructure, applications and the digital customer experience, so customers maintain continuous health, reliability and performance of their business and the applications and infrastructure that it runs on. The solutions that comprise the company’s Splunk Security and Splunk Observability products are powered by the Splunk platform - an extensible, configurable platform that supports expansive data collection and instrumentation, at scale. The Splunk platform provides a wide range of interfaces for administrators, data engineers, analysts, and end users for data preparation, investigation, and visualization. Organizations can also execute unified search queries across datasets in multiple Splunk instances - on-premise and in the cloud - as well as third party data stores. Extensive ML capabilities, including out-of-the-box algorithms optimized for common data types, deliver more accurate and actionable insights. Pre-built ML algorithms and model development capabilities allow data scientists to develop and deploy customized algorithms and models to their custom security and observability use cases. In addition, the company’s field organization, partners and customers build content on Splunk to address a broader range of security and observability use cases, extending the power of Splunk, and accelerating time to value for customers. Splunk’s Unified Security and Observability Platform offers a unique breadth and depth of capabilities, which delivers best in class outcomes for customers. With Splunk, SecOps, ITOps and DevOps teams get industry analyst recognized, market-leading security and observability solutions. Splunk also helps drive better alignment and collaboration across these teams, thereby simplifying detection, investigation and response. The company’s products are designed to give organizations comprehensive data visibility from across their on-premise, cloud and edge data sources with full fidelity, at scale. Combined with the tools for rapid detection, investigation and response, organizations are able to respond more quickly and accurately, reducing mean time to detect (‘MTTD’) and mean time to respond (‘MTTR’). Splunk also enables organizations to create process and cost efficiencies by optimizing the collection, distribution and storage of data, reducing data duplication, and simplifying data reuse across multiple use cases for security and observability. Splunk products are delivered as either cloud services or on-premise licensed software (‘license offerings’) that customers deploy in their own environments. The unique capabilities, rapid delivery, and streamlined adoption that cloud services enable make them the best delivery model for the company and the majority of the company’s customers. Accordingly, the company will deliver a growing number of the company’s offerings as cloud services to take full advantage of cloud capabilities like elastic scalability while maximizing the rate at which new features are released and adopted. Splunk Security Splunk Security helps SecOps leaders mitigate cyber risk and comply with regulatory requirements, while enabling them to streamline security operations, increase productivity, prevent analyst fatigue and accelerate threat detection investigation and response (‘TDIR’). Splunk Security reduces alert noise, replaces swivel-chair security management with one common security work surface, and automates manual and repetitive tasks. SecOps leaders leverage Splunk Security to establish modern data-centric security operations centers that improve every aspect of TDIR and maximize return on security investments. Customers use Splunk Security to address a wide range of use cases, including: Security Monitoring: Enhance the coverage of potential attack vectors and analyze a continuous stream of near-real-time data for threats and other potential security issues. With comprehensive data visibility across on-premise, cloud and edge, SecOps teams can investigate and analyze alerts and incidents for faster detection and response. Incident Management: Quickly investigate threats and gain an understanding of incidents. Built-in advanced analytics detect suspicious patterns and categorizes them by potential severity, so SecOps teams can focus on the critical incidents. Rapid search capabilities with automated out-of-the-box content, aligned with industry frameworks, accelerates investigation and response times. Threat Hunting: Analyze malicious activities and determine the scope of incidents, faster. SecOps teams can leverage Splunk’s searches across petabytes of data to perform in-depth threat hunting and analysis. Splunk also provides continually updated out-of-the-box detections, integrated threat intelligence, and ML models that accurately detect, contextualize and prioritize known and unknown threats by organizational risk. Advanced and Insider Threat Detection: Discover abnormalities and unknown threats that remain undetected by traditional security tools through early and rapid behavior-based analysis. Risk-based alerting and streaming analytics enables attributing risk to users and systems, map alerts to cybersecurity frameworks and trigger alerts when risk exceeds thresholds. Compliance: Centralize cyber-hygiene initiatives and the operational overhead needed to demonstrate adherence to compliance requirements and accelerate incident response investigation efforts. Splunk provides a highly efficient and secure solution, with real-time posture and insights across IT resources and security controls to clear compliance and pass audits with minimal effort, regardless of mandate or regulatory framework. Automation and Orchestration: Provide security operations centers advanced orchestration, automation and response capabilities by integrating teams, processes and tools. SecOps teams can hunt, detect, investigate, manage, contain and remediate threats from a unified security operations platform, enabling faster investigation and response. Splunk Observability Splunk Observability provides real-time performance monitoring and analysis of infrastructure, application, digital customer experiences and business services, based on open standards and instrumentation. With Splunk, ITOps and DevOps teams gain full control of their data, analyze in full-fidelity and avoid vendor lock-in. Built-in guided root cause analysis helps teams reduce MTTD/MTTR and prevent issues prior to impacting customers. Splunk Observability enables IT and business stakeholders to understand how their business is performing in real-time. With Splunk Observability, ITOps and DevOps teams can quickly resolve issues, improve reliability on an ongoing basis and make smarter business decisions. Customers use Splunk Observability to address a range of use cases, including: Proactive Outage Prevention: ML-driven alerting uses dynamic and custom data thresholds, and the live status of business service key performance indicators (‘KPI’) to forecast how a business service will perform in the short term. This enables ITOps teams to get ahead of potential customer impacting outages and helps them ensure better service reliability. Service Monitoring to Align IT with the Business: Services oriented monitoring and executive dashboards enable ITOps teams to show their impact on business outcomes. ITOps and business leaders can better align by leveraging a single, up-to-the-minute view of how critical services are performing with dedicated service and KPI health scores. Alert Noise Reduction: Leverage Splunk ML capabilities to group and prioritize alerts from across multiple data sources. ITOps teams can thus quickly prioritize alerts in terms of impact, significantly reduce alert noise, thus fixing performance issues faster. Log Analytics for IT Troubleshooting: ITOps can aggregate log data from multiple sources and domains at massive scale, with full fidelity. This enables teams to troubleshoot application and business service issues from a single source of truth for logs, accelerating investigation and response. Extend Visibility from On-Premises to the Cloud: DevOps teams moving workloads to the cloud gain visibility across on-premises, and cloud-native environments. By using telemetry data that is already sent to Splunk (logs) alongside new types of telemetry data that are commonly used in clouds (metrics and traces) in the same dashboards and workflows, DevOps teams gain insight into their hybrid cloud environments. Isolate Problems in Cloud Native Environments: Cloud-native environments introduce unmatched scale and complexity that traditional monitoring tools cannot handle, and that make it difficult for DevOps teams to troubleshoot when an issue occurs. Splunk Observability processes in real-time all the telemetry data and uses ML-guided workflows to help DevOps teams quickly and confidently detect, troubleshoot, and isolate issues faster. Understand Business Impact of Changes: Deploying frequent code changes increases the risk for new errors, latency, or outages that can impact service performance, customer experience, and business outcomes. With Splunk Observability, DevOps teams can understand how each change impacts the business, and prioritize any issues that may arise by business importance. DevOps can more confidently deploy new changes and improvements to customers faster than ever, thereby creating more business value. Empower Developers and Site Reliability Engineers with Self-Service Observability: Splunk Observability enables DevOps teams to easily monitor and troubleshoot their applications, while adhering to centralized policies. The company’s solutions empower them to use open standards to send telemetry data with minimal effort, get out-of-the-box dashboards and alerts based on industry best practices, and efficiently work together for faster troubleshooting. The built-in access and usage controls enable organizations to maintain operational efficiency and safeguard sensitive data. Customer and Partner Solutions Splunk provides application programming interfaces (‘API’), software development kits (‘SDK’), and other interfaces that enable the company’s network of third-party developers, partners, and customers to build content that configures and extends the company’s solutions to accommodate specific use cases. This range of content includes pre-built data inputs, workflows, searches, reports, alerts, custom dashboards, flexible user interface components, custom data visualizations, and integration actions and methods. Content can be built for a customer’s or partner’s own internal use, or it can be made generally available for download, in free or premium offerings, from within the Unified Splunk Security and Observability Platform, and via Splunkbase, an online community and marketplace for developers, partners, and customers to share apps and add-ons. Over 2,800 apps and add-ons are available on Splunkbase, most of which are built and maintained by third parties. These apps and add-ons help drive faster time-to-value, and simplify extending the power of Splunk to address more security and observability use cases. The company does not receive any material revenues from the sale of apps or add-ons by third-party application providers. Many apps and add-ons posted to Splunkbase are provided at no additional cost to users. Partner apps and add-ons listed on Splunkbase that are not free are primarily licensed directly by the third-party to the end user. Customer Success While customers can readily utilize the company’s products, its customer success team develops scalable offerings that span the customer journey. These offerings include adoption and implementation services, education services, and customer support services that are tailored to scale to the company’s customers’ size and maturity. Adoption and Implementation Services The company’s customer success planning includes on-boarding and adoption best practices on the company’s offerings for all customers, using an outcome-focused approach. The company’s prescriptive adoption guidance and success planning are targeted to the specific security and observability use cases, spanning a wide variety of industries. customers have several ways to engage the company’s experts: through customer success manager guidance, a catalog of on-demand services, expert and solution-oriented subscription services, or traditional project-based implementation services. Education Services The company works with customers and partners to help users gain proficiency and build the skills critical to achieving their business outcomes with Splunk. The company’s Education services include comprehensive curricula, learning paths, live lab environments for teams to practice and learn, and exams and industry recognized certifications to help validate teams’ progress. The learning paths are modularized, leveled (from foundational and basic to expert), role-based, and technology/domain focused to ensure development of critical skills. The company offers flexible learning solutions that span from self-paced eLearning to instructor-led sessions, and hands-on lab environments, all of which are available to and through the company’s expanded learning ecosystem comprising a global network of Splunk instructors, authorized learning partners, higher-education institutions and online learning providers. Customer Support The company provides support and maintain its products through a combination of unspecified software updates, maintenance releases and patches, and access to the company’s technical support services delivered over the term of a customer’s contract. Customers receive access to subject matter experts for critical issues, direct telephone support, access to online support, and software upgrades. The company’s customer support organization has global coverage capabilities, delivering support with deep expertise in the company’s products, complex IT environments and associated third-party infrastructure. The company’s customer support organization offers standard and premium service levels. Premium is an upgraded level of support that provides customers with priority response, update times, and targeted fix or workaround service level objectives for all case priorities. Growth Strategy The key elements of the company’s growth strategy include continued adoption of the company’s cloud services; continuing to have a mix of deployments across their business: on-premise, hybrid, cloud, and multi-cloud, and in order for them to achieve digital resilience, they need full visibility into those diverse environments; expanding the Splunk value proposition with broader and deeper capabilities; and continuing to invest in go-to-market, operations and infrastructure to deliver its services to customers in targeted countries across multiple geographies. Sales The company sells its offerings directly through field and inside sales and indirectly through different routes to market with a community of partners. These partners include but are not limited to leading, global service integrators, managed services partners, and resellers. The company gathers prospects through a broad range of marketing campaigns, programs and events. The company’s sales development teams handle lead qualifications. Large or complex transactions generally are handled by the company’s globally distributed direct field sales teams. The company’s sales engineers help define customer use cases, pre-sales qualification and evaluation. The company’s field sales teams are organized geographically across the Americas; Europe, the Middle East and Africa (‘EMEA’); and the Asia Pacific (‘APAC’). The company also has a dedicated sales team focused on public sector customers, which includes the United States federal, state and local government entities, colleges and universities, and not-for-profits. In addition to acquiring new customers, the company’s sales teams are responsible for securing renewals of existing contracts, as well as increased adoption of the company’s offerings by existing customers. To accomplish this, the company’s field sales and customer success teams work closely with the company’s customers to ensure adoption and overall account health, which fosters expanded usage through higher capacity or upgrades and additional use cases. Marketing The company focuses its marketing efforts on generating opportunities for the company’s sales team and partners, increasing awareness of the Splunk brand, driving widespread adoption, and communicating product advantages and business benefits. The company markets its offerings as targeted solutions for specific use cases and as an enterprise solution for a broad range of data and use cases. The company engages with existing and potential customers to provide community-based education and awareness and to promote expanded use of the company’s products by these customers. The company utilizes business press, technology press, industry analysts and influential voices to create awareness for Splunk in the company’s target markets. The company hosts a number of events across its sales regions to engage with both existing customers and new prospects, as well as deliver product training. The company hosts its annual user conference, ‘.conf’ and multiple partner forums as other ways to support the Splunk community to foster collaboration and help the company’s customers drive further business results. Partner Network Splunk’s partner ecosystem creates solutions focused on customer business outcomes by delivering impactful, multi-dimensional solutions across industries and regional theaters. Splunk shifted the focus to partners that deliver value through building, selling, advising, servicing and delivering managed services to drive higher partner and customer adoption across the company’s offerings. The new Splunk Partnerverse program anchors the company’s partner strategy. Splunk Partnerverse builds on Splunk’s global brand, expands the company’s customer reach through partners, and reinforces Splunk as both cloud-ready and partner friendly. Splunk organized its partner strategy to align and support all partner types with a focus on the connected ecosystem and partner-centric routes to market: Cloud Service Providers (‘CSP’): Strong partnerships with CSPs (e.g., Amazon Web Services and Google Cloud) are the cornerstone of the company’s cloud services. The online storefront known as a cloud marketplace offers customers an alternate way to conduct transactions. The company’s marketplace business is driven primarily by customer demand and the company will meet its customers where and how they want to buy. The company is coordinating product development, sales efforts, and ongoing marketing efforts with these key partners to promote the company’s products running on a CSP’s infrastructure. Global Systems Integrators and Managed Services Providers: These partners support planning, implementation, and management of end-to-end business solutions tailored to specific customers, segments, and industry verticals. The company focuses on full-stack market solutions that partners manage to ensure the company’s customers have access to the best expertise, technology, and solutions for optimal performance, security, and technology operations. The company is working with this partner set to develop and deploy Splunk platform-based solutions to their customers, extending the company’s overall market reach and total addressable market. The company further intends to establish select core business groups to increase the company’s joint selling opportunities, explore new solutions, and promote Splunk’s strength in Security and Observability. Splunk Community Engagement The company engages with the community of Splunk users, including Splunk employees, partners, and customers, through a variety of online and in-person forums to assist with Splunk skills development. Additionally, the company’s engagement with users empowers the development of Customer and Partner solutions, drives cross-pollination of experiences and best practices, and provides feedback on current and planned future offerings and capabilities. The company’s primary online forums include Splunk Answers, Splunk User Groups, and Splunk Ideas. In Splunk Answers, users share best practices about how to build searches, create data visualizations, build implementations to address specific use-cases and configure and deploy the company’s cloud services and license offerings. While the company’s product, support, engineering and professional services teams participate in Splunk Answers, the majority of questions appearing on Splunk Answers are answered by other Splunk users, including the SplunkTrust, a peer-nominated, MVP group of Splunk users. Splunk Ideas is a forum through which the community can submit and vote on ideas for new product offerings and capabilities, providing a highly-refined set of inputs to the company’s product development efforts. The company also maintains active communities on leading social internet platforms, including Facebook, Twitter, LinkedIn and Slack. Comprehensive enablement for Customer and Partner solutions developers is provided on the company’s Splunk Dev portal. Splunk Dev contains resources for building apps, integrations, and other Customer and Partner solutions content that extends the Splunk offerings to new data, insights, and use cases. Developers can sign up for free licenses or access to support both their on-premises and cloud-native application needs. Additional resources made available through Splunk Dev include developer guides, API references, tutorials, downloads, tools and examples to help developers efficiently create new solutions. The company also continues to support the growth of the Splunk Community, with local Splunk User Groups around the world and a growing collection of Splunk-sponsored events, such as .conf, and other regional and local events. Customers As of January 31, 2023, the company had customers in more than 130 countries and the company’s offerings had been deployed by over 90 of the Fortune 100 companies. The company provides offerings to customers of varying sizes, including enterprises, educational institutions and government entities. The company’s customer base spans numerous industry verticals, including education, financial services, government, healthcare/pharmaceuticals, industrials/manufacturing, media/entertainment, retail/ecommerce, technology, and telecommunications. History Splunk Inc. was founded in 2003. The company was incorporated in California in 2003 and was reincorporated in Delaware in 2006.