How much does Splunk cost?

Splunk costs $1,500 to $2,700 per GB a day, per year, at small volumes. What changes your price is below.

Splunk charges by how much data you send it each day. A licence for 1 GB a day costs about $1,500 to $2,700 a year at small volumes. The rate per GB drops as you buy more, to about $100 to $200 at 500 GB a day and above. The median buyer pays about $60,000 a year. There is a free version, but it caps you at 500 MB a day and has no alerts.

Estimate your Splunk cost

Pick what you need. The price updates as you go. Got a price already? Check it in the last step.

1Which one do you need?

2Contract

3Got a price?

Quote amount

Optional. We check it.

Is this price fair?

A fair price is $1,500 to $1,800.

Type a price above to check it.

Low$1,650High

Your estimateUS average

$1,500to$1,800

Middle of the range: $1,650

$0$1,220$2,440

Normal range Middle

What you are paying for

1 GB a dayUS range for this job.$1,500 to $1,800

Large or multi year dealContract.Base price

US priceSoftware is priced the same across the US.US price

Middle of rangeHalfway between low and high.$1,650

How we calculate this

Prices are for the United States in 2026 from published cost guides, checked September 2026. This is an estimate, not a quote.

Middle $1,650$1,500 to $1,800

Splunk rates by daily data volume

1 to 10 GB a day	About $1,500 to $1,800 per GB a day, per year.
10 to 50 GB a day	About $800 to $1,200 per GB a day, per year.
50 to 100 GB a day	About $500 to $800 per GB a day, per year.
100 to 500 GB a day	About $200 to $500 per GB a day, per year.
500 GB a day and up	About $100 to $200 per GB a day, heavily negotiated.

What pushes a quote up

Daily data volume	The biggest lever. Every log you keep counts.
Deal size	Large and multi year deals are reported at 40 to 70 percent off list.
Security add on	The SIEM tool, Enterprise Security, is sold on top of the base licence.
Cloud or self hosted	Splunk Cloud includes hosting. Self hosted means you pay for servers too.
Pricing model	Splunk also sells by compute used and by host, not just by data.

How the GB a day meter works

Splunk counts every byte you send it in a day. That includes Splunk's own internal logs and summary data, not just the logs you care about. The meter resets once a day, usually at midnight.

Go over your limit and Splunk notes it. Guides report that 5 breaks in a rolling 30 days can trigger enforcement warnings. So the licence you buy has to cover your busiest days, not your average day. The cheapest fix is to drop noisy logs, such as debug lines and repeated health checks, before they ever reach Splunk.

No price on the site, on purpose

Splunk leaves pricing to its reps. That lets them discount hard for a deal they want and hold firm on one they do not. It also means the only honest numbers are the ones buyers report after signing. Those reports, cross checked with analyst data, are what this page uses.

Pricing is per GB a day, per year, so the main levers in the quote are the tier you pick and the setup fee, not the headcount.

How to judge the quote in your hand

Ask for the rate per GB at your exact volume, then check it against the table above.
Ask for the all in number: licence, setup, training and support for year one.
Ask what renewal looks like in year two and three, in writing.
Get a second quote from a rival and say so on the call.
Buy at quarter end, when reps chase targets.
Cut seats and modules you will not use in the first 90 days.

Ways to pay less

Filter logs at the source so you buy fewer GB a day.
Pay yearly if the discount is real, not just a rounding of the monthly price.
Start on the lowest tier and upgrade when you hit a wall.
Ask for the setup fee to be waived or split over the year.
Check the free trial or demo before you sign anything.

Before you decide

Most Splunk bills grow because data grows, not because rates rise. New apps, new servers and new cloud accounts all send more logs. Set a monthly check on your daily volume, and decide who can add a new data source. A cheap rate per GB does not help if the GB keep climbing.

Also ask about the other pricing models. Splunk sells by compute used and by host as well as by data. If your data is large but your searches are light, a different model may cost less. Ask the rep to price your setup both ways.

Lastly, ask about storage. Keeping data searchable for a long time costs more than keeping it for a few weeks. Decide how long each type of log really needs to stay, and move old data to cheap storage. This one choice can cut a large share of the bill.