Sold by: Splunk
Deployed on AWS
If you are looking for security and operational visibility across your AWS environment including applications, infrastructure and AWS services such as CloudTrail, Config, VPC Flow Logs, and more then Splunk Cloud is the right solution for you.
4.2
Overview
If you're looking for security and operational visibility across your AWS environment - including applications, infrastructure and AWS services such as CloudTrail, Config, VPC Flow Logs, and more - then Splunk Cloud is the right solution for you. Organizations of all sizes leverage Splunk visibility with AWS agility to rapidly troubleshoot applications, ensure security and compliance, and monitor business-critical services in real-time. Splunk Cloud makes it easy to gain end-to-end visibility across your AWS and hybrid environment. Leverage Splunk Cloud with the free Splunk App for AWS to gain critical security, operational and cost optimization insight into your AWS deployment. Whether you're managing applications, infrastructure or a security operations center in the cloud, Splunk delivers Operational Intelligence for a real-time understanding of what's happening across your business and IT so you can make informed decisions. It's easy to get started - and remember - when choosing a product option, match your location and anticipated index volume per day. Splunk Cloud is now FedRAMP authorized: Moderate
Highlights
- Collect and index any machine-generated data from virtually any source or location in real time. Just point Splunk Cloud at your data, and it immediately starts collecting and indexing so you can start searching and analyzing.
- Splunk Cloud offers single-pane-of-glass visibility across on-premise Splunk Enterprise and Splunk Cloud deployments, enabling customers to deploy Splunk as software or SaaS according to their business requirements, while maintaining centralized visibility.
- Splunk Cloud includes support for Splunk apps and other content. Splunk apps deliver a targeted user experience for different roles, use cases and enterprise technologies. These apps can help you visualize data in new ways or provide pre-defined views of leading technologies such as Linux, Windows, VMware and more.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Custom pricing options
Pricing is based on your specific requirements and eligibility. Request a private offer to receive a custom quote. Sign in to view any offers that have been extended to you.
Legal
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Support
Vendor support
Splunk offers a variety of support options to help ensure your success.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
Top
10
In Data Anonymization, Data Security and Governance
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Real-time Data Collection and Indexing
Collects and indexes machine-generated data from virtually any source or location in real time with immediate search and analysis capabilities.
Multi-deployment Visibility
Provides single-pane-of-glass visibility across on-premise and cloud deployments, enabling centralized monitoring across hybrid environments.
AWS Service Integration
Supports integration with AWS services including CloudTrail, Config, and VPC Flow Logs for comprehensive AWS environment monitoring.
Pre-built Application Support
Includes support for Splunk apps with pre-defined views for technologies such as Linux, Windows, and VMware.
FedRAMP Authorization
Maintains FedRAMP Moderate authorization for compliance with federal security standards.
Real-time Data Collection and Indexing
Collects and indexes machine-generated data from virtually any source or location in real time with automatic indexing upon data ingestion.
Complex Event Correlation
Correlates complex events spanning multiple diverse data sources using time-based correlations, transaction-based correlations, sub-searches, lookups, and joins.
Scalable Data Processing
Scales to collect and index tens of terabytes of data per day with distributed computing architecture.
High Availability Clustering
Provides clustering technology for availability and fault tolerance across distributed low-cost computing environments.
Search and Analysis Capabilities
Enables searching and analyzing of indexed machine data with visualization capabilities for operational intelligence.
Data Routing and Destination Management
Routes data to multiple destinations with capability to deliver specific data to targeted tools while archiving full fidelity data to cost-effective storage
Data Optimization and Reduction
Reduces data streams by up to 50% through removal of unused log and metric data
Event Processing and Transformation
Processes event data through centralized parsing with capabilities to route, optimize, reformat, and enrich data in flight
Role-Based Access Control
Implements role-based access control with support for external authentication via LDAP, Splunk, and OpenID Connect identity providers
Real-Time Monitoring and Configuration
Provides GUI-based configuration and testing interface with real-time capture and monitoring of observability pipeline
Standard contract
No
No
No
Customer reviews
AbhishekKalokhe
Versatile cloud monitoring has improved anomaly detection and supports diverse hybrid workloads
Reviewed on Oct 26, 2026
Review from a verified AWS customer
What is our primary use case?
I have mostly been an integrator. I do utilize Splunk Cloud Platform's machine learning capabilities for creating detection logic and some use cases; I have used the MLTK.
What is most valuable?
In Splunk Cloud Platform, I would say the versatility is the most valuable feature. It is very easy to bring in the ingestion compared to some other tools. I think that is the easiest way to work with the SIEM platform.
For predicting system anomalies, I would say that for detecting a pattern, it is really good in Splunk Cloud Platform. When it really comes to detecting something which is very unique, then I think some other platforms excel compared to Splunk Cloud Platform. However, when it is simply detecting and behavioral-based observation, then it does a decent job.
My impression of Splunk Cloud Platform's visibility into multiple environments such as cloud, on-premises, and hybrid is positive. I have worked on all: on-prem, cloud, Splunk Cloud Platform on AWS, or any private cloud.
What needs improvement?
In Splunk Cloud Platform, if there is native support for Kubernetes and some other automation tools, then it would be a really massive upgrade, I would say.
For Splunk Cloud Platform, they should give native support, as I mentioned earlier, to the Kubernetes platform. Particularly for the SOC, I think they should improve their SOC capabilities. Other tools have been working on their real-time alerting much better than Splunk Cloud Platform. I think they have fallen behind a little, so they should catch up.
For how long have I used the solution?
I have been dealing with Splunk Cloud Platform for at least eight years now.
What do I think about the scalability of the solution?
The platform's ability to scale compared to my customer's demand fluctuations indicates that some other tools are working a little better than Splunk Cloud Platform because they natively support automation such as Kubernetes. Splunk Cloud Platform does not support it.
I would say for on-prem, if you are trying to build on AWS cloud or any private cloud, then it is a little hectic compared to other tools. However, it works well. Also, the amount of logs that pass through between the indexes means the billing can be more compared to other tools. There are some disadvantages and advantages.
How are customer service and support?
I would rate their job from one to ten as really good. If you open a P1 case with them, they are very fast and eager to connect with you and solve the problems and issues. I would say they do a very good job.
For technical support, if it is a P1 case, I would give them a nine out of ten. However, what I have observed is that when the case is P3 or P2, I would rate them a seven out of ten.
How was the initial setup?
My experience with the deployment of Splunk Cloud Platform is now straightforward. I have been working for about eight years, so for me, it is straightforward. However, during my initial working days, I can remember it could be troublesome depending upon the case. Now I find it very useful. I would say it is really simple.
What's my experience with pricing, setup cost, and licensing?
Regarding the pricing of Splunk Cloud Platform, I think for what they offer at that price, they are perfect for the SIEM and the SOC. If you compare with the other tools, they do not excel as Splunk Cloud Platform does, at least personally for me. I would say the pricing is good and they are competitive. They can be expensive, but what they offer at that price, I do not think any other tool can match that.
What other advice do I have?
I would rate Splunk Cloud Platform overall as an eight.
My customers purchase their Splunk Cloud Platform from third-party sources through their resellers, and my clients have bought from them.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Siva ChaitanyaKakarla
Cloud security monitoring has become streamlined and operations team now focuses on threat analysis
Reviewed on Oct 23, 2026
Review provided by PeerSpot
What is our primary use case?
The primary use case we are using is enterprise security.
How has it helped my organization?
Splunk Cloud Platform typically see faster issue resolution, improved security posture, easier compliance, operational cost savings, and greater business agility thanks to unified data analytics and the scalability of the cloud
What is most valuable?
I have found the features that are most valuable to be the upgradations and everything taken care of by the Splunk TechOps team. They handle the architecture and infrastructure, so we only need to do pre-checks and post-checks.
My experience with Splunk Cloud Platform's app ecosystem includes using many custom add-ons and apps, as well as the base apps. We need to upgrade those and take care of that. The Splunk TechOps team took over the version upgradations, so for add-ons and apps upgrades, I need to take care of that.
My impression of Splunk Cloud Platform's visibility into multiple environments such as cloud, on-premises, and hybrid is that it is great, with cloud being the best option nowadays. We do not want to maintain the infrastructure or the servers, and we do not want to upgrade the on-premises servers or handle OS-related issues.
It is a better opportunity to go with cloud only, where they take over the OS upgrades and Splunk version upgrades.
My impression of Splunk Cloud Platform's zero-setup feature for AI models is that I currently have not had a chance to use the AI on the Enterprise Security side, but my team is already using it. The AI shows whatever issues we face, making it easy to find the answers through AI. We are also writing the SPL queries quickly through AI.
What needs improvement?
Splunk Cloud Platform is working well for improvements, such as adding new add-ons rapidly compared to other tools. However, when they upgrade to a new version or introduce new features into Splunk Cloud Platform, they need to provide proper guidance on how to use those new features. For instance, with AI, they need to explain how and where to use it.
The Splunk Cloud Platform team, especially the TechOps team, needs to provide calls to explain how to use these features, as they do not currently provide anything. They release new features without giving us insight on how to verify them through documents, which can be quite challenging. They need to provide guidance to customers, explaining what the new features are and how they can be useful.
The additional features I would like to see in the future to make it closer to a ten might include any new features they are interested in adding, but they need to better explain these features to customers. They need to improve in this area, as in the three years I have worked with them, they have not set up calls to explain new features, how to use them, and their benefits. Instead, we have to sift through documents to check on any new features and how we use them. If they provided these calls, it might help reach a score of ten.
For how long have I used the solution?
I have been working with Splunk Cloud Platform for the last three years.
What do I think about the scalability of the solution?
Regarding Splunk Cloud Platform's ability to scale and how it aligns with my organization's demand fluctuations, we do not see any issues on the platform side because they took over everything.
Whenever we get any issues, we directly raise a P1 or P2, and they took over that without us having any issues on the platform side.
How are customer service and support?
I would rate the technical support by Splunk a seven.
I would like to improve their technical support in response times, as they need to improve response times. Sometimes for P3 cases, we are unable to raise a P1 or P2 due to infrastructure availability, but when the infrastructure is available, sometimes other things are not working, making us unable to open P1s and P2s.
For P3, they give a response time of about twenty-four hours, which is a lot of time. They need to improve on that.
How was the initial setup?
Splunk Cloud Platform's initial setup is straightforward as it is easy to deploy everything.
Usually, it takes about five to ten minutes to deploy any add-ons and custom add-ons.
What's my experience with pricing, setup cost, and licensing?
Regarding the pricing, I do not find it reasonable or competitive as I am not aware of the licensing issues because I am not that person.
What other advice do I have?
I would rate Splunk Cloud Platform an eight overall.
Splunk Cloud Platform is popular in my region, as many companies in my region already use multiple Splunk products.
reviewer2913942
Flexible data analytics supports security, operational visibility, and broader business value.
Reviewed on Oct 20, 2026
Review from a verified AWS customer
What is our primary use case?
I advise customers on using Splunk Cloud Platform to bring together and analyze logs and other machine data for security monitoring, troubleshooting, and operational visibility. My focus is on identifying business outcomes and opportunities to reuse data across multiple use cases. I do not operate the platform within my own organization.
What is most valuable?
What are Splunk Cloud Platform's best features? Why?
What I value most is the flexibility to search, correlate, and visualize data from different sources. This supports discussions that start with a business problem and then identify the data needed to address it, rather than limiting the conversation to a single predefined application.
Search, dashboards, and alerting can help teams investigate issues and make operational information easier to understand. The ability to use relevant data across multiple use cases is particularly valuable when customers want to connect security monitoring with broader operational visibility.
It is important to distinguish the platform from complementary products.
Splunk Cloud Platform, provides a foundation for data analysis, while requirements such as a full SIEM solution or application performance monitoring may call for additional products, capabilities, and configuration.
A public customer example of the broader Splunk platform's potential is Zeppelin . Splunk's published customer story describes how Zeppelin uses operational and equipment data, together with machine learning, to identify potential faults and support predictive maintenance. This illustrates how data analysis can help organizations move from reactive troubleshooting toward more proactive maintenance.
I was not involved in that implementation. The published case uses Splunk Enterprise, Splunk Machine Learning Toolkit, and Splunk DB Connect; it should therefore be understood as an example of the broader Splunk platform rather than a reference deployment of Splunk Cloud Platform.
What needs improvement?
More ready-to-use configurations, guided workflows, and clear reference architectures would help customers turn business requirements into working solutions faster. Simplifying app selection and configuration would benefit teams with limited specialist resources. Clearer guidance on when to use Splunk Cloud Platform and when to add complementary security or observability products would also improve project scoping and time to value.
For how long have I used the solution?
I have been working with Splunk Cloud Platform in a customer advisory capacity for more than seven months. My experience focuses on discussing business requirements and potential use cases rather than administering an internal deployment.
What do I think about the scalability of the solution?
I consider scalability one of Splunk Cloud Platform's strengths. However, I have not personally carried out capacity planning or load testing.
For a specific deployment, I would ask a technical specialist to validate the expected data volumes, search workloads, retention requirements, and service capacity against the customer's needs.
How are customer service and support?
My overall impression of Splunk's technical support is good to excellent, and I would rate it eight to nine out of ten. This reflects my advisory perspective rather than day-to-day ownership of support cases for an internal production deployment.
What's my experience with pricing, setup cost, and licensing?
From an advisory perspective, I assess pricing in relation to the customer's intended outcomes and total cost of ownership rather than license cost alone.
For a narrowly scoped requirement, customers should carefully assess whether the expected benefits justify the investment. The value proposition can become more compelling when the platform supports several relevant use cases and allows data to serve multiple teams or business objectives.
However, broader usage does not automatically mean lower costs. Customers should understand the applicable licensing model, expected usage, data retention requirements, additional products, implementation services, and ongoing administration.
Implementation effort depends on the environment, data sources, integrations, and desired outcomes. I would avoid assuming a fixed deployment timeframe or making a general pricing comparison with another vendor without a like-for-like scope.
What other advice do I have?
I would rate Splunk Cloud Platform nine out of ten, based on my customer advisory experience.
My advice is to start with a clearly defined business problem and measurable success criteria. Identify the necessary data sources, confirm which products and capabilities are required, and involve experienced technical specialists early.
Start with a manageable use case that can demonstrate value, then expand where there is a sound business case. Evaluate implementation effort and ongoing operating costs alongside the platform's flexibility.
Laurentiu Popescu
Log analysis has improved incident insights and currently provides reliable security monitoring
Reviewed on Oct 06, 2026
Review from a verified AWS customer
What is our primary use case?
I have not utilized Splunk Cloud's machine learning capabilities as we just started.
I have not used Splunk Cloud's integration with third-party applications.
I track some false-positive indicators to measure the effectiveness of Splunk Cloud's real-time data processing.
I track approximately an 80% rate of false positives.
What is most valuable?
The log analysis features of Splunk Cloud have been the most valuable to me.
The data encryption and access controls work fine for my needs, so I assess their value as satisfactory. I am satisfied and would rate them a nine.
What needs improvement?
I see room for improvement in the area of reporting, especially the reporting dashboard for Splunk Cloud.
I am not expecting any additional features in the future because I have not explored the current features fully yet.
For how long have I used the solution?
I have been working with Splunk Cloud for about two years.
How are customer service and support?
I would rate their technical support as a 10 out of 10.
What's my experience with pricing, setup cost, and licensing?
I think the pricing of Splunk Cloud offers a good quality-price ratio.
What other advice do I have?
I would rate my overall experience with Splunk Cloud as a nine out of ten.
Haresh Nankani
Cloud dashboards and alerts have transformed how our team monitors production in real time
Reviewed on Sep 20, 2026
Review from a verified AWS customer
What is our primary use case?
Currently, our main use cases for Splunk Cloud Platform involve using dashboarding and alerting most of the time.
We also have scheduled reports that run daily to feed data into those dashboards, and we are actively using alerts to notify in the Webex channels about any issues that have occurred in production on a real-time basis.
What is most valuable?
I appreciate the fact that you can quickly click and create dashboards and alerts without having to spend too much time writing SPL queries to get your results.
Additionally, the fact that it is so much faster than Splunk Enterprise allows us to see things churn quickly.
Since the time I joined this organization, Splunk has been a very important tool for collecting the logins and the events. My organization has been using Splunk Enterprise for a very long time, and very recently, we migrated from Splunk Enterprise to Splunk Cloud Platform. My role has been as an end user of Splunk to see how all the migrations have completed successfully. Now in my current role, I am responsible for creating alerts and dashboards in Splunk Cloud Platform to assist with all the monitoring in the production environment.
What needs improvement?
I cannot say what improvements can be made right now because we have just migrated to Splunk Cloud Platform. I wish I could say more.
For how long have I used the solution?
I have been using Splunk Enterprise for almost seven years. With Splunk Cloud Platform, we have recently migrated, and it has been just over a month.
What do I think about the stability of the solution?
We have not seen benefits right away because we have just started to migrate to Splunk Cloud Platform.
We have been using Splunk Enterprise for a very long time, which has had its benefits, and now we want to migrate to the cloud to see how that can help us.
What do I think about the scalability of the solution?
Splunk Cloud Platform's ability to scale is a very important feature because it aligns with our demand fluctuations, which is why we migrated to Splunk Cloud Platform.
Splunk Enterprise was not scaling as the demand for Splunk usage grew, leading us to face issues that encouraged our migration to Splunk Cloud Platform to support the additional usage from multiple users.
We now expect it to scale and help all additional users benefit from Splunk Cloud Platform.
How are customer service and support?
I rate the customer service technical support for Splunk Cloud Platform at seven, primarily because we have been getting answers from a Splunk POC who has been on-premises helping us out.
However, we have had some delays in getting answers to certain issues we faced during migrations, which has taken some time and resulted in some churn to get resolutions.
What other advice do I have?
Our team has primarily been using AWS services, and the entire team has been using it for all of the seven years we have been here.
Currently, our workloads vary from a very low client headcount early in the day to peak times during the evening hours when people are using more of the network.
Our top priority for using AWS Cloud includes having a lot of different advantages, one of the primary ones being the serverless concept. Instead of having fixed VMs where everything is being hosted, we are now hosted on the cloud, which alleviates worries about scaling our performance at scale. There are many different advantages for which we migrated from on-premises to cloud, including avoiding issues with failovers, which has been facilitated by using AWS.
For cloud migrations, you have to really be aware of what you need to migrate. You need to prioritize everything that you need to work with and also take into account everything that is being done step by step to ensure a smooth transition from your current on-premises resources to the cloud.
You need to start with prioritizing what you really need to migrate, beginning with a prioritizing list. From that point on, you take small steps to migrate whatever is important, followed by migrating the less critical jobs or aspects. Once the migration is done, you verify everything to ensure that your business-critical aspects are taken care of, and you are not missing anything.
My experiences with deploying Splunk Cloud Platform are relatively new, but I can discuss Splunk Enterprise, which has really benefited us significantly. We have been able to do a lot of analysis using Splunk, and we have gained a lot of insight into our applications through it.
Something interesting that happened at the conference before we started is that I went into a session not knowing what to expect, and I went into a completely wrong session that was about edge processor, which is not what I intended to attend.
When I checked my schedule, I realized this is not where I was supposed to be, and I did not even know how to configure Splunk edge processor, so it was a completely different session than what I planned.
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)