Published May 16, 2026
| Starting Price (public) | Published per-host and per-usage pricing available from the vendor; modular add-ons for application security and feature tiers | Published per-feature and per-usage pricing available from the vendor; additional modules add cost (APM, logs, security) | Published per-host and tiered pricing; higher tiers and bundles available for end-to-end observability and application monitoring |
| Most suited for | Enterprises seeking runtime and topology-aware correlation and consolidation of observability and security events in a unified data store | Teams seeking broad SaaS integrations and modular telemetry plus security modules | Organizations invested in the Splunk ecosystem seeking integrated observability and security capabilities |
| Key Strength | Runtime context and topology-aware correlation; security events retained and queryable in Grail; automation via workflows and notebooks | Wide integration ecosystem; flexible modules; strong dashboarding capabilities | Integration with Splunk’s broader data and security platform strategies |
| Key Weakness | Learning curve (DQL/Grail), platform evolution/migration overhead, potential enterprise minimums; can be complex to configure | Costs can scale with data and modules; budgeting complexity across modules | Enterprise renewal and pricing complexity reported by some customers |