Splunk Enterprise Security Editions

Splunk Enterprise Security

Unify TDIR
Reduce tool sprawl
Accelerate with AI
Empower the SOC

Tired of disconnected tools? Meet the new standard for threat detection, investigation, and response. Enterprise Security (ES) is a unified TDIR platform — seamlessly integrated with agentic AI, SOAR, UEBA, and SIEM.

Splunk Enterprise Security Editions

Enterprise Security (ES) Editions is a unified platform for threat detection, investigation, and response — seamlessly integrated with agentic AI, SOAR, UEBA, and the market-leading SIEM.

Take a guided tour

Stop letting SOC challenges hold you back

Data shows what obstacles SOC teams are up against — and why it's time for a more effective threat detection, investigation, and response solution.

Evolving Risk

46%

of SOC team members say that alerts lack sufficient context in their workflow.

Complex Workflows

59%

spend too much time or effort maintaining tools and associated workflows.

Skills Gap

53%

of organizations report that their SOC does not have the expertise to create effective detections.

Complete business visibility and real-time troubleshooting across any environment

Observability for the entire enterprise

Splunk Observability ensures digital resilience of your apps, infrastructure, and business processes by providing complete visibility into performance problems, their root causes, and business impact — enabling teams to resolve issues faster and focus on what matters.

Splunk AppDynamics

Correlate performance metrics with business outcomes.
Secure applications from inside your runtime environment.
Optimize performance of SAP and non-SAP systems (hybrid and on-prem).
Identify how network, ISP, API, SaaS, and third-party services affect your applications’ users.

Explore AppDynamics

Splunk Observability Cloud

Combine application, infrastructure, and digital experience monitoring — all in one place.
Detect and investigate issues confidently using all your metric, trace and log data, with zero sampling and AI-assisted troubleshooting.
Leverage OpenTelemetry instrumentation and built-in consumption controls to gain better control over your data and costs.

Explore Observability Cloud

Splunk IT Service Intelligence

Accelerate mean time to resolution with intelligent incident management.
Protect KPIs and SLAs with dashboards that monitor service health, business metrics, and their supporting systems.
Prevent issues before they impact performance with machine learning and predictive analytics.

Explore IT Service Intelligence

Splunk Platform

Get unified security, full-stack observability, and limitless custom applications with an extensible data platform.
Gain comprehensive visibility at scale, accelerate detection and investigation with shared tooling, and optimize response with automated workflows.

Explore Splunk Platform

The Splunk Advantage

Integrated with Splunk Cloud Platform

Accelerate troubleshooting in the Splunk platform by previewing metrics and traces from Observability Cloud alongside your log data in Splunk search and reporting.

All your logs in context

Automatically correlate and analyze logs at petabyte-scale alongside real-time metrics and traces to identify root causes faster.

Collect Telemetry Data in Any Format

Collect, access and analyze unstructured data in Splunk or third-party storage, and avoid vendor lock-in with OpenTelemetry-based instrumentation.

Learn more

What’s Included	Basic	ES Essentials	Advantage	ES Premier
Security monitoring Monitor across on-prem, hybrid, and multi-cloud in real time to spot threats early and reduce risk.	✓	✓	✓	✓
Threat detection Detect threats quickly and accurately with RBA and Detection Studio to get real-time monitoring, advanced analytics, and threat intelligence.		✓	✓	✓
Threat investigation Uncover the details of any threat using an integrated platform that combines advanced search, correlation, and analytics to enable collaboration, efficient workflows, and rapid response.	✓	✓	✓	✓
Automation Automate tasks, orchestrate workflows, and run customizable playbooks with SOAR available to every analyst.			TBD	✓
Threat hunting Leverage powerful search, correlation, analytics, and threat intelligence enrichment to uncover hidden and emerging threats.			TBD	✓ (not available at .conf)
Insider threat detection Spot insider threats early with real-time monitoring and advanced machine learning to flag anomalies, and trigger high-fidelity alerts.				✓

Customer outcomes for communications and media

See all customer stories

Get started

Take a Guided Tour

See Splunk Cloud Platform in action

See why Splunk is an 11-time Leader in the Gartner® Magic Quadrant™ for SIEM

See how Splunk is a 3-time Leader in the Gartner® Magic Quadrant™ for Observability Platforms

Support

Splunk Enterprise Security

Unify TDIR

Reduce tool sprawl

Accelerate with AI

Empower the SOC

Splunk Enterprise Security Editions

Stop letting SOC challenges hold you back

Complete business visibility and real-time troubleshooting across any environment

Observability for the entire enterprise

Splunk AppDynamics

Splunk Observability Cloud

Splunk IT Service Intelligence