Splunk License Sizing Calculator

01 Environment Sizing Factor

Small Medium Large

Scales every per-unit rate. Rates are calibrated on Medium-size environments; Small / Large adjust for quieter or busier servers.

02 Users & Servers No. of Employees users Drives firewall, cloud/SaaS, and part of the Windows data. No. of Windows Servers servers Drives wineventlog + Sysmon along with the employee count. No. of Linux Servers servers

03 Databases

PostgreSQL servers Oracle servers MSSQL servers

04 Firewall Firewall Vendor scales / employee Firewall log volume tracks traffic, so it scales with employees - not the number of appliances.

05 Cloud / SaaS Sources Microsoft 365 (o365) Microsoft cloud services Cloudflare Each scales with the employee count.

Estimated License

Enter your environment details to estimate daily ingestion.