Splunk purchase
From UGCS
Pricing
- Two licenses, free and enterprise
- Difference between them: 500MB limit of data indexed per day. Full list of differences: http://www.splunk.com/product/2018
- Cost for cheapest enterprise: $6000 for a perpetual license. Pricing: http://www.splunk.com/store/home ($5000 for the license plus $1000 for required 1 year of splunk plus support)
Bargaining
- Pros
- Slick interface
- Adaptive - low configuration
- LDAP integration on enterprise versions
- Cons
- Web interface misbehaves in Firefox (intercepts forward/back keypresses)
- HTTPS support?
- Questions
- How is this different/better/integrated with Prelude?
- Why should we buy Enterprise?
- Auth: We can just firewall it to localhost and tunnel in
- We don't need to hierarchy multiple Splunks,
- Kerberos integration?
- Extensibility (Written in Python?)
