Splunk eyes industry, enterprise expansion: Can it scale sales?

Splunk eyes industry, enterprise expansion: Can it scale sales?

Summary: Splunk wants to be an enterprise standard for analytics and big data, but first has to expand its role in various industries.


Splunk has a throughput problem and plans to throw money and salespeople at the issue so it can grow its total addressable market. Splunk's goal is simple yet hard to execute: Become an enterprise standard.

How many companies have such demand that they have to figure out how to attack new industries with an army of sales folks? That takeaway is the bottom line for Splunk, which incidentally missed its earnings target for the fourth quarter but is getting a free pass due to revenue growth.

Splunk reported strong fourth quarter growth and followed up this morning with a partnership with Symantec, which will use the company's platform for security investigations. Symantec will be a big customer and partner for Splunk, which has a lot of momentum in both security and IT monitoring.

What has analysts so giddy about Splunk is that the company's algorithms and big data monitoring tools---with improving user interface---can be applied to financial services, fraud, telecom and a bunch of other industries.

splunk chart


Pacific Crest analyst Brendan Barnicle calls Splunk's opportunities "cavernous." He said:

The potential use cases for Splunk's technology are vast. So vast, in fact, that we believe the sales team may not be attacking each vertical with optimal efficiency. Management is aware of this, and has taken the first step by segmenting the sales team by client size. As Splunk achieves greater scale, we believe it will ultimately segment its sales team by industry vertical.

In other words, Splunk will follow the well worn playbook of most enterprise software vendors. Enterprise technology companies woo the big accounts, land an industry leader and then a whole vertical follows. From there, a software company can own an industry. Oracle and SAP use this approach very well.

There are a few caveats for Splunk though. For starters, it's unclear the company can get the sales efficiency it needs. You don't hire hundreds of sales people without growing pains. There are also competitors coming into the market, but you'd never know it from Splunk's results---7,000 customers and growing six and seven figure deals.

Cowen analyst Peter Goldmacher said:

Splunk’s total addressable market is only constrained by customer creativity, and customers are getting more creative every quarter. The momentum in the business, specifically the percentage of sales from existing customers, validates the company’s decision to accelerate investments in growth, in our view. In addition to more quota carrying reps, the company is going to build out domain expertise in specific areas to drive penetration beyond the layer of sophisticated customers that inherently understand the opportunity of analyzing machine data.

Splunk CEO Godfrey Sullivan listed a bevy of customers and new use cases on the company's earnings conference call. This fiscal year will be the one where enterprises broadly adopt Splunk. Sullivan seems to really dig this enterprise thing.

If you look across our large customers, we may be in two-thirds of the Fortune 100. But in most cases we enter in a single use case and we are there for a while and then we work our way across departments and all that.

Where I want to be is just like where we are with Intuit, where they have basically announced that they have standardized on us for all machine data analytics and they are using us everywhere throughout the Company. That's our opportunity with every customer is for them to use us all across the board. Not just in one department or two departments.

When I think about us becoming an enterprise vendor and successful at the enterprise scale, it's really about us being as ubiquitous in every one of our customers as an operating system is or as a data base or as an enterprise data warehouse, where they're using us for as many use cases as we can give them value.

I just think we have such a long way to go there. I'll be on this enterprise kick for a few more years.

Topics: Enterprise Software, Big Data

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.


Log in or register to join the discussion
  • Way too expensive

    The product is wonderful, I would love to be using it in my environment. However the pricing is ridiculous. It's based on the Gigabytes / day that you want to process. In a small environment, with ~75 servers, ~6 VM hosts, a couple ASA's and other random stuff I was able to easily generate 3GB of data a day in processing. To ask my to pay close to $30k/yr for that is absurd.
  • Too expensive? What is the cost of a down revenue bearing website?

    For those who say Splunk is too expensive have no vision. These are the same people who are willing to spend $100k and see more value in commodity hardware or spend the same or more on 15 different "tools" that do a fraction of what Splunk does and require heavy maintenance and integration.... but won't spend $30K on software that actually adds value to their job, their company and potentially their profit.

    Besides the fact the Splunk has come out with new pricing model to make it easier for small entry level customers who do 3-10GB of data, they offer models that are subscription and cloud based, including using Amazon AMI as an cloud option.

    Splunk is the Swiss army knife of data and can be used in any heterogeneous environment, which it has proven over and over. They are Splunking cars for Ford and elevators in Japan. Splunk is not a tool, but a platform for data that can drive all kinds of value and return, if you have the creativity in you.

    So I ask, next time your revenue bearing website is down and your customers can't buy product from you for 3 hours or you get hacked and you release sensitive information that you didn't know was there, how focused will you be on the price then? How important would it be to see who is accessing your network from all over the world (who is supposed to be and who is not) or who is not following security compliance policies that put your company and IP at risk? How valuable to your organization would it be to reduce release cycles in development and resolving problems significantly faster than how you do it today?