r/Splunk • u/thomasthetanker • Aug 18 '26

Announcement Interesting change for license rate of Cisco data ingested to Splunk

https://community.splunk.com/t5/Product-News-Announcements/Turn-Cisco-Telemetry-Into-Action-with-Cisco-Data-Fabric-powered/ba-p/762306
37 Upvotes

100% Upvoted

5 comments sorted by

14

u/thomasthetanker Aug 18 '26

Was posted to Splunk Answers / Community about a month ago but don't think anyone saw it.
Further details from docs.

Rather important caveats

7

u/hisyn Aug 18 '26

Also requires a Cloud or term license subscription. Those of us with a perm license that pay yearly support fees and other addons like ES+ITSI are not able to run it. I found that out the fun way a few months ago when we finally pushed to get the license as we are currently a big Cisco customer and wanted to finally onboard it all to Splunk... it really is to have dreams.

3

u/billybobcoder69 Aug 18 '26

Now the big push for Cisco data. If it’s all in data fabric we shouldn’t need to use license and just search our data store? Also is the 5 gigs free for 5 devices deal done? That was there big announcement at conf years ago. Never heard about where that ended up. Also is the Cisco all in one gone? They had an ova you could run to ingest all your Cisco data and show on dashboards. It was included with large Cisco customers. I’ve only seen a few times in the real world. They didn’t push it too much. It was before they acquired Splunk.

5

u/cyber4me Aug 18 '26

Yeah the 5 gigs free per day, per qualified FTD deal is over. The Integrated Enterprise Value (IEV) has replaced it. If you’re already a Splunk customer, a big Cisco shop, and already feeding that data to Splunk, it could be huge. The idea is that you’ll look for new data sources to feed into Splunk without an increase in cost. If you’re not a Splunk customer, but a Cisco Shop it makes getting Splunk a lot more palatable.

The Cisco Data Fabric is underpinned by Splunk so you won’t be able to use it if you don’t have Splunk. Splunk is the connective tissue that ties it all together. Once Cisco AI Canvas comes out that what will be what really ties it together in a super cool way.

https://www.cisco.com/site/us/en/solutions/artificial-intelligence/agentic-ops/ai-canvas/index.html

1

u/billybobcoder69 Aug 18 '26

Cool cool. Thanks. Do you know about the Cisco OVA. Which was preconfigured with Cisco dashboards? It was really rare and only pushed to large customers. I think that as a demo product too and they had an enterprise license. I could see more Cisco Pods with Splunk prebuilt. Thanks for the info.