Splunk On-Call plans and prices in 2026
| Source | What it says | How far to trust it |
|---|---|---|
| Splunk pricing page | "Starting at just 5 USD per user, per month, billed annually for up to 10 seats" | Official, checked October 2026 |
| Splunk pricing page, above 10 seats | Seat-based pricing by quote, sold direct, through Splunk partners and through the AWS and Google Cloud marketplaces | Official, no number given |
| Software directories (Capterra, Software Advice) | Three plans: Starter at 10 USD, Growth at 35 USD and Enterprise at 45 USD per user a month | Third-party listing, not confirmed by Splunk |
Splunk offers a free trial of On-Call. There is no permanent free plan on the pricing page.
Two things follow from that table. The 5 USD entry price is one of the lowest in the category, lower than Datadog On-Call at 20 USD and PagerDuty Professional at 21 USD. And the moment an eleventh person joins the rotation, you leave the published price list and the number depends on your negotiation, your Splunk contract and the marketplace you buy through.
What the Splunk On-Call seat includes
Splunk describes On-Call as on-call schedules, rotations, overrides and escalation policies, alerts to any device with the option to acknowledge, reroute or snooze from the iOS and Android apps, a rules engine that adds context and runbook links to alerts, and reporting on incident frequency, MTTA and MTTR with post-incident reviews. It lists more than 100 IT service management and monitoring integrations.
What the seat does not include is the rest of an incident stack. A public or private status page is a separate product from another vendor, and so is a Slack incident workflow with roles and a timeline. A team on Splunk On-Call typically runs it next to a status page tool and a postmortem template in a wiki.
Is VictorOps pricing different from Splunk On-Call pricing?
No. VictorOps was acquired by Splunk in 2018 and renamed Splunk On-Call, and Cisco completed its purchase of Splunk in March 2024. There is one product and one price list. Old VictorOps plan names that still show up in forum threads and directory pages (and the per-user prices quoted next to them) describe packaging that Splunk no longer sells, so do not budget from them.
What does Splunk On-Call cost for 5, 15 and 40 users?
Monthly cost. The first row uses Splunk's published price. The rows marked "directory list" use the monthly per-user figures that software directories report, which are a ceiling to negotiate down from, not a quote.
| Setup | 5 users | 15 users | 40 users |
|---|---|---|---|
| Splunk On-Call published entry price (5 USD, annual, up to 10 seats) | 25 USD | Quote only | Quote only |
| Directory list, Growth at 35 USD | 175 USD | 525 USD | 1,400 USD |
| Directory list, Enterprise at 45 USD | 225 USD | 675 USD | 1,800 USD |
| IncidentBot Starter (24 USD, annual, 1 public status page) | 120 USD | 360 USD | 960 USD |
| IncidentBot Team (49 USD, annual, 3 status pages, unlimited SMS and voice under fair use) | 245 USD | 735 USD | 1,960 USD |
For a team of 5 to 10, Splunk On-Call at 5 USD a seat is far cheaper than IncidentBot for paging alone, and cheaper than almost anything else. If all you need is a rota and a pager for a small team, take that price.
Past 10 seats the picture is less clear. Splunk sells On-Call direct, through partners and through cloud marketplaces, so a company that already has a Splunk or Cisco agreement will often see the seats added to it, and the per-seat number then depends on what else is in the deal. Ask for the On-Call line to be itemized, so you can compare it with a standalone tool at renewal.
What moves a Splunk On-Call quote
- Seat count against the 10 seat threshold. A team of 9 that hires two engineers changes price list, not only head count.
- Plan level. Directory listings show three tiers. Ask which one carries the rules engine and the reporting you use today, because the entry price may not.
- Contract vehicle. Buying through an existing Splunk agreement, a partner, AWS Marketplace or Google Cloud Marketplace can change both the discount and the term.
- Term length. Multi-year commitments lower the seat price and remove your chance to resize the team's seat count each year.
- What sits next to it. Add the status page product and any incident workflow tool to the comparison, because a standalone quote for On-Call leaves them out.
Is Splunk On-Call cheaper than PagerDuty?
At 10 seats or fewer, yes, by a wide margin. Above that, it depends on your quote. List prices per user per month at annual billing, checked on each vendor's site in September and October 2026:
| Tool | Entry on-call price | Published price above 10 users | Status page |
|---|---|---|---|
| Splunk On-Call | 5 USD, up to 10 seats | No, by quote | Not included |
| PagerDuty | 21 USD Professional | Yes, 21 USD, then platform plans from 2,800 USD a year for 10 seats | External page on Professional with 250 subscribers |
| Datadog On-Call | 20 USD, SMS and voice included | Yes, 20 USD, or 40 USD with Incident Management | In Incident Management or the bundle |
| AlertOps | 8 USD, up to 10 users | Yes, 18 and 28 USD | Status Hub at 50 USD per page |
| IncidentBot | 24 USD Starter | Yes, 24, 49 and 99 USD | 1 public on Starter, 3 public or private on Team |
Every tool in the table except Splunk On-Call prints its price for a team of 15. That matters less to a company already buying Splunk at scale, and a lot to a 15 person engineering team that wants to approve a purchase without a sales cycle. Plan detail for the others is in our PagerDuty pricing, Datadog On-Call pricing and AlertOps pricing breakdowns.
When Splunk On-Call is the right buy
Stay with Splunk On-Call, or pick it, when your alerts already flow through Splunk Observability Cloud or Splunk ITSI and you rely on its alert rules engine to enrich and reroute them. Keeping detection and paging with one vendor has real value, and a seat inside a larger Splunk agreement is often priced well. It is also the obvious choice for a team under 10 that needs paging and nothing else.
When a standalone tool costs less in total
Compare the whole stack, not the pager. A 15 person team that pays for on-call seats, a separate status page plan (Atlassian Statuspage Startup is 99 USD a month, Business 399 USD) and an incident workflow tool often spends more than one product that covers all three. IncidentBot Team at 49 USD a seat includes schedules, escalation, SMS and voice paging, Slack incident channels with roles, three public or private status pages and postmortem drafts, and people who only read are free. If that is the stack you are replacing, the Splunk On-Call alternative page has the concept mapping and a five step migration plan, including how to move Transmogrifier rules.
What to ask before you sign a Splunk On-Call renewal
- Ask for the per-seat price of On-Call as its own line, even inside a bundle.
- Ask what happens at seat 11 if you are on the 5 USD entry price today.
- Confirm which plan the rules engine, live call routing and advanced reporting sit on, and whether you use them.
- Count stakeholders. Find out whether people who only receive updates need a paid seat.
- Check the term and the true-up rule. A three year term with seats fixed at today's head count is expensive for a team that may shrink.
- Add your status page and incident tooling to the same sheet. Teams that keep every subscription in one place with SaaS spend tracking spot the overlap between a pager, a status page and an incident bot much sooner.
How much does Splunk On-Call cost?
Splunk On-Call starts at 5 USD per user per month, billed annually, for up to 10 seats, according to Splunk's pricing page in October 2026. Above 10 seats Splunk prices by quote. Software directories list monthly plans at 10, 35 and 45 USD per user, which Splunk does not confirm on its own site.
How much does VictorOps cost?
VictorOps is now Splunk On-Call and has the same price: from 5 USD per user a month billed annually for up to 10 seats, and a quote above that. Older VictorOps plan names and prices found online describe packaging that is no longer sold.
Does Splunk On-Call have a free plan?
No. Splunk offers a free trial of On-Call, and the lowest paid price is 5 USD per user a month for up to 10 seats with annual billing. PagerDuty and AlertOps both have a free plan for up to 5 users if you need a permanent no-cost tier for a very small team.
Is Splunk On-Call included with Splunk Observability Cloud?
No. Splunk On-Call is licensed by seat and appears as its own product on Splunk's pricing page, next to the per-host plans of Splunk Observability Cloud. Many customers buy both in one agreement, so ask for the On-Call seats to be itemized.
Is Splunk On-Call being discontinued?
Splunk has not announced an end of life for Splunk On-Call as of October 2026. It is still sold with a free trial and a published entry price. Teams that leave usually do it for a published price above 10 seats and for status pages and Slack incident workflows in the same product.
What is a cheaper alternative to Splunk On-Call for a team of 15 or more?
Tools with a published price for larger teams include AlertOps at 18 USD, Datadog On-Call at 20 USD, PagerDuty Professional at 21 USD and IncidentBot at 24 USD per user a month billed annually. IncidentBot includes a status page and Slack incident channels in that seat, so it replaces two or three subscriptions.
Price your whole incident stack on one line
Run a sample incident with your own escalation policy, then create your account and point one alert source at IncidentBot.