Military Audit - Splunk

Domain: Military - Military / Defence Entity scope: Splunk Inc. - the SIEM / security-analytics software company (acquired by Cisco Systems, March 2024, now a Cisco business). Splunk-brand/corporate’s OWN acts are in scope; Cisco-parent’s separate military/Israel supply relationships (since March 2024) are documented below and attributed at parent level, and reseller-tier supply (via the Israeli integrator EMET Computing) is distinguished from direct Splunk-corporate procurement. Compiled: 2026-06-24 Method: Live web search only

Direct Defence Contracting & Procurement

IDF - reseller-mediated supply (Splunk-brand, pre-acquisition). A January 2019 Israel Defense article reported that “the Israeli military (IDF) is one of Splunk’s major clients in Israel,” quoting an IDF statement: “the IDF maintains an extensive range of agreements with suppliers in the field of data extraction, including the Splunk Company, for the benefit of improving the operational effectiveness of the IDF.”¹ The article noted Splunk had operated in Israel through integrators such as EMET Computing and was preparing a local sales office.¹ This is an IDF-acknowledged supply relationship at the reseller/integrator tier (Splunk → EMET Computing → IDF); no directly disclosed Splunk-corporate-to-IDF procurement contract, contract value, or specific unit was identified in public sources. Splunk Services Israel Ltd. (Netanya) is a registered Israeli subsidiary (its R&D/commercial split is Digital/Economic territory).²

US DoD - direct Splunk-corporate supply (not Israeli; noted for completeness). The US Department of Defense designated Splunk Enterprise a Core Enterprise Technology in March 2021 (10-year, $833 million ceiling, administered by Carahsoft), with all four US military branches and many US intelligence agencies as users and a DISA Impact Level 5 provisional authorization.³⁴⁵ This is Splunk-corporate defence contracting with the US, not Israel.

Post-acquisition (Cisco, March 2024): Cisco has its own extensively documented military and Israeli-MoD supply relationships; those are Cisco-parent-level, attributed to Cisco and not to Splunk-brand.⁶

Dual-Use Products & Tactical Variants

Splunk’s core product is an enterprise SIEM / data-analytics platform (Splunk Enterprise, Enterprise Security, Cloud Platform) that ingests, indexes, and searches machine-generated data from network devices, endpoints, OT/SCADA systems, application logs, and sensor feeds. The Israel Defense article describes Splunk’s military-relevant capabilities - storing/indexing image, video, text, and audio and running pattern-finding across large data volumes, “providing the military with a significant data fusion capability” - and contextualises this against IDF systems such as TZAYAD (Digital Land Army) and Fire Weaver, but does not assert that Splunk powers TZAYAD or Fire Weaver; no public evidence confirms Splunk integration into either system.¹ Splunk markets dedicated “Aerospace & Defense” and “Defense and Intelligence Agency” verticals, with named customers Lockheed Martin, MITRE, and SAIC (all US; no Israeli defence prime named).⁷⁸ Splunk’s products are classified under US EAR as ECCN 5D002 (dual-use information-security software), exportable under licence exception ENC, with no ITAR applicability identified.⁹

Heavy Machinery, Construction & Infrastructure

Not applicable. Splunk is a software company and does not manufacture or supply heavy machinery, construction equipment, or physical infrastructure. No public evidence identified.

Supply Chain Integration with Defence Primes

Splunk’s aerospace/defence vertical serves US defence primes (named customers Lockheed Martin, MITRE, SAIC).⁷ No public evidence identified of a direct Splunk supply relationship with Israeli defence primes (Elbit Systems, Rafael, IAI); none is named in any identified Splunk marketing, case study, or release. (Given the IDF’s acknowledged use of Splunk, Israeli defence entities operating within IDF IT environments may interact with Splunk-licensed software, but this is not established in any public source.) Cisco-parent’s documented supply relationships with Israeli defence entities are attributed to Cisco, not to Splunk-brand.⁶

Logistical Sustainment & Base Services

Not applicable. Splunk is a software company and does not provide base services, facilities management, or physical logistical sustainment. No public evidence identified.

Munitions, Weapons Systems & Strategic Platforms

No public evidence identified that Splunk software is a direct component of any munitions, weapons platform, or weapons system. The Israel Defense article contextualises Splunk capabilities against the Elbit-developed Fire Weaver fire-control system but does not assert a direct integration, and no Splunk-Elbit integration was identified in public sources.¹

Export Licensing, Regulatory & Legal History

Splunk’s products are classified under US EAR (ECCN 5D002, licence exception ENC), with a published Product Export Control Classification List.⁹ No public evidence identified of any US export-enforcement action, ITAR violation, or BIS/OFAC sanction involving Splunk, nor of any Israeli export-licence approval/denial related to Splunk supply to the IDF or Israeli defence sector.

Civil Society Scrutiny & Documented Investigations

No Splunk entry was identified in the Who Profits database, and no Splunk-specific BDS campaign or boycott call was identified in current BDS-movement targeting.¹⁰¹¹ Cisco-parent flag: the BDS movement runs an active campaign against Cisco (citing Cisco’s supply of networking/computing/cybersecurity equipment to the Israeli military and MoD), and Who Profits maintains a Cisco profile; since Splunk is now a Cisco subsidiary, civil-society targeting of Cisco may implicate the broader group, but no campaign specifically names Splunk products or the Splunk brand in connection with Israeli military supply.⁶¹² The Israel Defense article (a trade publication relying on IDF sources and Splunk’s Israeli marketing team) is the primary documented confirmation of the IDF supply relationship; no investigative NGO report on Splunk-Israel was identified.¹

End Notes