I used to work at a splunk shop. It was used for alerting, graphing & prediction. It was critical to how the company functioned. There was lots of stuff that r

I used to work at a splunk shop. It was used for alerting, graphing & prediction. It was critical to how the company functioned. There was lots of stuff that relied on splunk, and we had splunk specialists who knew the magic splunkQL to get the graph/data they wanted. However, we managed to remove most of the need for splunk by using graphite/grafana. It took about 2-3 years but it meant that non techs could create dashbaords and alerts. As someone once told me, splunk is the most expensive way you can ignore your data.