Attached files

file filename
EX-23.1 - EX-23.1 - SPLUNK INCa2208773zex-23_1.htm

Use these links to rapidly review the document
TABLE OF CONTENTS
SPLUNK INC. INDEX TO CONSOLIDATED FINANCIAL STATEMENTS

Table of Contents

As filed with the Securities and Exchange Commission on April 16, 2012

Registration No. 333-178988

UNITED STATES
SECURITIES AND EXCHANGE COMMISSION
Washington, D.C. 20549



AMENDMENT NO. 5
TO
FORM S-1
REGISTRATION STATEMENT
Under
The Securities Act of 1933



SPLUNK INC.
(Exact name of registrant as specified in its charter)



Delaware   7372   86-1106510
(State or other jurisdiction of
incorporation or organization)
  (Primary Standard Industrial
Classification Code Number)
  (I.R.S. Employer
Identification Number)

250 Brannan Street
San Francisco, California 94107
(415) 848-8400
(Address, including zip code, and telephone number, including area code, of registrant's principal executive offices)



Godfrey R. Sullivan
President and Chief Executive Officer
Splunk Inc.
250 Brannan Street
San Francisco, California 94107
(415) 848-8400
(Name, address, including zip code, and telephone number, including area code, of agent for service)



Copies to:

Jeffrey D. Saper
Jon C. Avina
Wilson Sonsini Goodrich & Rosati, P.C.
650 Page Mill Road
Palo Alto, California 94304
(650) 493-9300

 

Leonard R. Stein
Scott A. Morgan
Splunk Inc.
250 Brannan Street
San Francisco, California 94107
(415) 848-8400

 

Martin A. Wellington
Sarah K. Solum
Davis Polk & Wardwell LLP
1600 El Camino Real
Menlo Park, California 94025
(650) 752-2000



          Approximate date of commencement of proposed sale to the public: As soon as practicable after this registration statement becomes effective.

          If any of the securities being registered on this Form are to be offered on a delayed or continuous basis pursuant to Rule 415 under the Securities Act of 1933 check the following box: o

          If this Form is filed to register additional securities for an offering pursuant to Rule 462(b) under the Securities Act, please check the following box and list the Securities Act registration statement number of the earlier effective registration statement for the same offering. o

          If this Form is a post effective amendment filed pursuant to Rule 462(c) under the Securities Act, check the following box and list the Securities Act registration statement number of the earlier effective registration statement for the same offering. o

          If this Form is a post effective amendment filed pursuant to Rule 462(d) under the Securities Act, check the following box and list the Securities Act registration statement number of the earlier effective registration statement for the same offering. o

          Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, or a smaller reporting company. See the definitions of "large accelerated filer," "accelerated filer" and "smaller reporting company" in Rule 12b-2 of the Exchange Act. (Check one):

Large accelerated filer o   Accelerated filer o   Non-accelerated filer ý
(do not check if a
smaller reporting company)
  Smaller reporting company o



CALCULATION OF REGISTRATION FEE CHART

               
 
Title of Each Class of Securities
to be Registered

  Amount to be
Registered

  Proposed Maximum
Offering Price
Per Share

  Proposed Maximum
Aggregate Offering
Price(1)

  Amount of
Registration Fee(2)

 

Common Stock, par value $0.001 par share

  15,525,000   $13.00   $201,825,000   $23,129.15

 

(1)
Estimated solely for the purpose of calculating the registration fee in accordance with Rule 457(a) under the Securities Act of 1933, as amended. Includes offering price of shares that the underwriters have the option to purchase to cover over-allotments.
(2)
The Registrant previously paid $17,791.65 in connection with the previous filings of this Registration Statement.

          The registrant hereby amends this registration statement on such date or dates as may be necessary to delay its effective date until the registrant shall file a further amendment which specifically states that this registration statement shall thereafter become effective in accordance with Section 8(a) of the Securities Act of 1933 or until the registration statement shall become effective on such date as the Securities and Exchange Commission, acting pursuant to said Section 8(a), may determine.

   


Table of Contents

PROSPECTUS (Subject to Completion)
Issued April 16, 2012

The information in this prospectus is not complete and may be changed. We and the selling stockholders may not sell these securities until the registration statement filed with the Securities and Exchange Commission is effective. This prospectus is not an offer to sell these securities and we and the selling stockholders are not soliciting offers to buy these securities in any jurisdiction where the offer or sale is not permitted.

13,500,000 Shares

GRAPHIC

COMMON STOCK



Splunk Inc. is offering 12,507,278 shares of common stock and the selling stockholders are offering 992,722 shares of common stock. We will not receive any proceeds from the sale of shares by the selling stockholders. This is our initial public offering and no public market currently exists for our shares. We anticipate that the initial public offering price will be between $11.00 and $13.00 per share.



We have applied to list our common stock on The NASDAQ Global Select Market under the symbol "SPLK."



Investing in our common stock involves risks. See "Risk Factors" beginning on page 11.



PRICE $                   A SHARE



 
 
Price to
Public
 
Underwriting
Discounts and
Commissions
 
Proceeds to
Splunk
 
Proceeds to
Selling
Stockholders

Per Share

  $        $        $        $     

Total

  $                      $                      $                      $                   

We have granted the underwriters the right to purchase up to an additional 2,025,000 shares of common stock to cover over-allotments at the initial public offering price less the underwriting discount.

The Securities and Exchange Commission and state securities regulators have not approved or disapproved these securities, or determined if this prospectus is truthful or complete. Any representation to the contrary is a criminal offense.

The underwriters expect to deliver the shares of common stock to purchasers on                                         , 2012.



MORGAN STANLEY   CREDIT SUISSE   J.P. MORGAN   BofA MERRILL LYNCH

UBS INVESTMENT BANK
PACIFIC CREST SECURITIES   COWEN AND COMPANY

   

                           , 2012


Table of Contents

GRAPHIC


Table of Contents

GRAPHIC


Table of Contents


TABLE OF CONTENTS

 
  Page

Prospectus Summary

  1

Summary Consolidated Financial Data

  8

Risk Factors

  11

Special Note Regarding Forward-Looking Statements

  37

Use of Proceeds

  39

Dividend Policy

  39

Capitalization

  40

Dilution

  42

Selected Consolidated Financial Data

  44

Management's Discussion and Analysis of Financial Condition and Results of Operations

  46

Business

  69

Management

  86

Executive Compensation

  95

Certain Relationships and Related Party Transactions

  126

Principal and Selling Stockholders

  128

Description of Capital Stock

  133

Shares Eligible for Future Sale

  138

Material U.S. Federal Income Tax Consequences to Non-U.S. Holders

  141

Underwriters

  145

Legal Matters

  151

Experts

  151

Change in Independent Registered Public Accounting Firm

  151

Where You Can Find More Information

  152

Index to Consolidated Financial Statements

  F-1



        Through and including                  , 2012 (the 25th day after the date of this prospectus), all dealers effecting transactions in these securities, whether or not participating in this offering, may be required to deliver a prospectus. This is in addition to a dealer's obligation to deliver a prospectus when acting as an underwriter and with respect to an unsold allotment or subscription.

        For investors outside the United States: neither we, the selling stockholders nor any of the underwriters have done anything that would permit this offering or possession or distribution of this prospectus in any jurisdiction where action for that purpose is required, other than the United States. You are required to inform yourselves about and to observe any restrictions relating to this offering and the distribution of this prospectus.

        Splunk, the Splunk logo and other trademarks or service marks of Splunk appearing in this prospectus are the property of Splunk. Trade names, trademarks and service marks of other companies appearing in this prospectus are the property of their respective holders.


Table of Contents


PROSPECTUS SUMMARY

        This summary highlights selected information appearing elsewhere in this prospectus and is qualified in its entirety by the more detailed information and financial statements included elsewhere in this prospectus. This summary does not contain all the information you should consider before investing in our common stock. You should carefully read this prospectus in its entirety before investing in our common stock, including the sections entitled "Risk Factors" and "Management's Discussion and Analysis of Financial Condition and Results of Operations" and our consolidated financial statements and related notes included elsewhere in this prospectus. Our fiscal year ends on January 31. As such, references to fiscal 2010, 2011 and 2012 herein refer to the fiscal years ended January 31, 2010, 2011 and 2012, respectively.


SPLUNK INC.

        Splunk provides an innovative software platform that enables organizations to gain real-time operational intelligence by harnessing the value of their data. Our software collects and indexes data at massive scale, regardless of format or source, and enables users to quickly and easily search, correlate, analyze, monitor and report on this data, all in real time. Our software addresses the risks, challenges and opportunities organizations face with increasingly large and diverse data sets, commonly referred to as big data, and is specifically tailored for machine-generated data. Machine data is produced by nearly every software application and electronic device in an organization and contains a definitive, time-stamped record of various activities, such as transactions, customer and user activities, and security threats. Our software is designed to help users in various roles, including IT and business professionals, quickly analyze machine data and realize real-time visibility into and intelligence about their organization's operations. This operational intelligence enables organizations to improve service levels, reduce costs, mitigate security risks, demonstrate and maintain compliance and gain new insights that enable them to drive better business decisions.

        The volume and diversity of digital information within and available to today's organizations, including enterprises, universities and government agencies, have grown significantly over the last several years due to the proliferation of network-enabled devices, advances in virtual and cloud-computing, and evolving business and consumer uses of technology. International Data Corporation, or IDC, estimates that the volume of digital information created and replicated worldwide will grow approximately 45% annually from 1.8 trillion gigabytes in 2011 to 7.9 trillion gigabytes in 2015. Machine data is one of the fastest growing components of this digital information and comes in an increasing number of formats. The applications, servers, network devices, mobile phones, desktop computers, laptops and various other systems and devices that comprise an organization's IT infrastructure are continuously generating information in a variety of disparate formats relating to application and system performance, user activity, configuration changes, transactions, security alerts, error messages and other time-series information. Outside of an organization's traditional IT infrastructure, nearly every electronic device and software application, such as smart electrical meters, mobile applications, GPS equipment and radio-frequency identification devices, continually generate machine data.

        We believe our software is disrupting established markets and enabling new ones by delivering operational intelligence to organizations of all sizes. Our software enables organizations to harness the value of machine data in their enterprise across a variety of use cases. Our customers are deploying our software to enable more effective application management, IT operations management, security and compliance, and to realize operational intelligence and insight across a broad base of their organizations' activities.

        The core of our software is a proprietary machine data engine, comprised of collection, indexing, search and data management capabilities. Our software can collect and index terabytes of information daily, irrespective of format or source. Our machine data engine uses an innovative data architecture that enables dynamic, schema creation on the fly, allowing users to run queries on data without having to

 

1


Table of Contents

understand the structure of the data prior to collection and indexing. Our machine data fabric for data collection and indexing delivers speed and scalability when processing massive amounts of machine data. Our software leverages improvements in the cost and performance of commodity computing and can be deployed in a wide variety of computing environments, from a single laptop to large globally distributed data centers.

        To extend our software's functionality, customers can deploy additional solutions as well as lightweight applications, or apps, on top of our core data engine. Our apps, which are available for download via our Splunkbase website, provide incremental functionality in the form of pre-built data inputs, searches, reports, alerts and dashboards, and are generally available for free. We, along with a number of third-party developers and customers, have developed approximately 350 apps for specific use cases in our core and adjacent markets. We also build and deliver a select number of packaged solutions that provide more robust functionality targeting a specific end market or use case. We currently provide Splunk for Enterprise Security and Splunk for PCI (payment card industry) Compliance and have made available, through a controlled preview, Splunk for VMware. These packaged solutions and apps allow our customers to further extend the value of their machine data using our software. We provide application programming interfaces, or APIs, and software development kits, or SDKs, in various programming languages that enable developers to leverage our machine data engine and its broad capabilities in their own software. In addition to our packaged solutions and apps, we are investing in the development of Splunk Storm, which is a cloud-based service currently in beta that provides a subset of our software's capabilities, but is tailored for machine data in the cloud. Our online user communities, Splunkbase and Splunk Answers, provide our customers with an environment to share these apps, collaborate on the use of our software and provide community-based support. We believe this user-driven ecosystem results in greater use of our software and drives cost-effective marketing, increased brand awareness and viral adoption of our product.

        Our software is designed to accelerate adoption and return-on-investment for our customers. It does not require customization, long deployment cycles or extensive professional services commonly associated with traditional enterprise software applications. Users can simply download and install the software, typically in a matter of hours, to connect to their relevant machine data sources and begin realizing operational intelligence. We also offer customers with complex IT infrastructure the ability to leverage the expertise of our professional services organization to deploy our software.

        As of January 31, 2012, we had over 3,700 customers, including a majority of the Fortune 100. Some of our largest customers include Autodesk, Bank of America, Comcast, Etsy, Harvard University, Viacom and Zynga. Our customers pay license fees based on their estimated indexing capacity needs. For fiscal 2010, 2011 and 2012, our revenues were $35.0 million, $66.2 million and $121.0 million, respectively, representing year-over-year growth of 89% for fiscal 2011 and 83% for fiscal 2012, and our net loss was $7.5 million, $3.8 million and $11.0 million, respectively.

Our Market Opportunity

        Today's IT infrastructure has become increasingly complex and diverse, with a wide range of on-premise and cloud-based software applications, networking infrastructure, physical and virtual servers and endpoint devices, such as desktop computers and an array of mobile devices. The rapidly growing volume of data generated by this infrastructure, including application log files, call detail records, website clickstream data and system configuration files, provides a valuable and definitive record of the activity and behavior of users, customers, transactions, applications, servers and networks. The table below illustrates

 

2


Table of Contents

the type of machine data created and the business and IT insights that can be derived when a single web visitor makes a purchase in a typical ecommerce environment:

GRAPHIC

        While machine data has always been generated by computing environments, many organizations have failed to recognize the value of this data or have encountered challenges extracting value from it. Traditional IT products, such as relational databases, enterprise applications and IT management and security software, are typically built to work with pre-defined data structures, or schema. As a result, because machine data consists of both structured and unstructured data, these products are not ideally suited to handle a large portion of an organization's data. Additionally, these products are generally narrowly scoped to only work with specific data formats and systems and are unable to correlate machine data from multiple sources, formats and systems for both historical and real-time analysis without significant configuration. Managing and cross-correlating data and outputs across multiple products can be especially challenging, leading to significant IT complexity and cost. Moreover, these solutions and systems are not architected to take advantage of recent improvements in the price and performance of computing and storage systems, and in many cases require significant investment in computing hardware. Because of these limitations, traditional IT products are unable to fully leverage the information and value in machine data.

        Organizations need to capture the value locked in their machine data to enable more effective application management, IT operations management, security and compliance, and to derive intelligence and insight across the organization. Our software enables users to realize real-time operational intelligence across their business.

        We believe software that provides operational intelligence addresses several established markets that in aggregate have been estimated by Gartner to be approximately $32 billion in 2012. Specifically, Gartner expects the market that our products address for IT operations, which includes application management, to be approximately $18.6 billion in 2012; the market that our products address for business intelligence, including web analytics software, to be approximately $12.5 billion in 2012; and the market that our products address for security information and event management software to be approximately $1.3 billion in 2012. Beyond these areas, we believe software that provides operational intelligence can address a wide variety of additional markets in areas such as online marketing optimization, video-on-demand analytics, radio-frequency identification tracking and scientific applications using time-series data.

Our Solution

        Our mission is to make machine data accessible, usable and valuable to everyone in an organization. Our software helps users derive new insights from machine data that can be used to, among others,

 

3


Table of Contents

improve service levels, reduce operational costs, mitigate security risks, demonstrate and maintain compliance, and gain new insights that enable them to drive better business decisions. Key benefits of our solution include:

        Real-time operational intelligence and visibility.    Our software collects and indexes data at massive scale, regardless of the format or source, and enables users to quickly and easily search, correlate, analyze, monitor and report on this data, all in real time. Our software enables users to identify problems, get answers and gain new business insights and intelligence from machine data across their globally distributed enterprise all through one platform.

        Low total cost of ownership.    Our software enables customers to improve their customer service levels and systems availability, reduce operational costs, improve security and compliance, and increase business insights. Although our data engine can index terabytes of data daily, it does not require the high-end hardware, software, extensive professional services or other capital intensive IT investments commonly associated with traditional enterprise software.

        Fast time to value.    Unlike traditional relational databases or business and IT applications, our software does not require custom implementations or long deployment cycles. While some enterprises leverage our professional services team to deploy our software in large, highly complex IT environments, most users simply download and install the software, typically in a matter of hours, to connect to the relevant machine data sources and begin realizing operational intelligence.

        Ease of use.    While we utilize complex data structures and algorithms in our machine data engine, we abstract that complexity to provide a compelling, intuitive interface similar to that of an internet search engine. Our software can be accessed through a standard web browser and requires limited training, saving on time and cost, as well as making it accessible to the broader set of non-technical users.

        Highly scalable and flexible data engine.    Our machine data engine, machine data fabric and broad technology stack are built to be highly flexible and scalable, allowing our customers to index terabytes of data daily and search petabytes of historical data. Our software can be deployed in a wide variety of environments, from a single user on a laptop to globally distributed data centers.

        Open, extensible platform.    Our machine data engine is a powerful, extensible platform on which custom reports, dashboards and applications can be run to analyze machine data for specific use cases. Splunk, as well as a number of customers and third-party developers, have developed numerous applications for specific use cases across application management, IT operations management, security and compliance, and business intelligence.

Our Growth Strategy

        Our goal is to make our software the platform for delivering operational intelligence and real-time business insights from machine data. The key elements of our strategy are to:

    >
    extend our technology capabilities through continued investment in research and development designed to enhance our software, including our data engine and associated solutions;

    >
    continue to expand our direct and indirect sales organizations, including our channel relationships, to acquire new customers;

    >
    further penetrate our existing customer base;

    >
    develop additional solutions in adjacent markets as well as products that enable organizations to use our software in different ways, such as Splunk Storm, our cloud-based service;

 

4


Table of Contents

    >
    grow our user communities and partner ecosystem to increase awareness of our brand, target new use cases, drive operational leverage and deliver more targeted, higher value solutions; and

    >
    become the developer platform for machine data.

Risks Affecting Us

        Our business is subject to numerous risks and uncertainties, including those highlighted in the section entitled "Risk Factors" immediately following this prospectus summary. These risks include, but are not limited to, the following:

    >
    the market for our software is new and unproven and may not grow;

    >
    we have a short operating history, which makes it difficult to evaluate our future prospects and may increase the risk that we will not be successful;

    >
    our future operating results may fluctuate significantly, and our recent operating results may not be a good indication of our future performance;

    >
    if we fail to effectively manage our growth, our business and operating results could be adversely affected;

    >
    we have a history of losses, and we may not be profitable in the future;

    >
    we derive substantially all of our revenues and cash flows from one software product;

    >
    we face intense competition in our markets;

    >
    our business and growth depend substantially on customers expanding their use of our software and renewing their maintenance agreements with us;

    >
    interruptions or performance problems associated with our technology and infrastructure may adversely affect our business and operating results; and

    >
    assertions by third parties that we violate their intellectual property rights or our failure to protect our intellectual property rights could adversely affect our business.

Corporate Information

        Our principal executive offices are located at 250 Brannan Street, San Francisco, California 94107, and our telephone number is (415) 848-8400. Our website is www.splunk.com. Information contained on, or that can be accessed through, our website is not incorporated by reference into this prospectus, and you should not consider information on our website to be part of this prospectus. We were incorporated in California in October 2003 and were reincorporated in Delaware in May 2006.

 

5


Table of Contents


THE OFFERING

Common stock offered by us

  12,507,278 shares

Common stock offered by the selling stockholders

 

992,722 shares

Total common stock offered

 

13,500,000 shares

Over-allotment option

 

2,025,000 shares (with all shares being offered by us)

Common stock to be outstanding after this offering

 

92,529,879 shares (94,554,879 shares, if the over-allotment option is exercised in full)

Use of proceeds

 

We intend to use the net proceeds we receive from this offering for general corporate purposes, including working capital, sales and marketing activities, product development, general and administrative matters, and capital expenditures. We also may use a portion of the net proceeds to acquire or invest in complementary businesses, products, services or technologies; however, we do not have agreements or commitments at this time. We will not receive any of the proceeds from the sale of shares to be offered by the selling stockholders. See "Use of Proceeds."

Proposed NASDAQ symbol

 

"SPLK"

        The number of shares of our common stock to be outstanding after this offering is based on 80,022,601 shares of our common stock outstanding as of January 31, 2012, which excludes:

    >
    21,905,290 shares of common stock issuable upon the exercise of options outstanding as of January 31, 2012, with a weighted average exercise price of $1.92 per share;

    >
    2,813,500 shares of common stock issuable upon the exercise of options granted after January 31, 2012 through April 4, 2012, with a weighted average exercise price of $8.12 per share;

    >
    469,557 shares of common stock issuable upon the exercise of outstanding warrants to purchase shares of Series C preferred stock with an exercise price of $1.56 per share; and

    >
    unallocated shares of common stock reserved for future issuance under our stock-based compensation plans, consisting of 3,315,989 shares of common stock reserved for future issuance under our 2003 Equity Incentive Plan, which shares will be added to the shares to be reserved under our 2012 Equity Incentive Plan, a certain number of shares of common stock equal to the greater of (1) nine percent of the outstanding shares of our common stock as of the effective date of this offering or (2) 10,000,000, reserved for future issuance under our 2012 Equity Incentive Plan, which will become effective in connection with this offering, and 2,000,000 shares of common stock reserved for future issuance under our 2012 Employee Stock Purchase Plan, which will become effective in connection with this offering, and shares that become available under our 2012 Equity Incentive Plan and 2012 Employee Stock Purchase Plan pursuant to provisions thereof that automatically increase the share reserves under the plans each year, as more fully described in "Executive Compensation—Employee Benefit and Stock Plans."

 

6


Table of Contents

        Unless otherwise noted, the information in this prospectus reflects and assumes the following:

    >
    the automatic conversion of all outstanding shares of our convertible preferred stock as of January 31, 2012 into an aggregate of 56,930,194 shares of common stock immediately prior to the completion of this offering;

    >
    the filing of our amended and restated certificate of incorporation in connection with the completion of this offering;

    >
    no exercise of outstanding options or warrants; and

    >
    no exercise of the underwriters' over-allotment option.

 

7


Table of Contents


SUMMARY CONSOLIDATED FINANCIAL DATA

        You should read the following summary consolidated financial data in conjunction with "Management's Discussion and Analysis of Financial Condition and Results of Operations" and our consolidated financial statements and related notes, all included elsewhere in this prospectus. We derived the consolidated statements of operations data for fiscal 2010, 2011 and 2012 and the consolidated balance sheet data as of January 31, 2012, from our audited consolidated financial statements included elsewhere in this prospectus. Our historical results are not necessarily indicative of the results that may be expected in the future.

 
  Fiscal Year Ended January 31,  
 
  2010   2011   2012  
 
  (in thousands, except per share amounts)
 

Consolidated Statements of Operations Data:

                   

Revenues

                   

License

  $ 27,183   $ 49,926     $88,308  

Maintenance and services

    7,817     16,319     32,652  
               

Total revenues

    35,000     66,245     120,960  
               

Cost of revenues

                   

License

    102     228     890  

Maintenance and services

    3,188     6,428     10,715  
               

Total cost of revenues(1)

    3,290     6,656     11,605  
               

Gross profit

    31,710     59,589     109,355  
               

Operating expenses

                   

Research and development(1)

    8,479     14,025     23,561  

Sales and marketing(1)

    24,072     39,909     74,782  

General and administrative(1)

    6,462     8,949     19,698  
               

Total operating expenses

    39,013     62,883     118,041  
               

Operating loss

    (7,303 )   (3,294 )   (8,686 )

Other income (expense), net

    (69 )   (387 )   (2,128 )
               

Loss before income taxes

    (7,372 )   (3,681 )   (10,814 )

Provision for income taxes

    79     125     178  
               

Net loss

  $ (7,451 ) $ (3,806 ) $ (10,992 )
               

Net loss per share:

                   

Basic and diluted

  $ (0.52 ) $ (0.21 ) $ (0.53 )
               

Weighted-average shares outstanding:

                   

Basic and diluted

    14,392     17,738     20,646  
               

Pro forma net loss per share (unaudited)(2):

                   

Basic and diluted

              $ (0.14 )
                   

Pro forma weighted-average shares outstanding used in calculating net loss per share (unaudited)(2):

                   

Basic and diluted

                77,576  
                   

 

8


Table of Contents

 
  Fiscal Year Ended January 31,  
 
  2010   2011   2012  
 
  (in thousands)
 

Other Financial Data:

                   

Non-GAAP operating loss

  $ (6,003 ) $ (1,709 ) $ (4,926 )

(1)
Includes stock-based compensation expense as follows:

 
  Fiscal Year Ended January 31,  
 
  2010   2011   2012  
 
  (in thousands)
 

Cost of revenues

  $ 31   $ 59   $ 134  

Research and development

    215     347     841  

Sales and marketing

    382     495     1,488  

General and administrative

    672     684     1,297  
               

Total stock-based compensation expense

  $ 1,300   $ 1,585   $ 3,760  
               
(2)
See Note 15 to our audited consolidated financial statements appearing elsewhere in this prospectus for an explanation of our pro forma basic and diluted net loss per share calculations.

 
  As of January 31, 2012  
 
  Actual   Pro Forma(1)   Pro Forma As
Adjusted(2)(3)
 
 
  (in thousands)
 

Consolidated Balance Sheet Data:

                   

Cash and cash equivalents

  $ 31,599   $ 31,599   $ 167,226  

Working capital

    1,142     1,142     136,769  

Total assets

    82,223     82,223     217,850  

Deferred revenue, current and long-term

    52,665     52,665     52,665  

Debt and capital lease obligations, current and long-term

    2,289     2,289     2,289  

Preferred stock warrants

    2,133          

Convertible preferred stock

    40,913          

Total stockholders' equity (deficit)

    (41,646 )   1,400     137,027  

(1)
The pro forma balance sheet data in the table above reflects the automatic conversion of all outstanding shares of convertible preferred stock into common stock immediately prior to the completion of this offering and the conversion of the Series C preferred stock warrants into warrants to purchase common stock in connection with this offering.

(2)
The pro forma as adjusted balance sheet data in the table above also reflects (i) the pro forma items described immediately above plus (ii) the sale of 12,507,278 shares of our common stock in this offering at an assumed initial public offering price of $12.00 per share, the midpoint of the range set forth on the front cover of this prospectus, after deducting estimated underwriting discounts and commissions and estimated offering expenses payable by us.

(3)
A $1.00 increase (decrease) in the assumed initial public offering price of $12.00 per share would increase (decrease) cash and cash equivalents, working capital, total assets and total stockholders' equity (deficit) by $11.6 million, assuming that the number of shares offered by us, as set forth on the front cover of this prospectus, remains the same, and after deducting estimated underwriting discounts and commissions and estimated offering expenses payable by us. The pro forma as adjusted information discussed above is only illustrative and will be adjusted based on the actual public offering price and other terms of this offering determined at pricing.

 

9


Table of Contents

Non-GAAP Operating Loss

        We believe that the use of non-GAAP operating loss is helpful for an investor to determine whether to invest in our common stock. In computing non-GAAP operating loss, we exclude stock-based compensation expense which represents non-cash charges for the fair value of stock options and other non-cash awards granted to employees. Because of varying available valuation methodologies, subjective assumptions and the variety of equity instruments that can impact a company's non-cash operating expenses, we believe that providing a non-GAAP financial measure that excludes stock-based compensation expense allows for meaningful comparisons between our core business operating results and those of other companies, as well as providing us with an important tool for financial and operational decision making and for evaluating our own core business operating results over different periods of time.

        Our non-GAAP operating loss may not provide information that is directly comparable to that provided by other companies in our industry, as other companies in our industry may calculate non-GAAP financial results differently, particularly related to non-recurring, unusual items. Our non-GAAP operating loss is not a measurement of financial performance under GAAP and should not be considered an alternative to operating income or as an indication of operating performance or any other measure of performance derived in accordance with GAAP. We do not consider non-GAAP operating loss to be a substitute for, or superior to, the information provided by GAAP financial results.

        The following table reflects the reconciliation from GAAP operating loss to non-GAAP operating loss.

 
  Fiscal Year Ended January 31,  
 
  2010   2011   2012  
 
  (in thousands)
 

GAAP operating loss

  $ (7,303 ) $ (3,294 ) $ (8,686 )

Non-GAAP adjustments

                   

Employee stock-based compensation expense

    1,300     1,585     3,760  
               

Non-GAAP operating loss

  $ (6,003 ) $ (1,709 ) $ (4,926 )
               

 

10


Table of Contents


RISK FACTORS

        Investing in our common stock involves a high degree of risk. You should carefully consider the following risks and all other information contained in this prospectus, including our consolidated financial statements and the related notes, before investing in our common stock. The risks and uncertainties described below are not the only ones we face. Additional risks and uncertainties that we are unaware of, or that we currently believe are not material, also may become important factors that affect us. If any of the following risks materialize, our business, financial condition and results of operations could be materially adversely affected. In that case, the trading price of our common stock could decline, and you may lose some or all of your investment.

Risks Related to Our Business and Industry

The market for our software is new and unproven and may not grow.

        We believe our future success will depend in large part on the growth, if any, in the market for software that provides operational intelligence, particularly software designed to collect and index machine data. We market our software as a targeted solution for specific use cases and as an enterprise solution for machine data. In order to grow our business, we intend to expand the functionality of our product to increase its acceptance and use by the broader market. It is difficult to predict customer adoption and renewal rates, customer demand for our software, the size and growth rate of this market, the entry of competitive products or the success of existing competitive products. Any expansion in our market depends on a number of factors, including the cost, performance and perceived value associated with such software. If the market for our software does not achieve widespread adoption or there is a reduction in demand for software in our market caused by a lack of customer acceptance, technological challenges, lack of accessible machine data, competing technologies and products, decreases in corporate spending, weakening economic conditions, or otherwise, it could result in reduced customer orders, early terminations, reduced renewal rates or decreased revenues, any of which would adversely affect our business operations and financial results. You should consider our business and prospects in light of the risks and difficulties we encounter in this new and unproven market.

We have a short operating history, which makes it difficult to evaluate our future prospects and may increase the risk that we will not be successful.

        We have a short operating history, which limits our ability to forecast our future operating results and subjects us to a number of uncertainties, including our ability to plan for and model future growth. We have encountered and will continue to encounter risks and uncertainties frequently experienced by growing companies in developing industries. If our assumptions regarding these uncertainties, which we use to plan our business, are incorrect or change in reaction to changes in our markets, or if we do not address these risks successfully, our operating and financial results could differ materially from our expectations and our business could suffer. Moreover, although we have experienced rapid growth historically, we may not continue to grow as rapidly in the future. Any success that we may experience in the future will depend in large part on our ability to, among other things:

    >
    maintain and expand our customer base and the ways in which our customers use our software;

    >
    increase revenues from existing customers through increased or broader use of our software within their organizations;

    >
    improve the performance and capabilities of our software through research and development;

    >
    continue to develop our cloud-based service, Splunk Storm;

    >
    successfully expand our business domestically and internationally;

    >
    successfully compete with other companies, open source initiatives and custom development efforts that are currently in, or may in the future enter, the markets for our software;

11


Table of Contents

    >
    continue to invest in our application development platform to foster an ecosystem of developers and users to expand the use cases of our software;

    >
    generate leads and convert users of the trial version of our software to paying customers;

    >
    prevent users from circumventing the terms of their software licenses;

    >
    maintain and enhance our website infrastructure to minimize interruptions or slower than expected download times when accessing our software from our website;

    >
    process, store and use our customers' data in compliance with applicable governmental regulations and other legal obligations related to data privacy; and

    >
    hire, integrate and retain world class talent.

        If we fail to address the risks and difficulties we face including those described elsewhere in this "Risk Factors" section, our business will be adversely affected and our operating results will suffer.

Our future operating results may fluctuate significantly, and our recent operating results may not be a good indication of our future performance.

        Our revenues and operating results could vary significantly from period to period as a result of various factors, many of which are outside of our control. For example, we typically enter into perpetual license agreements, whereby we generally recognize the license fee portion of the arrangement upfront, assuming all revenue recognition criteria are satisfied. Our customers also have the choice of entering into term licenses for our software, whereby the license fee is recognized ratably over the license term. At the beginning of each quarter, we do not know the ratio between perpetual licenses and term licenses that we will enter into during the quarter. As a result, our operating results could be significantly impacted by unexpected shifts in the ratio between perpetual licenses and term licenses. In addition, the size of our licenses varies greatly, and a single, large perpetual license in a given period could distort our operating results. Comparing our revenues and operating results on a period-to-period basis may not be meaningful, and you should not rely on our past results as an indication of our future performance.

        We may not be able to accurately predict our future revenues or results of operations. In particular, since the beginning of fiscal 2011, more than 70% of the revenues we recognize each quarter has been attributable to sales made in that same quarter with the balance of the revenues being attributable to sales made in prior quarters in which the related revenues were not recognized upfront. As a result, our ability to forecast revenues on a quarterly or longer term basis is extremely limited. We base our current and future expense levels on our operating plans and sales forecasts, and our operating costs are expected to be relatively fixed in the short-term. As a result, we may not be able to reduce our costs sufficiently to compensate for an unexpected shortfall in revenues, and even a small shortfall in revenues could disproportionately and adversely affect our financial results for that quarter.

        In addition to other risk factors described elsewhere in this "Risk Factors" section, factors that may cause our operating results to fluctuate from quarter to quarter include:

    >
    the timing of our sales during the quarter, particularly because a large portion of our sales occur toward the end of the quarter, and the loss or delay of a few large contracts may have a significant adverse impact on our operating results;

    >
    the mix of revenues attributable to larger transactions as opposed to smaller transactions and the impact that a change in mix may have on the overall average selling price of our software;

    >
    the mix of revenues attributable to perpetual and term licenses, maintenance and professional services and training, which may impact our gross margins and operating income;

    >
    the renewal and usage rates of our customers;

12


Table of Contents

    >
    changes in the competitive dynamics of our market;

    >
    changes in customers' budgets and in the timing of their purchasing decisions;

    >
    customers delaying purchasing decisions in anticipation of new software or software enhancements by us or our competitors;

    >
    customer acceptance of and willingness to pay for new versions of our software or new solutions for specific product and end markets;

    >
    our ability to control costs, including our operating expenses;

    >
    the timing of satisfying revenue recognition criteria;

    >
    our ability to qualify and compete for government contracts;

    >
    the collectibility of receivables from customers and resellers, which may be hindered or delayed if these customers or resellers experience financial distress; and

    >
    general economic conditions, both domestically and internationally, as well as economic conditions specifically affecting industries in which our customers participate.

        Many of these factors are outside our control, and the variability and unpredictability of such factors could result in our failing to meet or exceed our financial expectations for a given period. We believe that quarter-to-quarter comparisons of our revenues, operating results and cash flows may not necessarily be indicative of our future performance.

If we fail to effectively manage our growth, our business and operating results could be adversely affected.

        Although our business has experienced significant growth, we cannot provide any assurance that our business will continue to grow at the same rate or at all. We have experienced and may continue to experience rapid growth in our headcount and operations, which has placed and will continue to place significant demands on our management and our operational and financial infrastructure. As of January 31, 2012, nearly half of our employees had been with us for less than one year. As we continue to grow, we must effectively integrate, develop and motivate a large number of new employees, while maintaining the effectiveness of our business execution and the beneficial aspects of our corporate culture. In particular, we intend to continue to make directed and substantial investments to expand our research and development, sales and marketing, and general and administrative organizations, as well as our international operations.

        To effectively manage growth, we must continue to improve our operational, financial and management controls, and our reporting systems and procedures by, among other things:

    >
    improving our key business applications, processes and IT infrastructure to support our business needs;

    >
    enhancing information and communication systems to ensure that our employees and offices around the world are well-coordinated and can effectively communicate with each other and our growing base of customers;

    >
    enhancing our internal controls to ensure timely and accurate reporting of all of our operations and financial results; and

    >
    appropriately documenting our IT systems and our business processes.

        These systems enhancements and improvements will require significant capital expenditures and allocation of valuable management and employee resources. If we fail to implement these improvements effectively, our ability to manage our expected growth, ensure uninterrupted operation of key business systems and comply with the rules and regulations that are applicable to public reporting companies will be

13


Table of Contents

impaired. Additionally, if we do not effectively manage the growth of our business and operations, the quality of our software could suffer, which could negatively affect our brand, operating results and overall business.

We have a history of losses, and we may not be profitable in the future.

        We have incurred net losses in each year since our inception, including net losses of $7.5 million in fiscal 2010, $3.8 million in fiscal 2011 and $11.0 million in fiscal 2012. As a result, we had an accumulated deficit of $54.0 million at January 31, 2012. Because the market for our software is rapidly evolving and has not yet reached widespread adoption, it is difficult for us to predict our operating results. We expect our operating expenses to increase over the next several years as we hire additional personnel, particularly in sales and marketing, expand and improve the effectiveness of our distribution channels, and continue to develop features and applications, or apps, for our software. In addition, as we grow and as we become a newly public company, we will incur additional significant legal, accounting and other expenses that we did not incur as a private company. If our revenues do not increase to offset these increases in our operating expenses, we may not be profitable in future periods. Our historical revenue growth has been inconsistent and should not be considered indicative of our future performance. Further, in future periods, our revenue growth could slow or our revenues could decline for a number of reasons, including slowing demand for our software, increasing competition, a decrease in the growth of our overall market, or our failure, for any reason, to continue to capitalize on growth opportunities. Any failure by us to sustain or increase profitability on a consistent basis, could cause the value of our common stock to materially decline.

Because we derive substantially all of our revenues and cash flows from one software product, failure of this product to satisfy customer demands or to achieve increased market acceptance would adversely affect our business, results of operations, financial condition and growth prospects.

        We derive and expect to continue to derive substantially all of our revenues and cash flows from Splunk Enterprise. As such, the market acceptance of our software is critical to our continued success. Demand for our software is affected by a number of factors beyond our control, including continued market acceptance of our software by referenceable accounts for existing and new use cases, the timing of development and release of new products by our competitors, technological change, and growth or contraction in our market. In addition, users of software that provides operational intelligence may seek a cloud-based service and, to date, we have not offered a cloud-based service on a commercial basis. We expect the proliferation of machine data to lead to an increase in the data analysis demands of our customers, and our software may not be able to scale and perform to meet those demands. If we are unable to continue to meet customer demands or to achieve more widespread market acceptance of our software, our business, results of operations, financial condition and growth prospects will be materially and adversely affected.

We face intense competition in our markets, and we may be unable to compete effectively for sales opportunities.

        Although our product targets the new and emerging market for software that provides operational intelligence, we compete against a variety of large software vendors and smaller specialized companies, open source initiatives and custom development efforts, which provide solutions in the specific markets we address. Our principal competitors include:

    >
    IT departments of potential customers which have undertaken custom software development efforts to analyze and manage their machine data;

    >
    security and systems management vendors, including BMC Software, CA, Compuware, HP, IBM, Intel, Microsoft and Quest Software;

    >
    web analytics vendors, including Adobe Systems, Google, IBM and Webtrends;

14


Table of Contents

    >
    business intelligence vendors, including EMC, IBM, Oracle and SAP;

    >
    companies targeting the big data market by commercializing open source software, such as Hadoop; and

    >
    small specialized vendors, which provide complementary solutions in enterprise data analytics, data warehousing and big data technologies that may compete with our software.

        The principal competitive factors in our markets include product features, performance and support, product scalability and flexibility, ease of deployment and use, total cost of ownership and time to value. Some of our actual and potential competitors have advantages over us, such as longer operating histories, significantly greater financial, technical, marketing or other resources, stronger brand and business user recognition, larger intellectual property portfolios and broader global distribution and presence. Further, competitors may be able to offer products or functionality similar to ours at a more attractive price than we can by integrating or bundling their software products with their other product offerings. In addition, our industry is evolving rapidly and is becoming increasingly competitive. Larger and more established companies may focus on operational intelligence and could directly compete with us. For example, companies may commercialize open source software, such as Hadoop, in a manner that competes with our product or causes potential customers to believe that such product and our software perform the same function. If companies move a greater proportion of their data and computational needs to the cloud, new competitors may emerge which offer services comparable to ours or that are better suited for cloud-based data, and the demand for our product may decrease. Smaller companies could also launch new products and services that we do not offer and that could gain market acceptance quickly.

        In recent years, there have been significant acquisitions and consolidation by and among our actual and potential competitors. We anticipate this trend of consolidation will continue, which will present heightened competitive challenges to our business. In particular, consolidation in our industry increases the likelihood of our competitors offering bundled or integrated products, and we believe that it may increase the competitive pressures we face with respect to our software. If we are unable to differentiate our product from the integrated or bundled products of our competitors, such as by offering enhanced functionality, performance or value, we may see decreased demand for those solutions, which would adversely affect our business, results of operations, financial condition and cash flows. Further, it is possible that continued industry consolidation may impact customers' perceptions of the viability of smaller or even medium-sized software firms and consequently their willingness to use software solutions from such firms. Similarly, if customers seek to concentrate their software purchases in the product portfolios of a few large providers, we may be at a competitive disadvantage regardless of the performance and features of our software. We believe that in order to remain competitive at the large enterprise level, we will need to develop and expand relationships with resellers and large system integrators that provide a broad range of products and services. If we are unable to compete effectively, our business, results of operations, financial condition and cash flows could be materially and adversely affected.

If customers do not expand their use of our software beyond the current predominant use cases, our ability to grow our business and operating results may be adversely affected.

        Most of our customers currently use our software to support application management, IT operations, security and compliance functions. Our ability to grow our business depends in part on our ability to persuade current and future customers to expand their use of our software to additional use cases, such as facilities management, supply chain management, business analytics and customer usage analytics. If we fail to achieve market acceptance of our software for these applications, or if a competitor establishes a more widely adopted solution for these applications, our ability to grow our business and operating results will be adversely affected. In addition, as the amount of data indexed by our software for a given customer grows, that customer must agree to higher license fees for our software or limit the amount of data indexed in order to stay within the limits of its existing license. If their fees grow significantly, customers may react

15


Table of Contents

adversely to this pricing model, particularly if they perceive that the value of our software has become eclipsed by such fees or otherwise. If customers react adversely to our pricing model, our ability to grow our business and operating results could be adversely affected.

If we do not effectively expand and train our sales force, we may be unable to add new customers or increase sales to our existing customers and our business will be adversely affected.

        We continue to be substantially dependent on our sales force to obtain new customers and to drive additional use cases among our existing customers. We believe that there is significant competition for sales personnel with the skills and technical knowledge that we require. Our ability to achieve significant revenue growth will depend, in large part, on our success in recruiting, training and retaining sufficient numbers of sales personnel to support our growth. New hires require significant training and may take significant time before they achieve full productivity. Our recent hires and planned hires may not become productive as quickly as we expect, and we may be unable to hire or retain sufficient numbers of qualified individuals in the markets where we do business or plan to do business. In addition, as we continue to grow rapidly, a large percentage of our sales force is new to the company and our product. If we are unable to hire and train sufficient numbers of effective sales personnel, or the sales personnel are not successful in obtaining new customers or increasing sales to our existing customer base, our business will be adversely affected.

Our sales cycle is long and unpredictable, particularly with respect to large customers, and our sales efforts require considerable time and expense.

        Our operating results may fluctuate, in part, because of the resource intensive nature of our sales efforts, the length and variability of the sales cycle of our software offerings and the short-term difficulty in adjusting our operating expenses. Our operating results depend in part on sales to large customers and conversions of users that have downloaded the trial version of our software into paying customers. The length of our sales cycle, from initial evaluation to delivery of and payment for the software, varies substantially from customer to customer. Our sales cycle can extend to more than a year for large customers. It is difficult to predict exactly when, or even if, we will make a sale with a potential customer or if a user that has downloaded the trial version of our software will upgrade to the paid version of our software. As a result, large individual sales have, in some cases, occurred in quarters subsequent to those we anticipated, or have not occurred at all. The loss or delay of one or more large transactions in a quarter could impact our operating results for that quarter and any future quarters for which revenue from that transaction is delayed. As a result of these factors, it is difficult for us to forecast our revenues accurately in any quarter. Because a substantial portion of our expenses are relatively fixed in the short-term, our operating results will suffer if revenues fall below our expectations in a particular quarter, which could cause the price of our common stock to decline.

Our business and growth depend substantially on customers renewing their maintenance agreements with us. Any decline in our customer renewals could adversely affect our future operating results.

        While most of our software is sold under perpetual license agreements, all of our maintenance and support agreements are sold on a term basis. In addition, we also enter into term license agreements for our software. In order for us to improve our operating results, it is important that our existing customers renew their term licenses, if applicable, and maintenance and support agreements when the initial contract term expires. Our customers have no obligation to renew their term licenses or maintenance and support contracts with us after the initial terms have expired. Our customers' renewal rates may decline or fluctuate as a result of a number of factors, including their satisfaction or dissatisfaction with our software, our pricing, the effects of economic conditions or reductions in our customers' spending levels. If our customers do not renew their agreements with us or renew on terms less favorable to us, our revenues may decline.

16


Table of Contents

Incorrect or improper implementation or use of our software could result in customer dissatisfaction and negatively affect our business, results of operations, financial condition and growth prospects.

        Our software is deployed in a wide variety of technology environments. Increasingly, our software has been deployed in large scale, complex technology environments, and we believe our future success will depend on our ability to increase sales of our software for use in such deployments. We often must assist our customers in achieving successful implementations for large, complex deployments. If we or our customers are unable to implement our software successfully, or unable to do so in a timely manner, customer perceptions of our company may be impaired, our reputation and brand may suffer, and customers may choose not to increase their use of our software. In addition, our software imposes server load and index storage requirements for implementation. If our customers do not have the server load capacity or the storage capacity required, they may not be able to effectively implement and use our software and, therefore, may not choose to increase their use of our software.

        Our customers and third-party partners may need training in the proper use of and the variety of benefits that can be derived from our software to maximize its potential. If our software is not implemented or used correctly or as intended, inadequate performance may result. Because our customers rely on our software and maintenance support to manage a wide range of operations, the incorrect or improper implementation or use of our software, our failure to train customers on how to efficiently and effectively use our software, or our failure to provide maintenance services to our customers, may result in negative publicity or legal claims against us. Also, as we continue to expand our customer base, any failure by us to properly provide these services will likely result in lost opportunities for follow-on sales of our software and services.

Our international sales and operations subject us to additional risks that can adversely affect our operating results and financial condition.

        In fiscal 2011 and 2012, we derived 21% and 24% of our revenues, respectively, from customers outside the United States, and we are continuing to expand our international operations as part of our growth strategy. We currently have sales personnel and sales and support operations in the United States and certain countries across Europe and Asia. However, our sales organization outside the United States is substantially smaller than our sales organization in the United States, and we rely heavily on resellers for non-U.S. sales. Our ability to convince customers to expand their use of our software or renew their maintenance agreements with us is directly correlated to our direct engagement with the customer. To the extent we are unable to engage with non-U.S. customers effectively with our limited sales force capacity or our indirect sales model, we may be unable to grow sales to existing customers to the same degree we have experienced in the United States.

        Our international operations subject us to a variety of risks and challenges, including:

    >
    increased management, travel, infrastructure and legal compliance costs associated with having multiple international operations;

    >
    reliance on channel partners;

    >
    longer payment cycles and difficulties in collecting accounts receivable or satisfying revenue recognition criteria, especially in emerging markets;

    >
    increased financial accounting and reporting burdens and complexities;

    >
    general economic conditions in each country or region;

    >
    economic uncertainty around the world, including recent sovereign debt issues in Europe;

    >
    compliance with foreign laws and regulations and the risks and costs of non-compliance with such laws and regulations;

17


Table of Contents

    >
    compliance with U.S. laws and regulations for foreign operations, including the Foreign Corrupt Practices Act, the U.K. Bribery Act, import and export control laws, tariffs, trade barriers, economic sanctions and other regulatory or contractual limitations on our ability to sell our software in certain foreign markets, and the risks and costs of non-compliance;

    >
    heightened risks of unfair or corrupt business practices in certain geographies and of improper or fraudulent sales arrangements that may impact financial results and result in restatements of financial statements and irregularities in financial statements;

    >
    fluctuations in currency exchange rates and related effect on our operating results;

    >
    difficulties in repatriating or transferring funds from or converting currencies in certain countries;

    >
    the need for localized software and licensing programs;

    >
    reduced protection for intellectual property rights in some countries and practical difficulties of enforcing rights abroad; and

    >
    compliance with the laws of numerous foreign taxing jurisdictions and overlapping of different tax regimes.

        Any of these risks could adversely affect our international operations, reduce our international revenues or increase our operating costs, adversely affecting our business, operating results and financial condition and growth prospects.

        In addition, compliance with laws and regulations applicable to our international operations increases our cost of doing business in foreign jurisdictions. We may be unable to keep current with changes in government requirements as they change from time to time. Failure to comply with these regulations could have adverse effects on our business. In many foreign countries it is common for others to engage in business practices that are prohibited by our internal policies and procedures or U.S. regulations applicable to us. Although we implemented policies and procedures designed to ensure compliance with these laws and policies, there can be no assurance that all of our employees, contractors, channel partners and agents will comply with these laws and policies. Violations of laws or key control policies by our employees, contractors, channel partners or agents could result in delays in revenue recognition, financial reporting misstatements, fines, penalties, or the prohibition of the importation or exportation of our software and services and could have a material adverse effect on our business and results of operations.

We are subject to governmental export and import controls that could impair our ability to compete in international markets or subject us to liability if we violate the controls.

        Our products are subject to U.S. export controls, and we incorporate encryption technology into certain of our products. These encryption products and the underlying technology may be exported outside of the United States only with the required export authorizations, including by license, a license exception or other appropriate government authorizations, including the filing of an encryption registration. We shipped our encryption products prior to obtaining the required export authorizations. Accordingly, we have not fully complied with applicable encryption controls in the Export Administration Regulations. We have taken a number of actions to prevent such violations from recurring and continue to review and make enhancements to our export compliance procedures that are designed to further strengthen compliance with the laws.

        Furthermore, U.S. export control laws and economic sanctions prohibit the shipment of certain products and services to countries, governments, and persons targeted by U.S. sanctions. While we are taking precautions to prevent our products and services from being shipped to U.S. sanctions targets, we believe that certain of our products that are available at no cost have been downloaded by persons in countries that are the subject of U.S. embargoes. These free downloads were likely made in violation of U.S. export control and sanctions laws. However, we cannot state with certainty that these downloads

18


Table of Contents

constituted a violation of the relevant laws because the regulatory agencies that administer and enforce the applicable regulations are responsible for determining whether a violation of the regulations has occurred. In March 2012, we filed our Final Voluntary Self Disclosures with the U.S. Department of Commerce's Bureau of Industry and Security, or BIS, and the U.S. Department of Treasury's Office of Foreign Assets Control, or OFAC, concerning these potential violations. At this time, these agencies have not completed their review of these matters.

        Based upon our internal review, we believe that we have not had any paying customers in countries sanctioned by the U.S. Government, and have instituted procedures, including IP blocking, that are intended to prevent any downloads from being made into sanctioned countries in the future. In addition, we had not been screening our customers against the U.S. Government lists of prohibited persons, including the Treasury Department's List of Specially Designated Nationals and the Commerce Department's List of Denied Persons. Based upon our internal review, we believe that we do not have any paying or non-paying customers on any U.S. Government lists of prohibited persons. We have instituted a process for screening all paying and non-paying customers against U.S. Government lists of prohibited persons going forward.

        If we are found to be in violation of U.S. sanctions or export control laws, it could result in fines or penalties for us and for individuals, including civil penalties of up to $250,000 or twice the value of the transaction, whichever is greater, per violation, and in the event of conviction for a criminal violation, fines of up to $1 million and possible incarceration for responsible employees and managers for willful and knowing violations. We cannot predict when OFAC and BIS will complete their reviews or what enforcement action, if any, they will take.

        We also note that if our channel partners fail to obtain appropriate import, export or re-export licenses or permits, we may also be adversely affected, through reputational harm as well as other negative consequences including government investigations and penalties. We presently incorporate export control compliance requirements in our channel partner agreements. Complying with export control and sanctions regulations for a particular sale may be time-consuming and may result in the delay or loss of sales opportunities.

        In addition, various countries regulate the import of certain encryption technology, including import permitting and licensing requirements, and have enacted laws that could limit our ability to distribute our products or could limit our customers' ability to implement our products in those countries. Changes in our products or future changes in export and import regulations may create delays in the introduction of our products in international markets, prevent our customers with international operations from deploying our products globally or, in some cases, prevent the export or import of our products to certain countries, governments, or persons altogether. Any change in export or import regulations, economic sanctions or related legislation, or change in the countries, governments, persons or technologies targeted by such regulations, could result in decreased use of our products by, or in our decreased ability to export or sell our products to, existing or potential customers with international operations. Any decreased use of our products or limitation on our ability to export or sell our products would likely adversely affect our business, financial condition and results of operations.

If we are unable to maintain successful relationships with our channel partners, our business, operating results and financial condition could be adversely affected.

        In addition to our direct sales force, we use strategic indirect channel partners, such as distribution partners and resellers, to license and support our software. We derive a substantial portion of our revenues from sales of our software through our channel network, particularly in the Europe, Middle East and Africa, or EMEA, and Asia Pacific, or APAC, regions and for sales to government agencies. We expect that sales through channel partners will continue to grow as a portion of our revenues for the foreseeable future.

19


Table of Contents

        Our agreements with our channel partners are generally non-exclusive, meaning our channel partners may offer customers the products of several different companies, including products that compete with ours. If our channel partners do not effectively market and sell our software, choose to use greater efforts to market and sell their own products or those of our competitors, or fail to meet the needs of our customers, our ability to grow our business and sell our software may be adversely affected. Our channel partners may cease marketing our software with limited or no notice and with little or no penalty. The loss of a substantial number of our channel partners, our possible inability to replace them, or the failure to recruit additional channel partners could materially and adversely affect our results of operations. In addition, sales by channel partners are more likely than direct sales to involve collectibility concerns, in particular sales by our channel partners in developing markets, and accordingly, variations in the mix between revenues attributable to sales by channel partners and revenues attributable to direct sales may result in fluctuations in our operating results.

        Our ability to achieve revenue growth in the future will depend in part on our success in maintaining successful relationships with our channel partners, and to help our channel partners enhance their ability to independently sell and deploy our software. If we are unable to maintain our relationships with these channel partners, or otherwise develop and expand our indirect distribution channel, our business, results of operations, financial condition or cash flows could be adversely affected.

We employ a unique pricing model which subjects us to various challenges that could make it difficult for us to derive expected value from our customers.

        We charge our customers for their use of our software based on the customers' estimated daily indexing capacity. As the amount of machine data within our customers' organizations grows, we may face pressure from our customers regarding our pricing, which could adversely affect our revenues and operating margins. Furthermore, while our software can measure and limit customer usage, such limitations may be improperly circumvented or otherwise bypassed by certain users. Similarly, we provide our customers with an encrypted key for enabling their use of our software. To the extent that a customer improperly copies and distributes the encrypted key to others or uses the encrypted key to install our software on multiple machines, we may not be able to capture the full value for the use of our software. Our enterprise license is meant for our customers' internal use only. If customers improperly make our software available to their customers, for example, through a cloud or managed service offering, it may cannibalize our end user sales or commoditize our software in the market. Additionally, if a customer that has received a volume discount from us offers our software to its end customers, we may experience price erosion and be unable to capture the appropriate value from those end customers.

        Our license agreements generally provide that we can audit our customers' use of our software to ensure compliance with the terms of our license agreement. However, a customer may resist or refuse to allow us to audit their usage, in which case we may have to pursue legal recourse to enforce our rights under the license agreement, which would require us to spend money, distract management and potentially adversely affect our relationship with our customers and users.

Interruptions or performance problems associated with our technology and infrastructure, and our reliance on SaaS technologies from third parties, may adversely affect our business and operating results.

        Our continued growth depends in part on the ability of our existing and potential customers to access our website and download our software or encrypted access keys for our software within an acceptable amount of time. We have experienced, and may in the future experience, website disruptions, outages and other performance problems due to a variety of factors, including infrastructure changes, human or software errors, capacity constraints due to an overwhelming number of users accessing our website simultaneously and denial of service or fraud or security attacks. In some instances, we may not be able to identify the cause or causes of these website performance problems within an acceptable period of time. It may become increasingly difficult to maintain and improve our website performance, especially during

20


Table of Contents

peak usage times and as our software becomes more complex and our user traffic increases. If our website is unavailable or if our users are unable to download our software or encrypted access keys within a reasonable amount of time or at all, our business would be negatively affected. We expect to continue to make significant investments to maintain and improve website performance and to enable rapid releases of new features and apps for our software. To the extent that we do not effectively address capacity constraints, upgrade our systems as needed and continually develop our technology and network architecture to accommodate actual and anticipated changes in technology, our business and operating results may be adversely affected.

        In addition, we rely heavily on hosted, Software-as-a-Service, or SaaS, technologies from third parties in order to operate critical functions of our business, including enterprise resource planning services from NetSuite and customer relationship management services from salesforce.com. If these services become unavailable due to extended outages, interruptions or because they are no longer available on commercially reasonable terms or prices, our expenses could increase, our ability to manage our finances could be interrupted and our processes for managing sales of our software and supporting our customers could be impaired until equivalent services, if available, are identified, obtained and implemented, all of which could adversely affect our business.

        Our systems are also vulnerable to damage or interruption from catastrophic occurrences such as earthquakes, floods, fires, power loss, telecommunication failures, terrorist attacks and similar events. Our U.S. corporate offices and certain of the facilities we lease to house our computer and telecommunications equipment are located in the San Francisco Bay Area, a region known for seismic activity. Despite any precautions we may take, the occurrence of a natural disaster or other unanticipated problems at our hosting facilities could result in interruptions, performance problems or failure of our infrastructure.

One of our marketing strategies is to offer a trial version of our software, and we may not be able to realize the benefits of this strategy.

        We offer a trial version of our software to users free of charge as part of our overall strategy of developing the market for software that provides operational intelligence and promoting additional penetration of our software in the markets in which we compete. Some users never convert from the trial version to the paid version of our software. Further, we depend on individuals within an organization who download the trial version of our software being able to convince managers and decision-makers within their organization to convert to a paid version of our software. To the extent that these users do not become or lead to others who become paying customers, we will not realize the intended benefits of this marketing strategy and our ability to grow our revenues will be adversely affected.

If customers demand software that provides operational intelligence via a "Software-as-a-Service" business model, our business could be adversely affected.

        Software-as-a-Service, or SaaS, is a model of software deployment in which a software provider typically licenses an application to customers for use as a service on demand through web browser technologies. While we do not currently offer a commercial version of our product through a SaaS model, we are investing in the development of Splunk Storm, our cloud-based service (currently in beta) that provides a subset of our software's capabilities but is tailored for supporting machine data processing in the cloud. A SaaS business model can require a vendor to undertake substantial capital investments and develop related sales and support resources and personnel. In recent years, companies have begun to expect that key software, such as customer relationship management and enterprise resource planning systems, be provided through a SaaS model. If customers were to require that we provide our product via a SaaS deployment, we would need to direct a significant portion of our capital investments to implement this alternative business model, which would negatively affect our gross margins. Even if we make these investments, we may be unsuccessful in implementing a SaaS business model. Moreover, sales of a potential future SaaS offering could cannibalize sales of Splunk Enterprise. In addition, the change to a

21


Table of Contents

SaaS model would result in changes in the manner in which we recognize revenues. Changes in revenue recognition would affect our operating results and could have an adverse effect on our business, results of operations, financial condition and cash flows.

Our business depends, in part, on sales to the public sector, and significant changes in the contracting or fiscal policies of the public sector could have a material adverse effect on our business.

        We derive a portion of our revenues from contracts with federal, state, local and foreign governments, and we believe that the success and growth of our business will continue to depend on our successful procurement of government contracts. Factors that could impede our ability to maintain or increase the amount of revenues derived from government contracts, include:

    >
    changes in fiscal or contracting policies;

    >
    decreases in available government funding;

    >
    changes in government programs or applicable requirements;

    >
    the adoption of new laws or regulations or changes to existing laws or regulations;

    >
    potential delays or changes in the government appropriations or other funding authorization processes; and

    >
    delays in the payment of our invoices by government payment offices.

        The occurrence of any of the foregoing could cause governments and governmental agencies to delay or refrain from purchasing our software in the future or otherwise have an adverse effect on our business, results of operations, financial condition and cash flows.

Failure to comply with laws or regulations applicable to our business could cause us to lose customers in the public sector or negatively impact our ability to contract with the public sector.

        We must comply with laws and regulations relating to the formation, administration and performance of contracts with the public sector, including U.S. federal, state and local governmental bodies, which affect how we and our channel partners do business in connection with governmental agencies. These laws and regulations may impose added costs on our business, and failure to comply with these or other applicable regulations and requirements, including non-compliance in the past, could lead to claims for damages from our channel partners, penalties, termination of contracts, loss of exclusive rights in our intellectual property, and temporary suspension or permanent debarment from government contracting. Any such damages, penalties, disruptions or limitations in our ability to do business with the public sector could have a material adverse effect on our business, results of operations, financial condition and cash flows.

Real or perceived errors, failures or bugs in our software could adversely affect our operating results and growth prospects.

        Because our software is complex, undetected errors, failures or bugs may occur, especially when new versions or updates are released. Our software is often installed and used in large-scale computing environments with different operating systems, system management software, and equipment and networking configurations, which may cause errors or failures of our software or other aspects of the computing environment into which it is deployed. In addition, deployment of our software into complicated, large-scale computing environments may expose undetected errors, failures or bugs in our software. Despite testing by us, errors, failures or bugs may not be found in our software until it is released to our customers. In the past, we have discovered software errors, failures and bugs in some of our offerings after their introduction. Real or perceived errors, failures or bugs in our software could result in negative publicity, loss of or delay in market acceptance of our software, loss of competitive position or claims by customers for losses sustained by them. In such an event, we may be required, or may choose, for customer relations or other reasons, to expend additional resources in order to help correct the problem.

22


Table of Contents

        In addition, if an actual or perceived failure of our software occurs in a customer's deployment, regardless of whether the failure is attributable to our software, the market perception of the effectiveness of our software could be adversely affected. Alleviating any of these problems could require significant expenditures of our capital and other resources and could cause interruptions, delays or cessation of our licensing, which could cause us to lose existing or potential customers and could adversely affect our operating results and growth prospects.

If our new software and software enhancements do not achieve sufficient market acceptance, our results of operations and competitive position will suffer.

        We spend substantial amounts of time and money to research and develop new and enhanced versions of our existing software to incorporate additional features, improve functionality or other enhancements in order to meet our customers' rapidly evolving demands. In addition, we continue to invest in solutions that can be deployed on top of our core engine to target specific cases and to cultivate our community of application developers and users. When we develop a new or enhanced version of an existing product, we typically incur expenses and expend resources upfront to market, promote and sell the new offering. Therefore, when we develop and introduce new or enhanced products, they must achieve high levels of market acceptance in order to justify the amount of our investment in developing and bringing them to market. For example, if our cloud-based service, Splunk Storm, does not garner widespread market adoption and implementation, our operating results and competitive position could suffer.

        Further, we may make changes to our software that our customers do not like, find useful or agree with. We may also discontinue certain features, begin to charge for certain features that are currently free or increase fees for any of our features or usage of our software.

        Our new software or software enhancements and changes to our existing software could fail to attain sufficient market acceptance for many reasons, including:

    >
    failure to predict market demand accurately in terms of software functionality and to supply software that meets this demand in a timely fashion;

    >
    defects, errors or failures;

    >
    negative publicity about their performance or effectiveness;

    >
    delays in releasing our new software or enhancements to our existing software to the market;

    >
    introduction or anticipated introduction of competing products by our competitors;

    >
    poor business conditions for our end-customers, causing them to delay IT purchases; and

    >
    reluctance of customers to purchase software incorporating open source software.

        If our new software or enhancements and changes do not achieve adequate acceptance in the market, our competitive position will be impaired, and our revenues will be diminished. The adverse effect on our operating results may be particularly acute because of the significant research, development, marketing, sales and other expenses we will have incurred in connection with the new software or enhancements.

If we are not able to maintain and enhance our brand, our business and operating results may be adversely affected.

        We believe that maintaining and enhancing the "Splunk" brand identity is critical to our relationships with our customers and channel partners and to our ability to attract new customers and channel partners. The successful promotion of our brand will depend largely upon our marketing efforts, our ability to continue to offer high-quality software and our ability to successfully differentiate our software from that of our competitors. Our brand promotion activities may not be successful or yield increased revenues. In addition, independent industry analysts often provide reviews of our product, as well as those of our competitors, and perception of our product in the marketplace may be significantly influenced by these

23


Table of Contents

reviews. If these reviews are negative, or less positive as compared to those of our competitors' products and services, our brand may be adversely affected.

        Moreover, it may be difficult to maintain and enhance our brand in connection with sales through channel or strategic partners. The promotion of our brand requires us to make substantial expenditures, and we anticipate that the expenditures will increase as our market becomes more competitive, as we expand into new markets and as more sales are generated through our channel partners. To the extent that these activities yield increased revenues, these revenues may not offset the increased expenses we incur. If we do not successfully maintain and enhance our brand, our business may not grow, we may have reduced pricing power relative to competitors with stronger brands, and we could lose customers and channel partners, all of which would adversely affect our business, results of operations, financial condition and cash flows.

Our future performance depends in part on proper use of our community website, Splunkbase, and support from third-party software developers.

        Our software enables third-party software developers to build apps on top of our machine data engine. We operate a community website that we call Splunkbase for sharing these third party apps, including add-ons and extensions. While we expect Splunkbase to support our sales and marketing efforts, it also presents certain risks to our business, including:

    >
    third-party developers may not continue developing or supporting the software apps that they share on Splunkbase;

    >
    we cannot provide any assurance that these apps meet the same quality standards that we apply to our own development efforts, and, to the extent they contain bugs or defects, they may create disruptions in our customers' use of our software or negatively affect our brand;

    >
    we do not currently provide support for software apps developed by third-party software developers, and users may be left without support and potentially cease using our software if the third-party software developers do not provide support for these apps;

    >
    these third-party software developers may not possess the appropriate intellectual property rights to develop and share their apps; and

    >
    some of these developers may use the insight they gain using our software and from documentation publicly available on our website to develop competing products.

        Many of these risks are not within our control to prevent, and our brand may be damaged if these apps, add-ons and extensions do not perform to our customers' satisfaction and that dissatisfaction is attributed to us.

If poor advice or misinformation is spread through Splunk Answers, users of our software may experience unsatisfactory results from using our software, which could adversely affect our reputation and our ability to grow our business.

        In addition, as part of Splunkbase, we host a community site called Splunk Answers for sharing knowledge about how to perform certain functions with our software. Our users are increasingly turning to Splunk Answers for support in connection with their use of our software. We do not review or test the information that non-Splunk employees post on Splunk Answers to ensure its accuracy or efficacy in resolving technical issues. Therefore, we cannot ensure that all the information listed on Splunk Answers is accurate or that it will not adversely affect the performance of our software. Furthermore, users who post such information on Splunk Answers may not have adequate rights to the information to share it publicly, and we could be the subject of intellectual property claims based on our hosting of such information. If poor advice or misinformation is spread among users of Splunk Answers, our customers or other users of

24


Table of Contents

our software may experience unsatisfactory results from using our software, which could adversely affect our reputation and our ability to grow our business.

Failure to protect our intellectual property rights could adversely affect our business.

        Our success depends, in part, on our ability to protect proprietary methods and technologies that we develop under patent and other intellectual property laws of the United States, so that we can prevent others from using our inventions and proprietary information. If we fail to protect our intellectual property rights adequately, our competitors might gain access to our technology, and our business might be adversely affected. However, defending our intellectual property rights might entail significant expenses. Any of our patent rights, copyrights, trademarks or other intellectual property rights may be challenged by others or invalidated through administrative process or litigation. As of March 31, 2012, we had two issued U.S. patents covering our machine data technology. We also had one provisional patent application pending and eleven utility patent applications pending for examination in the United States. Finally, we also had six utility patent applications pending for examination in non-U.S. jurisdictions, and eight pending Patent Cooperation Treaty utility patent applications, all of which are counterparts of our U.S. utility patent applications. Our issued patent, and any patents issued in the future, may not provide us with any competitive advantages or may be challenged by third parties, and our patent applications may never be granted. Additionally, the process of obtaining patent protection is expensive and time-consuming, and we may not be able to prosecute all necessary or desirable patent applications at a reasonable cost or in a timely manner. Even if issued, there can be no assurance that these patents will adequately protect our intellectual property, as the legal standards relating to the validity, enforceability and scope of protection of patent and other intellectual property rights are uncertain.

        Any patents that are issued may subsequently be invalidated or otherwise limited, allowing other companies to develop offerings that compete with ours, which could adversely affect our competitive business position, business prospects and financial condition. In addition, issuance of a patent does not guarantee that we have a right to practice the patented invention. Patent applications in the United States are typically not published until 18 months after filing or, in some cases, not at all, and publications of discoveries in industry-related literature lag behind actual discoveries. We cannot be certain that we were the first to use the inventions claimed in our issued patents or pending patent applications or otherwise used in our software, that we were the first to file for protection in our patent applications, or that third parties do not have blocking patents that could be used to prevent us from marketing or practicing our patented software or technology. Effective patent, trademark, copyright and trade secret protection may not be available to us in every country in which our software is available. The laws of some foreign countries may not be as protective of intellectual property rights as those in the United States (in particular, some foreign jurisdictions do not permit patent protection for software), and mechanisms for enforcement of intellectual property rights may be inadequate. Additional uncertainty may result from changes to intellectual property legislation enacted in the United States (including the recent "America Invents Act") and other national governments and from interpretations of the intellectual property laws of the United States and other countries by applicable courts and agencies. Accordingly, despite our efforts, we may be unable to prevent third parties from infringing upon or misappropriating our intellectual property.

        We rely in part on trade secrets, proprietary know-how and other confidential information to maintain our competitive position. Although we endeavor to enter into non-disclosure agreements with our employees, licensees and others who may have access to this information, we cannot assure you that these agreements or other steps we have taken will prevent unauthorized use, disclosure or reverse engineering of our technology. Moreover, third parties may independently develop technologies or products that compete with ours, and we may be unable to prevent this competition.

        We might be required to spend significant resources to monitor and protect our intellectual property rights. We may initiate claims or litigation against third parties for infringement of our proprietary rights or

25


Table of Contents

to establish the validity of our proprietary rights. Litigation also puts our patents at risk of being invalidated or interpreted narrowly and our patent applications at risk of not issuing. Additionally, we may provoke third parties to assert counterclaims against us. We may not prevail in any lawsuits that we initiate, and the damages or other remedies awarded, if any, may not be commercially viable. Any litigation, whether or not it is resolved in our favor, could result in significant expense to us and divert the efforts of our technical and management personnel, which may adversely affect our business, results of operations, financial condition and cash flows.

We have been, and may in the future be, subject to intellectual property rights claims by third parties, which are extremely costly to defend, could require us to pay significant damages and could limit our ability to use certain technologies.

        Companies in the software and technology industries, including some of our current and potential competitors, own large numbers of patents, copyrights, trademarks and trade secrets and frequently enter into litigation based on allegations of infringement or other violations of intellectual property rights. In addition, many of these companies have the capability to dedicate substantially greater resources to enforce their intellectual property rights and to defend claims that may be brought against them. The litigation may involve patent holding companies or other adverse patent owners that have no relevant product revenues and against which our patents may therefore provide little or no deterrence. We have received, and may in the future receive, notices that claim we have misappropriated, misused, or infringed other parties' intellectual property rights, and, to the extent we gain greater market visibility, we face a higher risk of being the subject of intellectual property infringement claims, which is not uncommon with respect to the enterprise software market. In this regard, we recently settled a dispute with respect to the Splunk trademark in the European Union. There may be third-party intellectual property rights, including issued or pending patents, that cover significant aspects of our technologies or business methods. Any intellectual property claims, with or without merit, could be very time-consuming, could be expensive to settle or litigate and could divert our management's attention and other resources. These claims could also subject us to significant liability for damages, potentially including treble damages if we are found to have willfully infringed patents or copyrights. These claims could also result in our having to stop using technology found to be in violation of a third party's rights. We might be required to seek a license for the intellectual property, which may not be available on reasonable terms or at all. Even if a license were available, we could be required to pay significant royalties, which would increase our operating expenses. As a result, we may be required to develop alternative non-infringing technology, which could require significant effort and expense. If we cannot license or develop technology for any infringing aspect of our business, we would be forced to limit or stop sales of our software and may be unable to compete effectively. Any of these results would adversely affect our business, results of operations, financial condition and cash flows.

Our use of "open source" software could negatively affect our ability to sell our software and subject us to possible litigation.

        We use open source software in our software and expect to continue to use open source software in the future. We may face claims from others claiming ownership of, or seeking to enforce the terms of, an open source license, including by demanding release of the open source software, derivative works or our proprietary source code that was developed using such software. These claims could also result in litigation, require us to purchase a costly license or require us to devote additional research and development resources to change our software, any of which would have a negative effect on our business and operating results. In addition, if the license terms for the open source code change, we may be forced to re-engineer our software or incur additional costs. Finally, we cannot assure you that we have not incorporated additional open source software in our software in a manner that is inconsistent with our current policies and procedures.

26


Table of Contents

If our security measures are breached or unauthorized access to customer data is otherwise obtained, our software may be perceived as not being secure, customers may reduce the use of or stop using our software, and we may incur significant liabilities.

        Our software involves the storage and transmission of data, and security breaches could result in the loss of this information, litigation, indemnity obligations and other liability. While we have taken steps to protect the confidential information that we have access to, including confidential information we may obtain through our customer support services or customer usage of Splunk Storm, our cloud-based service currently in beta, we do not have the ability to monitor or review the content that our customers store, and therefore, we have no direct control over the substance of the content. Therefore, if customers use our software for the transmission or storage of personally identifiable information and our security measures are breached as a result of third-party action, employee error, malfeasance or otherwise, our reputation could be damaged, our business may suffer, and we could incur significant liability. Because techniques used to obtain unauthorized access or sabotage systems change frequently and generally are not identified until they are launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative measures. Any or all of these issues could negatively impact our ability to attract new customers and increase engagement by existing customers, cause existing customers to elect to not renew their subscriptions, or subject us to third-party lawsuits, regulatory fines or other action or liability, thereby adversely affecting our operating results.

Because our software could be used to collect and store personal information, domestic and international privacy concerns could result in additional costs and liabilities to us or inhibit sales of our software.

        Personal privacy has become a significant issue in the United States and in many other countries where we offer our software. The regulatory framework for privacy issues worldwide is rapidly evolving and is likely to remain uncertain for the foreseeable future. Many federal, state and foreign government bodies and agencies have adopted or are considering adopting laws and regulations regarding the collection, use and disclosure of personal information. In the United States, these include rules and regulations promulgated under the authority of the Federal Trade Commission, the Health Insurance Portability and Accountability Act (HIPAA) of 1996 and state breach notification laws. Internationally, virtually every jurisdiction in which we operate has established its own data security and privacy legal framework with which we or our customers must comply, including the Data Protection Directive established in the European Union and the Federal Data Protection Act recently implemented in Germany.

        In addition to government regulation, privacy advocates and industry groups may propose new and different self-regulatory standards that either legally or contractually apply to us. Because the interpretation and application of privacy and data protection laws are still uncertain, it is possible that these laws may be interpreted and applied in a manner that is inconsistent with our existing data management practices or the features of our software. If so, in addition to the possibility of fines, lawsuits and other claims, we could be required to fundamentally change our business activities and practices or modify our software, which could have an adverse effect on our business. Any inability to adequately address privacy concerns, even if unfounded, or comply with applicable privacy or data protection laws, regulations and policies, could result in additional cost and liability to us, damage our reputation, inhibit sales and adversely affect our business.

        Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations, and policies that are applicable to the businesses of our customers may limit the use and adoption of, and reduce the overall demand for, our software. Privacy concerns, whether valid or not valid, may inhibit market adoption of our software particularly in certain industries and foreign countries.

27


Table of Contents

Federal, state and industry regulations as well as self-regulation related to privacy and data security concerns pose the threat of lawsuits and other liability.

        We may collect and utilize demographic and other information, including personally identifiable information, from and about users (such as customers, potential customers, and others) as they interact with Splunk over the internet and otherwise provide us with information whether via our website, through email, or through other means. Users may provide personal information to us in many contexts such as when signing up for certain services, registering for seminars, participating in a survey, when answering questions on Splunk Answers, when posting reviews or otherwise commenting on Splunk apps, when using other community or social networking features, when participating in polls or when signing up to receive e-mail newsletters.

        Within the United States, various federal and state laws and regulations govern the collection, use, retention, sharing and security of the data we receive from and about users. Outside of the United States, various jurisdictions actively regulate and enforce laws regarding the collection, retention, transfer, and use (including loss and unauthorized access) of personal information. Privacy advocates and government bodies have increasingly scrutinized the ways in which companies link personal identities and data associated with particular users or devices with data collected through the internet, and we expect such scrutiny to continue to increase. Loss, retention or misuse of certain information and alleged violations of laws and regulations relating to privacy and data security, and any relevant claims, may expose us to potential liability and may require us to expend significant resources on data security and in responding to and defending such allegations and claims.

If we are unable to attract and retain key personnel, our business could be adversely affected.

        We depend on the continued contributions of our senior management and other key personnel, the loss of whom could adversely affect our business. All of our executive officers and key employees are at-will employees, which means they may terminate their employment relationship with us at any time. We do not maintain a key-person life insurance policy on any of our officers or other employees.

        Our future success also depends on our ability to identify, attract and retain highly skilled technical, managerial, finance and other personnel, particularly in our sales and marketing, research and development, general and administrative, and professional service departments. We face intense competition for qualified individuals from numerous software and other technology companies. In addition, competition for qualified personnel, particularly software engineers, is particularly intense in the San Francisco Bay Area, where our headquarters are located. We may incur significant costs to attract and retain them, and we may lose new employees to our competitors or other technology companies before we realize the benefit of our investment in recruiting and training them. As we move into new geographies, we will need to attract and recruit skilled personnel in those areas. If we are unable to attract and retain suitably qualified individuals who are capable of meeting our growing technical, operational and managerial requirements, on a timely basis or at all, our business will be adversely affected.

        Volatility or lack of performance in our stock price may also affect our ability to attract and retain our key employees. Many of our senior management personnel and other key employees have become, or will soon become, vested in a substantial amount of stock or stock options. Employees may be more likely to leave us if the shares they own or the shares underlying their vested options have significantly appreciated in value relative to the original purchase prices of the shares or the exercise prices of the options, or, conversely, if the exercise prices of the options that they hold are significantly above the market price of our common stock. If we are unable to retain our employees, or if we need to increase our compensation expenses to retain our employees, our business, results of operations, financial condition and cash flows would be adversely affected.

28


Table of Contents

Prolonged economic uncertainties or downturns could materially adversely affect our business.

        Current or future economic downturns could adversely affect our business and results of operations. Negative conditions in the general economy both in the United States and abroad, including conditions resulting from financial and credit market fluctuations and terrorist attacks on the United States, Europe, Asia Pacific or elsewhere, could cause a decrease in corporate spending on enterprise software in general and negatively affect the rate of growth of our business.

        General worldwide economic conditions have experienced a significant downturn and continue to remain unstable. These conditions make it extremely difficult for our customers and us to forecast and plan future business activities accurately, and they could cause our customers to reevaluate their decision to purchase our product, which could delay and lengthen our sales cycles or result in cancellations of planned purchases. Furthermore, during challenging economic times our customers may face issues in gaining timely access to sufficient credit, which could result in an impairment of their ability to make timely payments to us. If that were to occur, we may be required to increase our allowance for doubtful accounts, which would adversely affect our financial results.

        We have a significant number of customers in the business services, financial services, healthcare and pharmaceuticals, high technology, manufacturing, media and entertainment, online services, retail, telecommunications and travel and transportation industries. A substantial downturn in any of these industries may cause firms to react to worsening conditions by reducing their capital expenditures in general or by specifically reducing their spending on information technology. Customers in these industries may delay or cancel information technology projects or seek to lower their costs by renegotiating vendor contracts. To the extent purchases of our software are perceived by customers and potential customers to be discretionary, our revenues may be disproportionately affected by delays or reductions in general information technology spending. Also, customers may choose to develop in-house software as an alternative to using our products. Moreover, competitors may respond to market conditions by lowering prices and attempting to lure away our customers. In addition, the increased pace of consolidation in certain industries may result in reduced overall spending on our software.

        We cannot predict the timing, strength or duration of any economic slowdown, instability or recovery, generally or within any particular industry. If the economic conditions of the general economy or industries in which we operate worsen from present levels, our business, results of operations, financial condition and cash flows could be adversely affected.

We may require additional capital to support business growth, and this capital might not be available on acceptable terms, if at all.

        We intend to continue to make investments to support our business growth and may require additional funds to respond to business challenges, including the need to develop new features or enhance our software, improve our operating infrastructure or acquire complementary businesses and technologies. Accordingly, we may need to engage in equity or debt financings to secure additional funds. If we raise additional funds through future issuances of equity or convertible debt securities, our existing stockholders could suffer significant dilution, and any new equity securities we issue could have rights, preferences and privileges superior to those of holders of our common stock. Any debt financing that we may secure in the future could involve restrictive covenants relating to our capital raising activities and other financial and operational matters, which may make it more difficult for us to obtain additional capital and to pursue business opportunities, including potential acquisitions. We may not be able to obtain additional financing on terms favorable to us, if at all. If we are unable to obtain adequate financing or financing on terms satisfactory to us when we require it, our ability to continue to support our business growth and to respond to business challenges could be significantly impaired, and our business may be adversely affected.

29


Table of Contents

Future acquisitions could disrupt our business and adversely affect our results of operations, financial condition and cash flows.

        We may choose to expand by making acquisitions that could be material to our business, results of operations, financial condition and cash flows. Our ability as an organization to successfully acquire and integrate technologies or businesses is unproven. Acquisitions involve many risks, including the following:

    >
    an acquisition may negatively affect our results of operations, financial condition or cash flows because it may require us to incur charges or assume substantial debt or other liabilities, may cause adverse tax consequences or unfavorable accounting treatment, may expose us to claims and disputes by third parties, including intellectual property claims and disputes, or may not generate sufficient financial return to offset additional costs and expenses related to the acquisition;

    >
    we may encounter difficulties or unforeseen expenditures in integrating the business, technologies, products, personnel or operations of any company that we acquire, particularly if key personnel of the acquired company decide not to work for us;

    >
    an acquisition may disrupt our ongoing business, divert resources, increase our expenses and distract our management;

    >
    an acquisition may result in a delay or reduction of customer purchases for both us and the company acquired due to customer uncertainty about continuity and effectiveness of service from either company;

    >
    we may encounter difficulties in, or may be unable to, successfully sell any acquired products;

    >
    an acquisition may involve the entry into geographic or business markets in which we have little or no prior experience or where competitors have stronger market positions;

    >
    our use of cash to pay for acquisition would limit other potential uses for our cash;

    >
    if we incur debt to fund such acquisition, such debt may subject us to material restrictions on our ability to conduct our business as well as financial maintenance covenants; and

    >
    to the extent that we issue a significant amount of equity securities in connection with future acquisitions, existing stockholders may be diluted and earnings per share may decrease.

        The occurrence of any of these risks could have a material adverse effect on our business, results of operations, financial condition and cash flows.

If currency exchange rates fluctuate substantially in the future, the results of our operations, which are reported in U.S. dollars, could be adversely affected.

        As we continue to expand our international operations, we become more exposed to the effects of fluctuations in currency exchange rates. Our sales contracts are denominated in U.S. dollars, and therefore substantially all of our revenues are not subject to foreign currency risk. However, a strengthening of the U.S. dollar could increase the real cost of our software to our customers outside of the United States, which could adversely affect our business, results of operations, financial condition and cash flows. We incur expenses for employee compensation and other operating expenses at our non-U.S. locations in the local currency. Fluctuations in the exchange rates between the U.S. dollar and other currencies could result in the dollar equivalent of such expenses being higher. This could have a negative impact on our reported operating results. To date, we have not engaged in any hedging strategies, and any such strategies, such as forward contracts, options and foreign exchange swaps related to transaction exposures that we may implement to mitigate this risk may not eliminate our exposure to foreign exchange fluctuations.

30


Table of Contents

The enactment of legislation implementing changes in the U.S. taxation of international business activities or the adoption of other tax reform policies could materially impact our financial position and results of operations.

        Recent changes to U.S. tax laws, including limitations on the ability of taxpayers to claim and utilize foreign tax credits and the deferral of certain tax deductions until earnings outside of the United States are repatriated to the United States, as well as changes to U.S. tax laws that may be enacted in the future, could impact the tax treatment of our foreign earnings. Due to expansion of our international business activities, any changes in the U.S. taxation of such activities may increase our worldwide effective tax rate and adversely affect our financial position and results of operations.

Our ability to use our net operating losses to offset future taxable income may be subject to certain limitations.

        In general, under Section 382 of the Internal Revenue Code of 1986, as amended, or the Code, a corporation that undergoes an "ownership change" is subject to limitations on its ability to utilize its pre-change net operating losses, or NOLs, to offset future taxable income. Our existing NOLs may be subject to limitations arising from previous ownership changes, and if we undergo an ownership change in connection with or after this offering, our ability to utilize NOLs could be further limited by Section 382 of the Code. Future changes in our stock ownership, some of which are outside of our control, could result in an ownership change under Section 382 of the Code. Furthermore, our ability to utilize NOLs of companies that we may acquire in the future may be subject to limitations. There is also a risk that due to regulatory changes, such as suspensions on the use of NOLs, or other unforeseen reasons, our existing NOLs could expire or otherwise be unavailable to offset future income tax liabilities. For these reasons, we may not be able to utilize a material portion of the NOLs reflected on our balance sheet, even if we attain profitability.

Taxing authorities may successfully assert that we should have collected or in the future should collect sales and use, value added or similar taxes, and we could be subject to liability with respect to past or future sales, which could adversely affect our results of operations.

        We do not collect sales and use, value added and similar taxes in all jurisdictions in which we have sales, based on our belief that such taxes are not applicable. Sales and use, value added and similar tax laws and rates vary greatly by jurisdiction. Certain jurisdictions in which we do not collect such taxes may assert that such taxes are applicable, which could result in tax assessments, penalties and interest, and we may be required to collect such taxes in the future. Such tax assessments, penalties and interest or future requirements may adversely affect our results of operations.

Our international operations subject us to potentially adverse tax consequences.

        We generally conduct our international operations through wholly owned subsidiaries and report our taxable income in various jurisdictions worldwide based upon our business operations in those jurisdictions. We are in the process of organizing our corporate structure to more closely align with the international nature of our business activities. Our intercompany relationships are subject to complex transfer pricing regulations administered by taxing authorities in various jurisdictions. The relevant taxing authorities may disagree with our determinations as to the income and expenses attributable to specific jurisdictions. If such a disagreement were to occur, and our position were not sustained, we could be required to pay additional taxes, interest and penalties, which could result in one-time tax charges, higher effective tax rates, reduced cash flows and lower overall profitability of our operations. We believe that our financial statements reflect adequate reserves to cover such a contingency, but there can be no assurances in that regard.

We could be subject to additional tax liabilities.

        We are subject to federal, state and local taxes in the United States and numerous foreign jurisdictions. Significant judgment is required in evaluating our tax positions and our worldwide provision

31


Table of Contents

for taxes. During the ordinary course of business, there are many activities and transactions for which the ultimate tax determination is uncertain. We recently discovered that we have not complied with various tax rules and regulations in certain foreign jurisdictions. We are working to resolve these matters. In addition, our tax obligations and effective tax rates could be adversely affected by changes in the relevant tax, accounting and other laws, regulations, principles and interpretations, including those relating to income tax nexus, by our earnings being lower than anticipated in jurisdictions where we have lower statutory rates and higher than anticipated in jurisdictions where we have higher statutory rates, by changes in foreign currency exchange rates, or by changes in the valuation of our deferred tax assets and liabilities. We may be audited in various jurisdictions, and such jurisdictions may assess additional taxes against us. Although we believe our tax estimates are reasonable, the final determination of any tax audits or litigation could be materially different from our historical tax provisions and accruals, which could have a material adverse effect on our operating results or cash flows in the period or periods for which a determination is made.

Risks Related to Ownership of Our Common Stock and this Offering

There has been no prior market for our common stock and an active market may not develop or be sustained and investors may not be able to resell their shares at or above the initial public offering price.

        There has been no public market for our common stock prior to this offering. The initial public offering price for our common stock will be determined through negotiations between the underwriters and us and may vary from the market price of our common stock following this offering. If you purchase shares of our common stock in this offering, you may not be able to resell those shares at or above the initial public offering price. An active or liquid market in our common stock may not develop upon completion of this offering or, if it does develop, it may not be sustainable.

Our stock price may be volatile or may decline regardless of our operating performance resulting in substantial losses for investors purchasing shares in this offering.

        The trading prices of the securities of technology companies have been highly volatile. The market price of our common stock may fluctuate significantly in response to numerous factors, many of which are beyond our control, including:

    >
    actual or anticipated fluctuations in our operating results;

    >
    the financial projections we may provide to the public, any changes in these projections or our failure to meet these projections;

    >
    failure of securities analysts to initiate or maintain coverage of our company, changes in financial estimates by any securities analysts who follow our company, or our failure to meet these estimates or the expectations of investors;

    >
    ratings changes by any securities analysts who follow our company;

    >
    announcements by us or our competitors of significant technical innovations, acquisitions, strategic partnerships, joint ventures or capital commitments;

    >
    changes in operating performance and stock market valuations of other technology companies generally, or those in our industry in particular;

    >
    price and volume fluctuations in the overall stock market, including as a result of trends in the economy as a whole;

    >
    any major change in our board of directors or management;

    >
    lawsuits threatened or filed against us; and

    >
    other events or factors, including those resulting from war, incidents of terrorism or responses to these events.

32


Table of Contents

        In addition, the stock markets, and in particular the market on which our common stock will be listed, have experienced extreme price and volume fluctuations that have affected and continue to affect the market prices of equity securities of many technology companies. Stock prices of many technology companies have fluctuated in a manner unrelated or disproportionate to the operating performance of those companies. In the past, stockholders have instituted securities class action litigation following periods of market volatility. If we were to become involved in securities litigation, it could subject us to substantial costs, divert resources and the attention of management from our business and adversely affect our business, results of operations, financial condition and cash flows.

If securities or industry analysts do not publish research or reports about our business, or publish negative reports about our business, our share price and trading volume could decline.

        The trading market for our common stock will depend in part on the research and reports that securities or industry analysts publish about us or our business, our market and our competitors. We do not have any control over these analysts. If one or more of the analysts who cover us downgrade our shares or change their opinion of our shares, our share price would likely decline. If one or more of these analysts cease coverage of our company or fail to regularly publish reports on us, we could lose visibility in the financial markets, which could cause our share price or trading volume to decline.

We may invest or spend the proceeds of this offering in ways with which you may not agree or in ways which may not yield a return.

        We expect to use the net proceeds we receive from this offering for capital expenditures and for general corporate purposes, including working capital, sales and marketing activities, product development, and general and administrative matters. We may also use a portion of the net proceeds to acquire complementary businesses, products, services or technologies. We do not have any agreements or commitments for any acquisitions at this time. Our management will have considerable discretion in the application of the net proceeds, and you will not have the opportunity, as part of your investment decision, to assess whether the proceeds are being used appropriately. The net proceeds may be used for corporate purposes that do not increase the value of our business, which could cause our stock price to decline.

Substantial future sales of shares of our common stock could cause the market price of our common stock to decline.

        The market price of shares of our common stock could decline as a result of substantial sales of our common stock, particularly sales by our directors, executive officers and significant stockholders, a large number of shares of our common stock becoming available for sale or the perception in the market that holders of a large number of shares intend to sell their shares. After this offering, we will have outstanding 92,529,879 shares of our common stock, based on the number of shares outstanding as of January 31, 2012. This includes the shares included in this offering, which may be resold in the public market immediately. The remaining 79,029,879 shares are currently restricted as a result of market stand-off agreements. In addition, certain of these shares are also subject to lock-up agreements, as more fully described in "Underwriters."

        After this offering, the holders of an aggregate of 66,986,549 shares of our common stock as of January 31, 2012 will have rights, subject to some conditions, to require us to file registration statements covering their shares or to include their shares in registration statements that we may file for ourselves or our stockholders. Substantially all of these shares are subject to lock-up agreements restricting their sale for 180 days after the date of this prospectus, subject to potential extension in the event we release earnings results or a material event relating to us occurs near the end of the lock-up period. We also intend to register shares of common stock that we may issue under our employee equity incentive plans. Once we register these shares, they will be able to be sold freely in the public market upon issuance, subject to existing market stand-off and/or lock-up agreements. Morgan Stanley & Co. LLC may, in its sole discretion, permit our officers, directors, employees and current stockholders who are subject to the

33


Table of Contents

180-day contractual lock-up to sell shares prior to the expiration of the lock-up agreements. The 180-day lock-up period is subject to extension in some circumstances.

Purchasers in this offering will experience immediate and substantial dilution in the book value of their investment.

        The initial public offering price per share will be substantially higher than the pro forma net tangible book value per share of our common stock outstanding prior to this offering. As a result, investors purchasing common stock in this offering will experience immediate dilution of $10.54 per share. This dilution is due in large part to the fact that our earlier investors paid substantially less than the initial public offering price when they purchased their shares of common stock. In addition, we have issued options to acquire common stock at prices significantly below the initial public offering price. To the extent outstanding options are ultimately exercised, there will be further dilution to investors in this offering. In addition, if the underwriters exercise their option to purchase additional shares from us or if we issue additional equity securities, you will experience additional dilution.

The requirements of being a public company may strain our resources, divert management's attention and affect our ability to attract and retain executive management and qualified board members.

        As a public company, we will be subject to the reporting requirements of the Securities Exchange Act of 1934, or the Exchange Act, the Sarbanes-Oxley Act, the Dodd-Frank Act, the listing requirements of The NASDAQ Stock Market and other applicable securities rules and regulations. Compliance with these rules and regulations will increase our legal and financial compliance costs, make some activities more difficult, time-consuming or costly and increase demand on our systems and resources. The Exchange Act requires, among other things, that we file annual, quarterly and current reports with respect to our business and operating results. The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. In order to maintain and, if required, improve our disclosure controls and procedures and internal control over financial reporting to meet this standard, significant resources and management oversight may be required. As a result, management's attention may be diverted from other business concerns, which could adversely affect our business and operating results. Although we have already hired additional employees to comply with these requirements, we may need to hire more employees in the future or engage outside consultants, which will increase our costs and expenses.

        In addition, changing laws, regulations and standards relating to corporate governance and public disclosure are creating uncertainty for public companies, increasing legal and financial compliance costs and making some activities more time consuming. These laws, regulations and standards are subject to varying interpretations, in many cases due to their lack of specificity, and, as a result, their application in practice may evolve over time as new guidance is provided by regulatory and governing bodies. This could result in continuing uncertainty regarding compliance matters and higher costs necessitated by ongoing revisions to disclosure and governance practices. We intend to invest resources to comply with evolving laws, regulations and standards, and this investment may result in increased general and administrative expenses and a diversion of management's time and attention from revenue-generating activities to compliance activities. If our efforts to comply with new laws, regulations and standards differ from the activities intended by regulatory or governing bodies due to ambiguities related to their application and practice, regulatory authorities may initiate legal proceedings against us and our business may be adversely affected.

        We also expect that being a public company and these new rules and regulations will make it more expensive for us to obtain director and officer liability insurance, and we may be required to accept reduced coverage or incur substantially higher costs to obtain coverage. These factors could also make it more difficult for us to attract and retain qualified members of our board of directors, particularly to serve on our audit committee and compensation committee, and qualified executive officers.

34


Table of Contents

        As a result of disclosure of information in this prospectus and in filings required of a public company, our business and financial condition will become more visible, which we believe may result in threatened or actual litigation, including by competitors and other third parties. If such claims are successful, our business and operating results could be adversely affected, and even if the claims do not result in litigation or are resolved in our favor, these claims, and the time and resources necessary to resolve them, could divert the resources of our management and adversely affect our business and operating results.

As a result of becoming a public company, we will be obligated to develop and maintain proper and effective internal control over financial reporting. We may not complete our analysis of our internal control over financial reporting in a timely manner, or these internal controls may not be determined to be effective, which may adversely affect investor confidence in our company and, as a result, the value of our common stock.

        We may be required, pursuant to Section 404 of the Sarbanes–Oxley Act, to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting for the first fiscal year beginning after the effective date of this offering. This assessment will need to include disclosure of any material weaknesses identified by our management in our internal control over financial reporting, as well as a statement that our independent registered public accounting firm has issued an opinion on our internal control over financial reporting.

        We are in the very early stages of the costly and challenging process of compiling the system and processing documentation necessary to perform the evaluation needed to comply with Section 404. We may not be able to complete our evaluation, testing and any required remediation in a timely fashion. During the evaluation and testing process, if we identify one or more material weaknesses in our internal control over financial reporting, we will be unable to assert that our internal controls are effective.

        If we are unable to assert that our internal control over financial reporting is effective, or if our independent registered public accounting firm is unable to express an opinion on the effectiveness of our internal controls, we could lose investor confidence in the accuracy and completeness of our financial reports, which would cause the price of our common stock to decline, and we may be subject to investigation or sanctions by the SEC.

We do not intend to pay dividends for the foreseeable future.

        We have never declared or paid any cash dividends on our common stock and do not intend to pay any cash dividends in the foreseeable future. We anticipate that we will retain all of our future earnings for use in the development of our business and for general corporate purposes. Any determination to pay dividends in the future will be at the discretion of our board of directors. Accordingly, investors must rely on sales of their common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investments.

Anti-takeover provisions in our charter documents and under Delaware law could make an acquisition of our company more difficult, limit attempts by our stockholders to replace or remove our current management and limit the market price of our common stock.

        Provisions in our certificate of incorporation and bylaws, as amended and restated in connection with this offering, may have the effect of delaying or preventing a change of control or changes in our management. Our amended and restated certificate of incorporation and bylaws include provisions that:

    >
    authorize our board of directors to issue, without further action by the stockholders, shares of undesignated preferred stock with terms, rights and preferences determined by our board of directors;

    >
    require that any action to be taken by our stockholders be effected at a duly called annual or special meeting and not by written consent;

35


Table of Contents

    >
    specify that special meetings of our stockholders can be called only by our board of directors, the Chairman of our board of directors, or our Chief Executive Officer;

    >
    establish an advance notice procedure for stockholder proposals to be brought before an annual meeting, including proposed nominations of persons for election to our board of directors;

    >
    establish that our board of directors is divided into three classes, Class I, Class II and Class III, with each class serving three-year staggered terms;

    >
    prohibit cumulative voting in the election of directors;

    >
    provide that our directors may be removed only for cause;

    >
    provide that vacancies on our board of directors may be filled only by a majority of directors then in office, even though less than a quorum; and

    >
    require the approval of our board of directors or the holders of a supermajority of our outstanding shares of capital stock to amend our bylaws and certain provisions of our certificate of incorporation.

        These provisions may frustrate or prevent any attempts by our stockholders to replace or remove our current management by making it more difficult for stockholders to replace members of our board of directors, which is responsible for appointing the members of our management. In addition, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the Delaware General Corporation Law, which generally prohibits a Delaware corporation from engaging in any of a broad range of business combinations with any "interested" stockholder for a period of three years following the date on which the stockholder became an "interested" stockholder.

Our directors, executive officers and significant stockholders will continue to have substantial control over us after this offering and could delay or prevent a change in corporate control.

        After this offering, our directors, executive officers and holders of more than 5% of our common stock, together with their affiliates, will beneficially own, in the aggregate, 70.7% of our outstanding common stock. As a result, these stockholders, acting together, would have the ability to control the outcome of matters submitted to our stockholders for approval, including the election of directors and any merger, consolidation or sale of all or substantially all of our assets. In addition, these stockholders, acting together, would have the ability to control the management and affairs of our company. Accordingly, this concentration of ownership might adversely affect the market price of our common stock by:

    >
    delaying, deferring or preventing a change in control of the company;

    >
    impeding a merger, consolidation, takeover or other business combination involving us; or

    >
    discouraging a potential acquirer from making a tender offer or otherwise attempting to obtain control of the company.

36


Table of Contents


SPECIAL NOTE REGARDING FORWARD-LOOKING STATEMENTS

        This prospectus contains forward-looking statements that are based on our management's beliefs and assumptions and on information currently available to our management. The forward-looking statements are contained principally in "Prospectus Summary," "Risk Factors," "Management's Discussion and Analysis of Financial Condition and Results of Operations," "Business" and "Compensation Discussion and Analysis." Forward-looking statements include information concerning:

    >
    our financial performance, including our revenues, cost of revenues, operating expenses, ability to generate positive cash flow and ability to attain and sustain profitability;

    >
    our ability to effectively manage our growth;

    >
    our ability to diversify our sources of revenues;

    >
    our ability to attract and retain customers;

    >
    our ability to drive increased use cases for our software with new and existing customers;

    >
    our ability to introduce and successfully commercialize Splunk Storm and other new products and services;

    >
    our ability to displace existing products in established markets;

    >
    our ability to adapt to changing market conditions;

    >
    the effects of increased competition in our markets;

    >
    our ability to successfully enter new markets and manage our international expansion; and

    >
    our ability to attract and retain qualified employees and key personnel.

        Forward-looking statements include all statements that are not historical facts and can be identified by terms such as "anticipates," "believes," "could," "seeks," "estimates," "expects," "intends," "may," "plans," "potential," "predicts, "projects," "should," "will," "would" or similar expressions and the negatives of those terms.

        Forward-looking statements involve known and unknown risks, uncertainties and other factors that may cause our actual results, performance or achievements to be materially different from any future results, performance or achievements expressed or implied by the forward-looking statements. We discuss these risks in greater detail in "Risk Factors" and elsewhere in this prospectus. Given these uncertainties, you should not place undue reliance on these forward-looking statements. Also, forward-looking statements represent our management's beliefs and assumptions only as of the date of this prospectus. You should read this prospectus and the documents that we have filed as exhibits to the registration statement, of which this prospectus is a part, completely and with the understanding that our actual future results may be materially different from what we expect.

        Except as required by law, we assume no obligation to update these forward-looking statements publicly, or to update the reasons actual results could differ materially from those anticipated in these forward-looking statements, even if new information becomes available in the future.

        You should rely only on the information contained in this prospectus or contained in any free writing prospectus prepared by or on behalf of us. Neither we, the selling stockholders nor the underwriters have authorized anyone to provide you with information different from, or in addition to, that contained in this prospectus or any related free writing prospectus. We, the selling stockholders and the underwriters are offering to sell, and seeking offers to buy, shares of our common stock only in jurisdictions where offers and sales are permitted. The information contained in this prospectus is current only as of its date, regardless of its delivery. Our business, financial condition, results of operations and prospects may have changed since that date.

37


Table of Contents

        This prospectus also contains estimates and other information concerning our industry, including market size and growth rates, that are based on industry publications, surveys and forecasts, including those generated by IDC and Gartner. This information involves a number of assumptions and limitations. The industry in which we operate is subject to a high degree of uncertainty and risk due to variety of factors, including those described in "Risk Factors." These and other factors could cause results to differ materially from those expressed in these publications.

38


Table of Contents


USE OF PROCEEDS

        We estimate that the net proceeds from our sale of 12,507,278 shares of common stock in this offering at an assumed initial public offering price of $12.00 per share, the midpoint of the price range set forth on the front cover of this prospectus, after deducting estimated underwriting discounts and commissions and estimated offering expenses payable by us, will be approximately $135.6 million, or $158.2 million if the underwriters' over-allotment option is exercised in full. A $1.00 increase (decrease) in the assumed initial public offering price would increase (decrease) the net proceeds to us from this offering by $11.6 million, assuming the number of shares offered by us, as set forth on the front cover of this prospectus, remains the same and after deducting the estimated underwriting discounts and commissions. We will not receive any proceeds from the sale of common stock by the selling stockholders.

        The principal purposes of this offering are to increase our capitalization and financial flexibility, increase our visibility in the marketplace and create a public market for our common stock. As of the date of this prospectus, we have no specific plans for the use of the net proceeds we receive from this offering. However, we currently intend to use the net proceeds we receive from this offering primarily for general corporate purposes, including working capital, sales and marketing activities, product development, general and administrative matters, and capital expenditures. We may also use a portion of the net proceeds for the acquisition of, or investment in, technologies, solutions or businesses that complement our business, although we have no present commitments or agreements to make any acquisitions or investments. We will have broad discretion over the uses of the net proceeds in this offering. Pending these uses, we intend to invest the net proceeds from this offering in short-term, investment-grade interest-bearing securities such as money market accounts, certificates of deposit, commercial paper and guaranteed obligations of the U.S. government.


DIVIDEND POLICY

        We have never declared or paid cash dividends on our common stock. We currently intend to retain all available funds and any future earnings for use in the operation of our business and do not anticipate paying any dividends on our common stock in the foreseeable future. Our loan and security agreement restricts our ability to pay cash dividends on our common stock and we may also enter into credit agreements or other borrowing arrangements in the future that will restrict our ability to declare or pay cash dividends on our common stock. Any future determination to declare dividends will be made at the discretion of our board of directors and will depend on our financial condition, operating results, capital requirements, general business conditions and other factors that our board of directors may deem relevant.

39


Table of Contents


CAPITALIZATION

        The following table sets forth our cash and cash equivalents and capitalization as of January 31, 2012 on:

    >
    an actual basis;

    >
    on a pro forma basis to reflect the conversion of the Series C preferred stock warrants into warrants to purchase our common stock in connection with this offering, and the automatic conversion of all outstanding shares of our convertible preferred stock into 56,930,194 shares of our common stock prior to the completion of this offering; and

    >
    on a pro forma as adjusted basis to reflect our receipt of the net proceeds from our sale of 12,507,278 shares of common stock in this offering at an assumed initial public offering price of $12.00 per share, the midpoint of the price range set forth on the front cover of this prospectus, after deducting estimated underwriting discounts and commissions and estimated offering expenses.

        The information below is illustrative only, and our capitalization following the completion of this offering will be adjusted based on the actual initial public offering price and other terms of this offering determined at pricing as well as our actual expenses. You should read this table together with "Management's Discussion and Analysis of Financial Condition and Results of Operations" and our financial statements and the related notes appearing elsewhere in this prospectus.

 
  As of January 31, 2012  
 
  Actual   Pro Forma   Pro Forma As
Adjusted(1)
 
 
  (in thousands, except per share amounts)
 

Cash and cash equivalents

  $ 31,599   $ 31,599   $ 167,226  
               

Debt and capital lease obligations, current and long term

    2,289     2,289     2,289  

Preferred stock warrant liability

    2,133          

Convertible preferred stock:

                   

Convertible preferred stock, $0.001 par value: 57,904,560 shares authorized, 56,930,194 shares issued and outstanding, actual; no shares authorized, issued or outstanding, pro forma and pro forma as adjusted

    40,913          
               

Stockholders' equity (deficit):

                   

Common stock, $0.001 par value; 106,511,960 shares authorized, 23,092,407 shares issued and outstanding, actual; 106,511,960 shares authorized, 80,022,601 shares issued and outstanding, pro forma; and 1,000,000,000 shares authorized, 92,529,879 shares issued and outstanding, pro forma as adjusted

    23     80     93  

Preferred stock, $0.001 par value; no shares authorized,            issued or outstanding, actual; 20,000,000 shares authorized, no shares issued or outstanding, pro forma and pro forma as adjusted

             

Accumulated other comprehensive loss

    (24 )   (24 )   (24 )

Additional paid-in capital

    12,373     55,362     190,976  

Accumulated deficit

    (54,018 )   (54,018 )   (54,018 )
               

Total stockholders' equity (deficit)

    (41,646 )   1,400     137,027  
               

Total capitalization

  $ 3,689   $ 3,689   $ 139,316  
               

(1)
A $1.00 increase (decrease) in the assumed initial public offering price of $12.00 per share, the midpoint of the range set forth on the front cover of this prospectus, would increase (decrease) each of cash and cash equivalents, additional paid-in capital, total stockholders' equity and total capitalization by $11.6 million, assuming that the number of shares offered by us, as set forth on the front cover of this prospectus, remains the same, and after deducting estimated underwriting discounts and commissions.

40


Table of Contents

        The number of shares of our common stock to be outstanding after this offering is based on 80,022,601 shares of our common stock outstanding as of January 31, 2012, which excludes:

    >
    21,905,290 shares of common stock issuable upon the exercise of options outstanding as of January 31, 2012, with a weighted average exercise price of $1.92 per share;

    >
    2,813,500 shares of common stock issuable upon the exercise of options granted after January 31, 2012 through April 4, 2012, with a weighted average exercise price of $8.12 per share;

    >
    469,557 shares of common stock issuable upon the exercise of outstanding warrants to purchase shares of Series C preferred stock with an exercise price of $1.56 per share; and

    >
    unallocated shares of common stock reserved for future issuance under our stock-based compensation plans, consisting of 3,315,989 shares of common stock reserved for future issuance under our 2003 Equity Incentive Plan, which shares will be added to the shares to be reserved under our 2012 Equity Incentive Plan, a certain number of shares of common stock equal to the greater of (1) nine percent of the outstanding shares of our common stock as of the effective date of this offering or (2) 10,000,000, reserved for future issuance under our 2012 Equity Incentive Plan, which will become effective in connection with this offering, and 2,000,000 shares of common stock reserved for future issuance under our 2012 Employee Stock Purchase Plan, which will become effective in connection with this offering, and shares that become available under our 2012 Equity Incentive Plan and 2012 Employee Stock Purchase Plan pursuant to provisions thereof that automatically increase the share reserves under the plans each year, as more fully described in "Executive Compensation—Employee Benefit and Stock Plans."

41


Table of Contents


DILUTION

        If you invest in our common stock, your interest will be diluted to the extent of the difference between the amount per share paid by purchasers of shares of common stock in this initial public offering and the pro forma as adjusted net tangible book value per share of common stock immediately after this offering.

        As of January 31, 2012, our pro forma net tangible negative book value was approximately $0.3 million, or $0.00 per share of common stock. Net tangible book value per share represents the amount of our total tangible assets less our total liabilities, divided by the shares of common stock outstanding as of January 31, 2012, assuming the conversion of all outstanding shares of our convertible preferred stock and Series C preferred stock warrants into common stock.

        After giving effect to our sale of shares of common stock in this offering at an assumed initial public offering price of $12.00 per share, the midpoint of the price range set forth on the front cover of this prospectus, and after deducting estimated underwriting discounts and commissions and estimated offering expenses, our pro forma as adjusted net tangible book value as of January 31, 2012 would have been $135.3 million, or $1.46 per share of common stock. This represents an immediate increase in pro forma as adjusted net tangible book value of $1.46 per share to existing stockholders and an immediate dilution of $10.54 per share to new investors purchasing shares in this offering.

        The following table illustrates this dilution:

Assumed initial public offering price per share

        $ 12.00  

Pro forma net tangible book value per share as of January 31, 2012

  $ 0.00        

Increase per share attributable to this offering

    1.46        

Pro forma as adjusted net tangible book value per share after this offering

          1.46  
             

Net tangible book value dilution per share to new investors in this offering

        $ 10.54  
             

        A $1.00 increase (decrease) in the assumed initial public offering price of $12.00 per share, the midpoint of the price range set forth on the front cover of this prospectus, would increase (decrease) our pro forma net tangible book value, as adjusted to give effect to this offering, by $0.13 per share and the dilution in pro forma as adjusted net tangible book value per share to new investors in this offering by $0.87 per share, assuming the number of shares offered by us, as set forth on the front cover of this prospectus, remains the same and after deducting estimated underwriting discounts and commissions and estimated offering expenses.

        The following table summarizes, on a pro forma as adjusted basis as of January 31, 2012, assuming the conversion of all outstanding shares of our convertible preferred stock into common stock, the total number of shares of common stock purchased from us, the total consideration paid to us, and the average price per share paid to us by existing stockholders and by new investors purchasing shares in this offering at the initial public offering price of $12.00 per share, the midpoint of the price range set forth on the front cover of this prospectus, before deducting estimated underwriting discounts and commissions and estimated offering expenses:

 
  Shares Purchased   Total Consideration    
 
 
  Average
Price
Per Share
 
 
  Number   Percent   Amount   Percent  

Existing stockholders

  80,022,601     86.5 % $ 46,117,766     23.5 % $ 0.58  

New investors

  12,507,278     13.5     150,087,336     76.5     12.00  
                         

Total

  92,529,879     100.0 % $ 196,205,102     100.0 % $ 2.12  
                         

42


Table of Contents

        Sales of shares of common stock by the selling stockholders in this offering will reduce the number of shares of common stock held by existing stockholders to 79,029,879, or approximately 85.4% of the total shares of common stock outstanding after this offering, and will increase the number of shares held by new investors to 13,500,000, or approximately 14.6% of the total shares of common stock outstanding after this offering.

        If the underwriters exercise their over-allotment option in full, sales by us in this offering will reduce the percentage of shares held by existing stockholders to 83.6% and will increase the number of shares held by our new investors to 15,525,000, or 16.4%.

        The foregoing discussion and tables exclude:

    >
    21,905,290 shares of common stock issuable upon the exercise of options outstanding as of January 31, 2012, with a weighted average exercise price of $1.92 per share;

    >
    2,813,500 shares of common stock issuable upon the exercise of options granted after January 31, 2012 through April 4, 2012, with a weighted average exercise price of $8.12 per share;

    >
    469,557 shares of common stock issuable upon exercise of outstanding warrants to purchase shares of Series C preferred stock with an exercise price of $1.56 per share; and

    >
    unallocated shares of common stock reserved for future issuance under our stock-based compensation plans, consisting of 3,315,989 shares of common stock reserved for future issuance under our 2003 Equity Incentive Plan, which shares will be added to the shares to be reserved under our 2012 Equity Incentive Plan, a certain number of shares of common stock equal to the greater of (1) nine percent of the outstanding shares of our common stock as of the effective date of this offering or (2) 10,000,000, reserved for future issuance under our 2012 Equity Incentive Plan, which will become effective in connection with this offering, and 2,000,000 shares of common stock reserved for future issuance under our 2012 Employee Stock Purchase Plan, which will become effective in connection with this offering, and shares that become available under our 2012 Equity Incentive Plan and 2012 Employee Stock Purchase Plan, pursuant to provisions thereof that automatically increase the share reserves under the plans each year, as more fully described in "Executive Compensation—Employee Benefit and Stock Plans."

        To the extent that any outstanding options are exercised, new investors will experience further dilution. In addition, we may grant more options or warrants in the future.

43


Table of Contents


SELECTED CONSOLIDATED FINANCIAL DATA

        The following selected consolidated financial data should be read together with our financial statements and accompanying notes and "Management's Discussion and Analysis of Financial Condition and Results of Operations" appearing elsewhere in this prospectus. The selected financial data in this section is not intended to replace our financial statements and the related notes. Our historical results are not necessarily indicative of our future results.

        We derived the consolidated statements of operations data for fiscal 2010, 2011 and 2012 and the consolidated balance sheet data as of January 31, 2011 and 2012 from our audited consolidated financial statements appearing elsewhere in this prospectus. The consolidated statements of operations data for fiscal 2009 and the consolidated balance sheet data as of January 31, 2009 and 2010 are derived from our audited consolidated financial statements, which are not included in this prospectus. The consolidated statements of operations data for fiscal 2008, and the consolidated balance sheet data as of January 31, 2008 are derived from our unaudited consolidated financial statements, which are not included in this prospectus.

 
  Fiscal Year Ended January 31,  
 
  2008   2009   2010   2011   2012  
 
  (in thousands, except per share amounts)
 

Consolidated Statement of Operations Data:

                               

Revenues

                               

License

  $ 7,742   $ 14,948   $ 27,183   $ 49,926   $ 88,308  

Maintenance and services

    1,330     3,208     7,817     16,319     32,652  
                       

Total revenues

    9,072     18,156     35,000     66,245     120,960  
                       

Cost of revenues

                               

License

    46     86     102     228     890  

Maintenance and services

    1,418     2,711     3,188     6,428     10,715  
                       

Total cost of revenues(1)

    1,464     2,797     3,290     6,656     11,605  
                       

Gross profit

    7,608     15,359     31,710     59,589     109,355  
                       

Operating expenses

                               

Research and development(1)

    5,198     8,684     8,479     14,025     23,561  

Sales and marketing(1)

    7,739     17,281     24,072     39,909     74,782  

General and administrative(1)

    1,610     4,462     6,462     8,949     19,698  
                       

Total operating expenses

    14,547     30,427     39,013     62,883     118,041  
                       

Operating loss

    (6,939 )   (15,068 )   (7,303 )   (3,294 )   (8,686 )

Other income (expense), net

    365     332     (69 )   (387 )   (2,128 )
                       

Loss before income taxes

    (6,574 )   (14,736 )   (7,372 )   (3,681 )   (10,814 )

Provision for income taxes

    2     36     79     125     178  
                       

Net loss

  $ (6,576 ) $ (14,772 ) $ (7,451 ) $ (3,806 ) $ (10,992 )
                       

Net loss per share:

                               

Basic and Diluted

  $ (0.53 ) $ (1.14 ) $ (0.52 ) $ (0.21 ) $ (0.53 )
                       

Weighted-average shares outstanding:

                               

Basic and diluted

    12,399     12,911     14,392     17,738     20,646  
                       

Pro forma net loss per share (unaudited)(2):

                               

Basic and diluted

                          $ (0.14 )
                               

Pro forma weighted-average shares outstanding used in calculating net loss per share (unaudited)(2):

                               

Basic and diluted

                            77,576  
                               

Other Financial Data:

                               

Non-GAAP operating loss

  $ (6,849 ) $ (14,301 ) $ (6,003 ) $ (1,709 ) $ (4,926 )

44


Table of Contents

(1)
Includes stock-based compensation expense as follows:

   
  Fiscal Year Ended January 31,  
   
  2008   2009   2010   2011   2012  
   
  (in thousands)
 
 

Cost of revenues

  $ 7   $ 11   $ 31   $ 59   $ 134  
 

Research and development

    32     96     215     347     841  
 

Sales and marketing

    41     176     382     495     1,488  
 

General and administrative

    10     484     672     684     1,297  
                         
 

Total stock-based compensation expense

  $ 90   $ 767   $ 1,300   $ 1,585   $ 3,760  
                         

 

   
  As of January 31,  
   
  2008   2009   2010   2011   2012  
   
  (in thousands)
 
 

Consolidated Balance Sheet Data:

                               
 

Cash, cash equivalents and short-term investments

  $ 23,432   $ 9,619   $ 11,805   $ 19,737   $ 31,599  
 

Working capital

    22,426     7,172     3,938     4,069     1,142  
 

Total assets

    26,628     18,524     21,915     38,791     82,223  
 

Deferred revenue, current and long-term

    1,849     5,268     11,317     22,307     52,665  
 

Debt and capital lease obligations, current and long-term

        491     348     173     2,289  
 

Preferred stock warrants

    82     625     647     1,013     2,133  
 

Convertible preferred stock

    39,949     39,949     39,949     39,949     40,913  
 

Total stockholders' deficit

    (16,734 )   (30,751 )   (35,246 )   (36,503 )   (41,646 )
(2)
See Note 15 to our audited consolidated financial statements appearing elsewhere in this prospectus for an explanation of our pro forma basic and diluted net loss per share calculations.

Non-GAAP Operating Loss

        We believe that the use of non-GAAP operating loss is helpful for an investor to determine whether to invest in our common stock. In computing non-GAAP operating loss, we exclude stock-based compensation expense which represents non-cash charges for the fair value of stock options and other non-cash awards granted to employees. Because of varying available valuation methodologies, subjective assumptions and the variety of equity instruments that can impact a company's non-cash operating expenses, we believe that providing a non-GAAP financial measure that excludes stock-based compensation expense allows for meaningful comparisons between our core business operating results and those of other companies, as well as providing us with an important tool for financial and operational decision making and for evaluating our own core business operating results over different periods of time.

        Our non-GAAP operating loss may not provide information that is directly comparable to that provided by other companies in our industry, as other companies in our industry may calculate non-GAAP financial results differently, particularly related to non-recurring, unusual items. Our non-GAAP operating loss is not a measurement of financial performance under GAAP, and should not be considered as an alternative to operating income or as an indication of operating performance or any other measure of performance derived in accordance with GAAP. We do not consider non-GAAP operating loss to be a substitute for, or superior to, the information provided by GAAP financial results.

        The following table reflects the reconciliation of GAAP operating loss to non-GAAP operating loss.

 
  Fiscal Year Ended January 31,  
 
  2008   2009   2010   2011   2012  
 
  (in thousands)
 

GAAP operating loss

  $ (6,939 ) $ (15,068 ) $ (7,303 ) $ (3,294 ) $ (8,686 )

Non-GAAP adjustments

                               

Employee stock-based compensation expense

    90     767     1,300     1,585     3,760  
                       

Non-GAAP operating loss

  $ (6,849 ) $ (14,301 ) $ (6,003 ) $ (1,709 ) $ (4,926 )
                       

45


Table of Contents


MANAGEMENT'S DISCUSSION AND ANALYSIS OF
FINANCIAL CONDITION AND RESULTS OF OPERATIONS

        You should read the following discussion and analysis of our financial condition and results of operations together with the consolidated financial statements and related notes that are included elsewhere in this prospectus. This discussion contains forward looking statements based upon current expectations that involve risks and uncertainties. Our actual results may differ materially from those anticipated in these forward looking statements as a result of various factors, including those set forth under "Risk Factors" or in other parts of this prospectus. The last day of our fiscal year is January 31. Our fiscal quarters end on April 30, July 31, October 31 and January 31.

Overview

        Splunk provides an innovative software platform that enables organizations to gain real-time operational intelligence by harnessing the value of their data. Our software collects and indexes data at massive scale, regardless of format or source, and enables users to quickly and easily search, correlate, analyze, monitor and report on this data, all in real-time. Our software is designed to help users in various roles, including IT and business professionals, quickly analyze machine data and realize real-time visibility into and intelligence about their organization's operations.

        We believe the market for software that provides operational intelligence presents a substantial opportunity as data grows in volume and diversity, creating new risks, opportunities and challenges for organizations. Since our inception, we have invested a substantial amount of resources developing our products and technology to address this market, specifically with respect to machine data.

        Our software architecture is designed to accelerate adoption and return-on-investment for our customers. It does not require customization, long deployment cycles or extensive professional services commonly associated with traditional enterprise software applications. Users can simply download and install the software, typically in a matter of hours, connect to their relevant machine data sources and begin realizing operational intelligence. We also offer customers with complex IT infrastructure the ability to leverage the expertise of our professional services organization to deploy our software. We base our license fees on the estimated daily data indexing capacity our customers require. Prospective customers can download a trial version of our software that provides a full set of features but limited data indexing capacity. Following the 60-day trial period, prospective customers can purchase a license for our product or continue using our product with reduced features and limited data indexing capacity.

        While we believe that there is a significant market opportunity for software that provides operational intelligence, this market is largely new and unproven. As a result, we often must educate prospective customers about the value of our products, which can result in lengthy sales cycles, particularly for larger prospective customers, as well as the incurrence of significant marketing expenses. Prospective customers may view purchases of our software as discretionary when compared to more traditional IT applications, and as a result, our sales may be adversely affected by downturns in general economic conditions more quickly and dramatically than other software providers. In addition, we primarily license our software under perpetual licenses whereby we generally recognize the license fee portion of these arrangements upfront. As a result, the timing of when we enter into large perpetual licenses may lead to fluctuations in our revenues and operating results because our expenses are largely fixed in the short-term.

        We intend to continue investing for long-term growth. We have invested and expect to continue to invest heavily in our product development efforts to deliver additional compelling features, address customer needs and enable solutions that can address new end markets. In addition, we expect to continue to aggressively expand our sales and marketing organizations to market our software both in the United States and internationally. As a result, we do not expect to be profitable in the near future. We also intend to increase our investment in capital expenditures in future periods.

        We were incorporated in California in 2003 and reincorporated in Delaware in 2006. From 2003 until 2005, our activities were focused on research and development that resulted in the commercial release of

46


Table of Contents

our software in 2005. Since then, we have opened sales and marketing offices in Hong Kong, Germany, Singapore and the United Kingdom. For fiscal 2012, 24% of our revenues were derived from customers located outside the United States. Our customers represent a wide variety of industries, including financial services, manufacturing, retail and technology, among others. As of January 31, 2012, we had over 3,700 customers, including a majority of the Fortune 100. Some of our largest customers include Autodesk, Bank of America, Comcast, Etsy, Harvard University, Viacom and Zynga.

        For fiscal 2010, 2011 and 2012, our revenues were $35.0 million, $66.2 million and $121.0 million, respectively, representing year-over-year growth of 89% for fiscal 2011 and 83% for fiscal 2012, and our net loss was $7.5 million, $3.8 million and $11.0 million, respectively.

Components of Operating Results

    Revenues

        License revenues.    License revenues reflect the revenues recognized from sales of licenses to new customers and additional licenses to existing customers. We are focused on acquiring new customers and increasing revenues from our existing customers as they realize the value of our software by indexing higher volumes of machine data and expanding the use of our software through additional use cases and broader deployment within their organizations. A substantial majority of our license revenues consists of revenues from perpetual licenses, under which we generally recognize the license fee portion of the arrangement upfront, assuming all revenue recognition criteria are satisfied. Customers can also purchase term license agreements, under which we recognize the license fee ratably, on a straight-line basis, over the term of the license. Due to the differing revenue recognition policies applicable to perpetual and term licenses, shifts in the mix between perpetual and term licenses from quarter to quarter could produce substantial variation in revenues recognized even if our sales remain consistent. In addition, seasonal trends that contribute to increased sales activity in the fourth fiscal quarter often result in lower sequential revenue in the first quarter, and we expect this trend to continue. For further discussion of seasonality, cyclicality and quarterly trends, as well as the impact on our margins and results, see "—Quarterly Results of Operations—Seasonality, Cyclicality and Quarterly Trends." Comparing our revenues on a period-to-period basis may not be meaningful, and you should not rely on our past results as an indication of our future performance.

        Maintenance and services revenues.    Maintenance and services revenues consist of revenues from maintenance agreements and, to a lesser extent, professional services and training. Typically, when purchasing a perpetual license, a customer also purchases one year of maintenance service for which we charge a percentage of the license fee. When a term license is purchased, maintenance service is typically bundled with the license for the term of the license period. Customers with maintenance agreements are entitled to receive support and unspecified upgrades and enhancements when and if they become available during the maintenance period. We recognize the revenues associated with maintenance agreements ratably, on a straight-line basis, over the associated maintenance period. In arrangements involving a term license, we recognize both the license and maintenance revenues over the license period. We have a professional services organization focused on helping some of our largest customers deploy our software in highly complex operational environments and train their personnel. We recognize the revenues associated with these professional services on a time and materials basis as we deliver the services or provide the training.

        Professional services and training revenues as a percentage of total revenues were 6% for fiscal 2012. We have experienced continued growth in our professional services revenues primarily due to the deployment of our software with some customers that have large, highly complex IT environments.

        We expect maintenance and services revenues to become a larger portion of our total revenues as our installed customer base grows.

47


Table of Contents

    Cost of Revenues

        Cost of license revenues.    Cost of license revenues includes all direct costs to deliver our product, including salaries, benefits, stock-based compensation, allocated overhead for facilities and IT, and amortization of acquired intangible assets. We recognize these expenses as they are incurred.

        Cost of maintenance and services revenues.    Cost of maintenance and services revenues includes salaries, benefits, stock-based compensation for our maintenance and services organization, allocated overhead for facilities and IT, and consulting services. We recognize expenses related to our maintenance and services organization as they are incurred.

    Operating Expenses

        Our operating expenses are classified into three categories: research and development, sales and marketing, and general and administrative. For each category, the largest component is personnel costs, which includes salaries, employee benefit costs, bonuses, commissions as applicable, and stock-based compensation. Operating expenses also include allocated overhead costs for depreciation of equipment, facilities and IT. Allocated costs for facilities consist of leasehold improvements and rent. Our allocated costs for IT include costs for compensation of our IT personnel and costs associated with our IT infrastructure. Operating expenses are generally recognized as incurred.

        Research and development.    Research and development expenses primarily consist of personnel and facility-related costs attributable to our research and development personnel. We have devoted our product development efforts primarily to enhancing the functionality and expanding the capabilities of our software. We expect that our research and development expenses will continue to increase as we increase our research and development headcount to further strengthen and enhance our software and invest in the development of our solutions and apps.

        Sales and marketing.    Sales and marketing expenses primarily consist of personnel and facility-related costs for our sales, marketing and business development personnel, commissions earned by our sales personnel, and the cost of marketing and business development programs. We expect that sales and marketing expenses will continue to increase as we continue to hire additional personnel and invest in marketing programs.

        General and administrative.    General and administrative expenses primarily consist of personnel and facility-related costs for our executive, finance, legal, human resources and administrative personnel, legal, accounting and other professional services fees, and other corporate expenses. We have recently incurred, and expect to continue to incur, additional expenses as we grow our operations and prepare to operate as a public company, including higher legal, corporate insurance and accounting expenses, and the additional costs of achieving and maintaining compliance with Section 404 of the Sarbanes-Oxley Act and related regulations. We also expect that general and administrative expenses will continue to increase as we expand our operations, including internationally.

    Other Income (Expense), net

        Other income (expense), net consists primarily of the changes in the fair value of our preferred stock warrants, interest expense on our outstanding debt and interest income on our cash balances.

    Provision for Income Taxes

        Provision for income taxes consists of state and foreign income taxes. Because we have generated net losses, we have fully reserved for any potential future benefits for loss carryforwards and research and development and other tax credits.

48


Table of Contents

Results of Operations

        The following tables set forth our results of operations for the periods presented and as a percentage of our total revenues for those periods. The period-to-period comparison of financial results is not necessarily indicative of financial results to be achieved in future periods.

 
  Fiscal Year Ended January 31,  
 
  2010   2011   2012  
 
  (in thousands)
 

Consolidated Statement of Operations Data:

                   

Revenues

                   

License

  $ 27,183   $ 49,926   $ 88,308  

Maintenance and services

    7,817     16,319     32,652  
               

Total revenues

    35,000     66,245     120,960  
               

Cost of revenues

                   

License

    102     228     890  

Maintenance and services

    3,188     6,428     10,715  
               

Total cost of revenues

    3,290     6,656     11,605  
               

Gross profit

    31,710     59,589     109,355  
               

Operating expenses

                   

Research and development

    8,479     14,025     23,561  

Sales and marketing

    24,072     39,909     74,782  

General and administrative

    6,462     8,949     19,698  
               

Total operating expenses

    39,013     62,883     118,041  
               

Operating loss

    (7,303 )   (3,294 )   (8,686 )

Other income (expense), net

    (69 )   (387 )   (2,128 )
               

Loss before income taxes

    (7,372 )   (3,681 )   (10,814 )

Provision for income taxes

    79     125     178  
               

Net loss

  $ (7,451 ) $ (3,806 ) $ (10,992 )
               

 

 
  Fiscal Year Ended January 31,  
 
  2010   2011   2012  
 
  (as % of revenues)
 

Consolidated Statement of Operations Data:

                   

Revenues

                   

License

    77.7 %   75.4 %   73.0 %

Maintenance and services

    22.3     24.6     27.0  
               

Total revenues

    100.0     100.0     100.0  
               

Cost of revenues

                   

License(1)

    0.4     0.5     1.0  

Maintenance and services(1)

    40.8     39.4     32.8  
               

Total cost of revenues

    9.4     10.0     9.6  
               

Gross profit

    90.6     90.0     90.4  
               

Operating expenses

                   

Research and development

    24.2     21.2     19.5  

Sales and marketing

    68.8     60.2     61.8  

General and administrative

    18.5     13.5     16.3  
               

Total operating expenses

    111.5     94.9     97.6  
               

Operating loss

    (20.9 )   (4.9 )   (7.2 )

Other income (expense), net

    (0.2 )   (0.6 )   (1.8 )
               

Loss before income taxes

    (21.1 )   (5.5 )   (9.0 )

Provision for income taxes

    0.2     0.2     0.1  
               

Net loss

    (21.3 )%   (5.7 )%   (9.1 )%
               

(1)
Calculated as a percentage of the associated revenues.

49


Table of Contents

Fiscal 2010, 2011 and 2012

    Revenues

 
  Fiscal Year Ended
January 31,
   
   
 
 
  2010 to 2011
% Change
  2011 to 2012
% Change
 
 
  2010   2011   2012  
 
  (in thousands)
   
   
 

Revenues

                               

License

  $ 27,183   $ 49,926   $ 88,308     83.7 %   76.9 %

Maintenance and services

    7,817     16,319     32,652     108.8 %   100.1 %
                           

Total revenues

  $ 35,000   $ 66,245   $ 120,960     89.3 %   82.6 %
                           

Percentage of revenues

                               

License

    77.7 %   75.4 %   73.0 %            

Maintenance and services

    22.3     24.6     27.0              
                           

Total

    100.0 %   100.0 %   100.0 %            
                           

        Fiscal 2011 compared to fiscal 2012.    Total revenues increased $54.7 million primarily due to growth in license revenues. The increase in license revenues was primarily driven by increases in our total number of customers, sales to existing customers and an increase in the number of larger orders. For example, we had 151 and 282 orders greater than $100,000 in fiscal 2011 and 2012, respectively. Our total number of customers increased from approximately 2,300 in fiscal 2011 to approximately 3,700 in fiscal 2012. The increase in maintenance and services revenues was due to increases in sales of maintenance agreements resulting from the growth of our installed customer base as well as sales of our professional services. We also experienced an increase in the proportion of our total revenues derived from customers outside the United States, which represented 21% and 24% of our total revenues in fiscal 2011 and 2012, respectively.

        Fiscal 2010 compared to fiscal 2011.    Total revenues increased $31.2 million, or 89.3%, primarily due to the increase in license revenues. The increase in license revenues of $22.7 million was primarily driven by increases in our total number of customers, sales to existing customers and an increase in the number of larger orders. For example, we had 151 orders greater than $100,000 in fiscal 2011 compared to 72 orders in fiscal 2010. Our total number of customers increased to approximately 2,300 in fiscal 2011 from approximately 1,400 in fiscal 2010. The increase in maintenance and services revenues of $8.5 million was primarily due to increases in sales of maintenance agreements resulting from the growth of our installed customer base. We also experienced an increase in the proportion of our total revenues derived from customers outside the United States, which represented 19% and 21% of our total revenues in fiscal 2010 and 2011, respectively.

    Cost of Revenues and Gross Margin

 
  Fiscal Year Ended
January 31,
   
   
 
 
  2010 to 2011
% Change
  2011 to 2012
% Change
 
 
  2010   2011   2012  
 
  (in thousands)
   
   
 

Cost of revenues

                               

License

  $ 102   $ 228   $ 890     123.5 %   290.4 %

Maintenance and services

    3,188     6,428     10,715     101.6 %   66.7 %
                           

Total cost of revenues

  $ 3,290   $ 6,656   $ 11,605     102.3 %   74.4 %
                           

Gross margin

                               

License

    99.6 %   99.5 %   99.0 %            

Maintenance and services

    59.2 %   60.6 %   67.2 %            

Total gross margin

    90.6 %   90.0 %   90.4 %            

50


Table of Contents

        Fiscal 2011 compared to fiscal 2012.    Total cost of revenues increased $4.9 million primarily due to the increase in cost of maintenance and services revenues. The increase in cost of maintenance and services revenues of $4.3 million was primarily related to an increase of $2.1 million in salaries and benefits expense due to increased headcount, $1.3 million related to professional services expense and $0.7 million related to facilities and other overhead costs. Total gross margin was flat, although maintenance and services gross margin increased 6.6 percentage points due to increased leverage resulting from the increase in maintenance and services revenues as well as an increase in maintenance revenues as a percentage of total maintenance and services revenues.

        Fiscal 2010 compared to fiscal 2011.    Total cost of revenues increased $3.4 million primarily due to the increase in cost of maintenance and services revenues. The increase in cost of maintenance and services revenues of $3.2 million was primarily related to a $2.0 million increase in salaries and benefits expense due to increased headcount, $0.7 million in professional services fees and $0.3 million in travel expenses. Total gross margin was flat, although maintenance and services gross margin increased slightly due to increased leverage resulting from the increase in maintenance and services revenues as well as an increase in maintenance revenues as a percentage of total maintenance and services revenues.

    Operating Expenses

 
  Fiscal Year Ended
January 31,
   
   
 
 
  2010 to 2011
% Change
  2011 to 2012
% Change
 
 
  2010   2011   2012  
 
  (in thousands)
   
   
 

Operating expenses

                               

Research and development

  $ 8,479   $ 14,025   $ 23,561     65.4 %   68.0 %

Sales and marketing

    24,072     39,909     74,782     65.8 %   87.4 %

General and administrative

    6,462     8,949     19,698     38.5 %   120.1 %
                           

Total operating expenses

  $ 39,013   $ 62,883   $ 118,041     61.2 %   87.7 %
                           

Percentage of revenues

                               

Research and development

    24.2 %   21.2 %   19.5 %            

Sales and marketing

    68.8     60.2     61.8 %            

General and administrative

    18.5     13.5     16.3 %            
                           

Total

    111.5 %   94.9 %   97.6 %            
                           

Includes stock-based compensation expense

                               

Research and development

  $ 215   $ 347   $ 841              

Sales and marketing

    382     495     1,488              

General and administrative

    672     684     1,297              
                           

Total stock-based compensation expense

  $ 1,269   $ 1,526   $ 3,626              
                           

    Research and development expense

        Fiscal 2011 compared to fiscal 2012.    Research and development expense increased $9.5 million primarily due to a $6.7 million increase in salaries and benefits as we increased headcount as part of our focus on further developing and enhancing our product. We also had increases of $1.6 million related to overhead costs and $0.7 million related to consulting fees.

        Fiscal 2010 compared to fiscal 2011.    Research and development expense increased $5.5 million primarily due to a $4.5 million increase in salaries and benefits expense as we increased headcount as part of our focus on further developing and enhancing our product. We also had increases of $0.4 million related to consulting fees and $0.3 million related to overhead costs.

51


Table of Contents

    Sales and marketing expense

        Fiscal 2011 compared to fiscal 2012.    Sales and marketing expense increased $34.9 million primarily related to a $25.5 million increase in salaries and benefits, as we increased headcount to expand our field sales organization, as well as commissions on increased customer orders. During fiscal 2012, we opened sales offices in Hong Kong and Singapore, and expanded our field sales organization. We also had an increase in marketing related expenses of $4.7 million, primarily as a result of a significant increase in marketing events and advertising. Additionally, we experienced increases in overhead costs of $2.0 million and travel expenses of $2.1 million due to increased headcount.

        Fiscal 2010 compared to fiscal 2011.    Sales and marketing expense increased $15.8 million primarily due to a $10.8 million increase in salaries and benefits expense as we expanded our field sales organization, as well as commissions on increased customer orders. Other increases included marketing-related expenses of $1.9 million, employee related expenses, such as recruiting, events and training, of $1.1 million, travel expenses of $0.8 million, overhead costs of $0.8 million, and consulting fees of $0.4 million.

    General and administrative expense

        Fiscal 2011 compared to fiscal 2012.    General and administrative expense increased $10.7 million primarily related to a $5.8 million increase in salaries and benefits, as we increased headcount to support our overall growth. Headcount increases in fiscal 2012 included the addition of a general counsel and a chief financial officer. We also had an increase of $4.8 million in consulting and professional services fees related to accounting, legal and recruiting activities.

        Fiscal 2010 compared to fiscal 2011.    General and administrative expense increased $2.5 million primarily due to a $0.5 million increase in salaries and benefits expense as we grew headcount to support our overall growth. We also had an increase in professional services fees of $1.1 million related to accounting, legal and recruiting activities, and $0.5 million related to office expenses.

    Other Income (Expense) net

 
  Fiscal Year Ended
January 31,
   
   
 
  2010 to 2011
% Change
  2011 to 2012
% Change
 
  2010   2011   2012
 
  (in thousands)
   
   

Other income (expense), net

  $ (69 ) $ (387 ) $ (2,128 ) NM   NM

        Fiscal 2011 compared to fiscal 2012.    Other income (expense), net decreased $1.7 million primarily due to expense associated with the revaluation of our preferred stock warrants.

        Fiscal 2010 compared to fiscal 2011.    The decrease in other income (expense), net of $0.3 million was primarily related to the revaluation of our preferred stock warrants.

    Provision for Income Taxes

 
  Fiscal Year Ended
January 31,
   
   
 
 
  2010 to 2011
% Change
  2011 to 2012
% Change
 
 
  2010   2011   2012  
 
  (in thousands)
   
   
 

Provision for income taxes

  $ 79   $ 125   $ 178     58.2 %   42.4 %

        In each of fiscal 2010, 2011 and 2012 we recorded income taxes that were principally attributable to state and foreign taxes.

52


Table of Contents

Quarterly Results of Operations

        The following tables set forth selected unaudited quarterly statements of operations data for the eight fiscal quarters ended January 31, 2012, as well as the percentage that each line item represents of total revenues. The information for each of these quarters has been prepared on the same basis as the audited annual financial statements included elsewhere in this prospectus and, in the opinion of management, includes all adjustments, which includes only normal recurring adjustments, necessary for the fair statement of the results of operations for these periods. This data should be read in conjunction with our audited consolidated financial statements and related notes included elsewhere in this prospectus. These quarterly operating results are not necessarily indicative of our operating results for any future period.

 
  Three Months Ended  
 
  Apr 30,
2010
  July 31,
2010
  Oct 31,
2010
  Jan 31,
2011
  Apr 30,
2011
  July 31,
2011
  Oct 31,
2011
  Jan 31,
2012
 
 
  (in thousands)
 

Consolidated Statement of Operations Data:

                                                 

Revenues

                                                 

License

  $ 9,179   $ 11,547   $ 11,529   $ 17,671   $ 14,546   $ 18,766   $ 22,182   $ 32,814  

Maintenance and services

    3,009     3,746     4,454     5,110     6,093     7,183     8,991     10,385  
                                   

Total revenues

    12,188     15,293     15,983     22,781     20,639     25,949     31,173     43,199  
                                   

Cost of revenues

                                                 

License

    37     43     43     105     136     423     153     178  

Maintenance and services

    1,119     1,476     1,619     2,214     1,868     2,550     3,040     3,257  
                                   

Total cost of revenues(1)

    1,156     1,519     1,662     2,319     2,004     2,973     3,193     3,435  
                                   

Gross profit

    11,032     13,774     14,321     20,462     18,635     22,976     27,980     39,764  
                                   

Operating expenses

                                                 

Research and development(1)

    2,469     2,902     3,810     4,844     4,338     5,414     6,475     7,334  

Sales and marketing(1)

    7,629     8,646     9,387     14,247     12,768     16,390     19,179     26,445  

General and administrative(1)

    1,664     2,050     2,547     2,688     3,292     4,446     5,370     6,590  
                                   

Total operating expenses

    11,762     13,598     15,744     21,779     20,398     26,250     31,024     40,369  
                                   

Operating income (loss)

    (730 )   176     (1,423 )   (1,317 )   (1,763 )   (3,274 )   (3,044 )   (605 )

Other income (expense), net

    12     23     (3 )   (419 )   (483 )   (636 )   (466 )   (543 )
                                   

Loss before income taxes

    (718 )   199     (1,426 )   (1,736 )   (2,246 )   (3,910 )   (3,510 )   (1,148 )

Provision for income taxes

    30     30     20     45             50     128  
                                   

Net income (loss)

  $ (748 ) $ 169   $ (1,446 ) $ (1,781 ) $ (2,246 ) $ (3,910 ) $ (3,560 ) $ (1,276 )
                                   

(1)
Includes stock-based compensation expense as follows:

 
  Three Months Ended  
 
  Apr 30,
2010
  July 31,
2010
  Oct 31,
2010
  Jan 31,
2011
  Apr 30,
2011
  July 31,
2011
  Oct 31,
2011
  Jan 31,
2012
 
 
  (in thousands)
 

Cost of revenues

  $ 10   $ 16   $ 16   $ 16   $ 19   $ 27   $ 37   $ 51  

Research and development

    67     91     91     98     121     181     229     310  

Sales and marketing

    81     131     140     143     179     245     405     659  

General and administrative

    166     176     170     173     191     263     370     473  
                                   

Total stock-based compensation expense

  $ 324   $ 414   $ 417   $ 430   $ 510   $ 716   $ 1,041   $ 1,493  
                                   

53


Table of Contents


 
  Three Months Ended  
 
  Apr 30,
2010
  July 31,
2010
  Oct 31,
2010
  Jan 31,
2011
  Apr 30,
2011
  July 31,
2011
  Oct 31,
2011
  Jan 31,
2012
 
 
  (in thousands)
 

Other Financial Data:

                                                 

Non-GAAP operating income (loss)(1)

  $ (406 ) $ 590   $ (1,006 ) $ (887 ) $ (1,253 ) $ (2,558 ) $ (2,003 ) $ 888  

(1)
We define non-GAAP operating income (loss) as net operating income (loss) plus stock-based compensation expense. Please see "Non-GAAP Financial Results" in the section titled "Selected Consolidated Financial Data" for more information.

        The following table reflects the reconciliation of operating income (loss) measured in accordance with GAAP to non-GAAP operating income (loss).

 
  Three Months Ended  
 
  Apr 30,
2010
  July 31,
2010
  Oct 31,
2010
  Jan 31,
2011
  Apr 30,
2011
  July 31,
2011
  Oct 31,
2011
  Jan 31,
2012
 
 
  (in thousands)
 

GAAP operating income (loss)

  $ (730 ) $ 176   $ (1,423 ) $ (1,317 ) $ (1,763 ) $ (3,274 ) $ (3,044 ) $ (605 )

Non-GAAP adjustments

                                                 

Employee stock-based compensation expense

    324     414     417     430     510     716     1,041     1,493  
                                   

Non-GAAP operating income (loss)

  $ (406 ) $ 590   $ (1,006 ) $ (887 ) $ (1,253 ) $ (2,558 ) $ (2,003 ) $ 888  
                                   

 

 
  Three Months Ended  
 
  Apr 30,
2010
  July 31,
2010
  Oct 31,
2010
  Jan 31,
2011
  Apr 30,
2011
  July 31,
2011
  Oct 31,
2011
  Jan 31,
2012
 
 
  (as % of revenues)
 

Consolidated Statement of Operations Data:

                                                 

Revenues

                                                 

License

    75.3 %   75.5 %   72.1 %   77.6 %   70.5 %   72.3 %   71.2 %   76.0 %

Maintenance and services

    24.7     24.5     27.9     22.4     29.5     27.7     28.8     24.0  
                                   

Total revenues

    100.0     100.0     100.0     100.0     100.0     100.0     100.0     100.0  
                                   

Cost of revenues

                                                 

License(1)

    0.4     0.4     0.4     0.6     0.9     2.3     0.7     0.5  

Maintenance and services(1)

    37.2     39.4     36.3     43.3     30.7     35.5     33.8     31.4  
                                   

Total cost of revenues

    9.5     9.9     10.4     10.2     9.7     11.5     10.2     7.9  
                                   

Gross profit

    90.5     90.1     89.6     89.8     90.3     88.5     89.8     92.1  
                                   

Operating expenses

                                                 

Research and development

    20.3     19.0     23.8     21.3     21.0     20.9     20.8     17.0  

Sales and marketing

    62.6     56.5     58.7     62.5     61.9     63.2     61.5     61.2  

General and administrative

    13.7     13.4     15.9     11.8     16.0     17.1     17.2     15.3  
                                   

Total operating expenses

    96.6     88.9     98.4     95.6     98.9     101.2     99.5     93.5  
                                   

Operating income (loss)

    (6.1 )   1.2     (8.8 )   (5.8 )   (8.6 )   (12.7 )   (9.7 )   (1.4 )

Other income (expense), net

    0.2     0.1     (0.1 )   (1.8 )   (2.3 )   (2.4 )   (1.5 )   (1.3 )
                                   

Loss before income taxes

    (5.9 )   1.3     (8.9 )   (7.6 )   (10.9 )   (15.1 )   (11.2 )   (2.7 )

Provision for income taxes

    0.2     0.2     0.1     0.2             0.2     0.3  
                                   

Net income (loss)

    (6.1 )%   1.1 %   (9.0 )%   (7.8 )%   (10.9 )%   (15.1 )%   (11.4 )%   (3.0 )%
                                   

(1)
This percentage is calculated as a percentage of the associated revenues.

54


Table of Contents

    Seasonality, Cyclicality and Quarterly Trends

        Our quarterly results reflect seasonality in the sale of our products and services. Historically, a pattern of increased license sales in the fourth fiscal quarter as a result of industry buying patterns has positively impacted sales activity in that period, which can result in lower sequential revenue in the first fiscal quarter. We expect this seasonality to continue in fiscal 2013 and beyond. Other than the third fiscal quarter of fiscal 2012, we have historically experienced relatively flat revenues in the third fiscal quarter compared to the second fiscal quarter. We believe that third fiscal quarter revenues have been and could continue to be flat compared to second fiscal quarter revenues due to a seasonal slow down in customer orders during the late summer months as a result of summer vacations and holidays in the U.S. and elsewhere around the world. Our gross margins and operating losses have been affected by these historical trends because the majority of our expenses are relatively fixed in the short term. The timing of revenues in relation to our expenses, much of which does not vary directly with revenues, has an impact on the cost of revenues, research and development expense, sales and marketing expense, and general and administrative expense as a percentage of revenues in each fiscal quarter during the year. The majority of our expenses are personnel-related and include salaries, stock-based compensation, benefits and incentive-based compensation plan expenses. As a result, we have not experienced significant seasonal fluctuations in the timing of expenses from period to period. Although these seasonal factors are common in the technology industry, historical patterns should not be considered a reliable indicator of our future sales activity or performance.

        As is typical in the software industry, we expect a significant portion of our product license orders to be received in the last month of each fiscal quarter. We typically ship products shortly after the receipt of an order. We may have backlog consisting of product license orders that have not shipped and maintenance, professional and training services that have not been billed and for which the services have not yet been performed. Historically, our backlog has varied from quarter to quarter and has been immaterial to our total revenues.

        Other than the first quarter of fiscal 2012, our total revenues have increased over the periods presented due to increased sales to new customers as well as incremental sales to existing customers that seek to increase their daily indexing capacity or expand the use of our software through additional use cases or broader deployment within their organizations. Total revenues decreased in the first quarter of fiscal 2012 and were relatively flat in the third quarter of fiscal 2011, primarily as a result of the seasonality of our business described above.

        Other than the first quarter of fiscal 2012, research and development expenses increased sequentially in every quarter primarily due to increases in headcount-related expenses from continued hiring to develop and enhance our products. Research and development expenses modestly decreased on a sequential basis in the first quarter of fiscal 2012, primarily due to expenses recorded in connection with year-end bonuses to our research and development personnel in the fourth quarter of fiscal 2011.

        Other than the first quarter of fiscal 2012, sales and marketing expenses increased sequentially in every quarter primarily due to increases in headcount-related expenses, as well as increased marketing programs and events. Increases in the fourth quarter of each fiscal year also relate to increased commissions earned on customer orders entered into at year-end. In the fourth quarter of fiscal 2011, the increase in sales and marketing expenses related to sales commission, year-end bonuses and increased branding expenses.

        General and administrative expenses increased sequentially in every quarter primarily due to increases in headcount-related expenses, as well as increased consulting and professional services fees related to accounting, legal and recruiting activities to support growth in our business and additional costs incurred in preparation for our initial public offering.

55


Table of Contents

Liquidity and Capital Resources

 
  As of January 31,  
 
  2010   2011   2012  
 
  (in thousands)
 

Cash and cash equivalents

  $ 11,805   $ 19,737   $ 31,599  
               

 

 
  Fiscal Year Ended January 31,  
 
  2010   2011   2012  
 
  (in thousands)
 

Cash provided by operating activities

  $ 897   $ 8,379   $ 14,622  

Cash provided by (used in) investing activities

    4,719     (1,310 )   (8,052 )

Cash provided by financing activities

    1,453     863     5,292  
               

Net increase in cash and cash equivalents

  $ 7,069   $ 7,932   $ 11,862  
               

        Since fiscal 2010 we have funded our operations primarily through cash generated from operations. At January 31, 2012, our cash and cash equivalents of $31.6 million were held for working capital purposes, a majority of which was invested in money market funds. We intend to increase our capital expenditures in fiscal 2013, consistent with the growth in our business and operations. We believe that our existing cash and cash equivalents will be sufficient to meet our anticipated cash needs for at least the next 12 months. Our future capital requirements will depend on many factors including our growth rate, the timing and extent of spending to support development efforts, the expansion of sales and marketing activities, the introduction of new and enhanced software and services offerings, and the continuing market acceptance of our products. In the event that additional financing is required from outside sources, we may not be able to raise it on terms acceptable to us if at all. If we are unable to raise additional capital when desired, our business, operating results and financial condition could be adversely affected.

    Operating Activities

        For fiscal 2012, cash inflows from our operating activities were $14.6 million, which reflects our net loss of $11.0 million, adjusted by non-cash charges of $8.2 million consisting primarily of $3.8 million for stock-based compensation, $2.0 million for the change in valuation of preferred stock warrants and $2.1 million for depreciation and amortization. Additional sources of cash inflows were from changes in our working capital, including a $30.4 million increase in deferred revenue, a $11.1 million increase in accrued compensation and accrued expenses and other liabilities, primarily due to increased headcount, partially offset by a $20.6 million increase in accounts receivable, due to increased sales, and a $3.5 million increase in prepaid expenses and other current and non-current assets.

        For fiscal 2011, we generated $8.4 million of cash inflows from our operating activities, which reflects our net loss of $3.8 million, adjusted by non-cash charges of $3.4 million consisting primarily of $1.6 million for stock-based compensation and $1.0 million for depreciation and amortization. Cash inflows included an increase of $11.0 million in deferred revenues, a $6.2 million increase in accrued compensation and accrued expenses and other liabilities, and a $0.5 million increase in accounts payable due to the timing of payments, primarily due to an increase in headcount, partially offset by an $8.0 million increase in accounts receivable associated with increased sales, and a $0.9 million increase in prepaid expenses and other current assets.

        For fiscal 2010, cash inflows from our operating activities were $0.9 million, which reflects our net loss of $7.5 million, adjusted by non-cash charges of $2.6 million consisting primarily of $1.3 million for stock-based compensation and $0.9 million for depreciation and amortization. Additional sources of cash inflows were from changes in our working capital, including a $6.0 million increase in deferred revenues, a $1.5 million increase in accrued compensation and accrued expenses and other liabilities, and a

56


Table of Contents

$0.5 million increase in accounts payable due to the timing of payments, partially offset by a $2.2 million increase in accounts receivable associated with increased sales.

    Investing Activities

        Our investing activities consist primarily of capital expenditures to purchase property and equipment, sales of short-term investments and changes in our restricted cash. In the future, we expect to continue to invest in capital expenditures to support our expanding operations.

        During fiscal 2012, cash used in investing activities of $8.1 million was primarily attributable to capital expenditures for technology hardware to support the growth of our business, as well as leasehold improvements on our corporate headquarters.

        During fiscal 2011, cash used in investing activities of $1.3 million was primarily attributable to capital expenditures for technology and software to support our corporate infrastructure.

        During fiscal 2010, cash provided by investing activities of $4.7 million was attributable to $4.9 million from the sale of securities. This was partially offset by $0.4 million in capital expenditures related to the purchase of computer equipment to support the growth of our business.

    Financing Activities

        Cash provided by financing activities for fiscal 2012, 2011 and 2010 was $5.3 million, $0.9 million and $1.5 million, respectively, and was primarily attributable to proceeds received from the exercises of stock options partially offset by payments related to our financing arrangements described below.

    Loan and Security Agreement

        In May 2009, we entered into a loan and security agreement with Silicon Valley Bank, which was most recently amended in February 2011. The agreement includes a revolving line of credit facility and a term loan facility described below. The agreement contains financial covenants and other customary affirmative and negative covenants. As part of the agreement, we granted the lender a security interest in our personal property, excluding intellectual property and other intangible assets. The agreement also contains customary events of default. We were in compliance with all covenants as of January 31, 2012.

        The agreement provides for a revolving line of credit facility, which expires May 27, 2012, and a term loan facility, with each advance amortized over a period of 36 months with equal monthly payments of principal and interest. We may borrow up to $10.0 million under the revolving line of credit facility, subject to a borrowing base determined on eligible accounts receivable and subject to a total maximum outstanding amount of $10.0 million. As of January 31, 2012, we had no balance outstanding on the revolving line of credit. Interest on any drawdown under the revolving line of credit accrues at the greater of prime rate plus 0.75% (4.0% as of January 31, 2012) and 4.75%. In addition to the line of credit facility, a $3.0 million term loan facility was available for draw through June 30, 2011. As of January 31, 2012, we had $2.3 million outstanding in term debt consisting of $1.0 million due between January 31, 2012 and January 31, 2013 and $1.3 million due between January 31, 2013 and January 31, 2015. The interest rate for the term debt is fixed at 5.5%.

57


Table of Contents

Contractual Payment Obligations

        The following summarizes our contractual commitments and obligations as of January 31, 2012:

 
  Payments Due by Period  
 
  Total   Less Than 1
year
  1-3 years   3-5 years   More Than 5
years
 
 
  (in thousands)
 

Operating lease obligations

  $ 7,037   $ 3,396   $ 3,201   $ 440   $  
                       

        Future operating lease obligations increased during fiscal 2012 for costs related to additional leases. During fiscal 2012, we executed amendments increasing the square footage of our headquarters in San Francisco. In addition, we entered into new operating lease agreements for our Cupertino and certain international locations. Payments associated with lease agreements increased by $4.1 million, of which $1.7 million is due by January 31, 2013, $2.0 million is due between January 31, 2013 and January 31, 2015, and $0.4 million is due between January 31, 2015 and January 31, 2017.

Off-Balance Sheet Arrangements

        During fiscal 2010, 2011 and 2012, we did not have any relationships with unconsolidated organizations or financial partnerships, such as structured finance or special purpose entities, that would have been established for the purpose of facilitating off-balance sheet arrangements or other contractually narrow or limited purposes.

Indemnification Arrangements

        During the ordinary course of business, we include indemnification provisions within certain of our contracts. Pursuant to these agreements, we will indemnify, hold harmless and agree to reimburse the indemnified party for losses suffered or incurred by the indemnified party, generally parties with which we have commercial relations, in connection with certain intellectual property infringement claims by any third party with respect to our products and services. To date, there have not been any costs incurred in connection with such indemnification clauses and therefore, there is no accrual of such amounts at January 31, 2011 and 2012.

Critical Accounting Policies and Estimates

        We prepare our consolidated financial statements in accordance with generally accepted accounting principles in the United States. The preparation of consolidated financial statements also requires us to make estimates and assumptions that affect the reported amounts of assets, liabilities, revenues, costs and expenses and related disclosures. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances. Actual results could differ significantly from the estimates made by our management. To the extent that there are differences between our estimates and actual results, our future financial statement presentation, financial condition, results of operations and cash flows will be affected. We believe that the accounting policies discussed below are critical to understanding our historical and future performance, as these policies relate to the more significant areas involving management's judgments and estimates.

    Revenue Recognition

        We generate revenues primarily in the form of software license fees and related maintenance and services fees. License fees include perpetual license fees, term license fees and royalties. Maintenance and services primarily consist of fees for maintenance services (including support and unspecified upgrades and enhancements when and if they are available), training and professional services that are not essential to functionality.

58


Table of Contents

        We recognize revenues when all of the following conditions are met:

    >
    there is persuasive evidence of an arrangement;

    >
    the software or services have been delivered to the customer;

    >
    the amount of fees to be paid by the customer is fixed or determinable; and

    >
    the collection of the related fees is probable.

        Signed agreements are used as evidence of an arrangement. If a contract signed by the customer does not exist, we have used a purchase order as evidence of an arrangement. In cases where both a signed contract and a purchase order exist, we consider the signed contract to be the final persuasive evidence of an arrangement. Electronic delivery occurs when we provide the customer with access to the software via a license key. We assess whether a fee is fixed or determinable at the outset of the arrangement, primarily based on the payment terms associated with the transaction. We do not generally offer extended payment terms with typical terms of payment due between 30 and 60 days from delivery of software. We assess collectibility of the fee based on a number of factors such as collection history and creditworthiness of the customer. If we determine that collectibility is not probable, revenue is deferred until collectibility becomes probable, generally upon receipt of cash.

        When contracts contain multiple elements wherein vendor specific objective evidence, or VSOE, exists for all undelivered elements and the services, if any, are not essential to the functionality of the delivered elements, we account for the delivered elements in accordance with the "Residual Method." Perpetual license arrangements are typically accompanied by maintenance agreements. Maintenance revenues consist of fees for providing software updates on a when-and-if-available basis and technical support for software products, or post-contract support, or PCS, for an initial term. Maintenance revenues are recognized ratably over the term of the agreement. We have established fair value for maintenance on perpetual licenses due to consistently priced standalone sales of maintenance. Revenues related to term license fees are recognized ratably over the contract term beginning on the date the customer has access to the software license key and continuing through the end of the contract term. In these cases we do not have VSOE of fair value for maintenance as fees for support and maintenance are bundled with the license over the entire term of the contract.

        License arrangements may also include professional services and training services, which are typically delivered early in the contract term. In determining whether professional services revenues should be accounted for separately from license revenues, we evaluate whether the professional services are considered essential to the functionality of the software using factors such as the nature of our software products; whether they are ready for use by the customer upon receipt; the nature of our implementation services, which typically do not involve significant customization to or development of the underlying software code; the availability of services from other vendors; whether the timing of payments for license revenues is coincident with performance of services; and whether milestones or acceptance criteria exist that affect the realizability of the software license fee. Substantially all of our professional services arrangements are billed on a time and materials basis and, accordingly, are recognized as the services are performed. Training revenues are recognized as training services are delivered. VSOE of fair value of professional and training services is based upon stand-alone sales of those services. Payments received in advance of services performed are deferred and recognized when the related services are performed.

        We are unable to establish VSOE of fair value for all undelivered elements in certain arrangements that include term licenses, maintenance and services, due to the lack of VSOE for maintenance bundled with the term license. In these instances, all revenue is recognized ratably over the period that the services are expected to be performed. In arrangements where the expected service periods of maintenance services and professional or training services differ, we recognize all revenue over the longer of the two expected service periods, which is generally the maintenance period.

59


Table of Contents

        We do not offer credits or refunds and therefore have not recorded any sales return allowance for any of the periods presented. Upon a periodic review of outstanding accounts receivable, amounts that are deemed to be uncollectible are written off against the allowance for doubtful accounts. Our policy is to record revenues net of any applicable sales, use or excise taxes.

        We recognize revenues from the indirect sales channel upon sell-through by the partner or distributor. A sell-through is determined when we receive an order form from a reseller for a specific end-user sale. We do not offer right of return, product rotation or price protection to any of our channel partners. We also have licensing arrangements with Original Equipment Manufacturer, or OEM, and Managed Service Provider, or MSP, customers for which royalty fees are generally recognized as revenue upon receipt of reports of units shipped or usage levels, respectively.

        In our consolidated statements of operations, revenues are categorized as license or maintenance and services revenues. We allocate revenues from arrangements containing multiple elements to each of these categories based on the VSOE of fair value for elements in each revenue arrangement and the application of the residual method for arrangements in which we have established VSOE of fair value for all undelivered elements. In arrangements where we are not able to establish VSOE of fair value for all undelivered elements, we first allocate revenues to any undelivered elements for which VSOE of fair value has been established, then allocate revenues to any undelivered elements for which VSOE of fair value has not been established based upon management's best estimate of fair value of those undelivered elements and apply a residual method to determine the license fee. Management's best estimate of fair value of undelivered elements for which VSOE of fair value has not been established is based upon the VSOE of similar offerings and other objective criteria.

    Stock-Based Compensation

        We account for stock-based compensation in accordance with the authoritative guidance on stock compensation. Under the fair value recognition provisions of this guidance, stock-based compensation is measured at the grant date based on the fair value of the award and is recognized as expense, net of estimated forfeitures, over the requisite service period, which is generally the vesting period of the respective award.

        Determining the fair value of stock-based awards at the grant date requires judgment. We use the Black-Scholes option-pricing model to determine the fair value of stock options. The determination of the grant date fair value of options using an option-pricing model is affected by our estimated common stock fair value as well as assumptions regarding a number of other complex and subjective variables. These variables include the fair value of our common stock, the expected term of the options, our expected stock price volatility, risk-free interest rates, and expected dividends, which are estimated as follows:

    >
    Fair value of our common stock.    Because our stock is not publicly traded, we must estimate the fair value of common stock, as discussed in "Common stock valuations" below.

    >
    Expected term.    The expected term represents the period that our stock-based awards are expected to be outstanding. As we do not have sufficient historical experience for determining the expected term of the stock option awards granted, we have based our expected term on the simplified method available under U.S. GAAP.

    >
    Expected volatility.    As we do not have a trading history for our common stock, the expected stock price volatility for our common stock was estimated by taking the average historic price volatility for industry peers based on daily price observations over a period equivalent to the expected term of the stock option grants. We did not rely on implied volatilities of traded options in our industry peers' common stock because the volume of activity was relatively low. We intend to continue to consistently apply this process using the same or similar public companies until a sufficient amount

60


Table of Contents

      of historical information regarding the volatility of our own common stock share price becomes available.

    >
    Risk-free rate.    The risk-free interest rate is based on the yields of U.S. Treasury securities with maturities similar to the expected term of the options for each option group.

    >
    Dividend yield.    We have never declared or paid any cash dividends and do not presently plan to pay cash dividends in the foreseeable future. Consequently, we used an expected dividend yield of zero.

        If any of the assumptions used in the Black-Scholes model changes significantly, stock-based compensation for future awards may differ materially compared with the awards granted previously.

        The following table presents the weighted-average assumptions used to estimate the fair value of options granted during the periods presented:

 
  Fiscal Year Ended January 31,
 
  2010   2011   2012

Expected term (in years)

  6.08   5.45-6.08   5.25-6.08

Expected volatility

  59.2%   51.8-54.1%   48.4-56.5%

Risk-free rate

  2.71-2.94%   1.48-2.92%   0.92-2.47%

Dividend yield

  0.0%   0.0%   0.0%

    Common stock valuations

        The fair value of the common stock underlying our stock options was determined by our board of directors, which intended all options granted to be exercisable at a price per share not less than the per share fair value of our common stock underlying those options on the date of grant. The valuations of our common stock were determined in accordance with the guidelines outlined in the American Institute of Certified Public Accountants Practice Aid, Valuation of Privately-Held-Company Equity Securities Issued as Compensation. The assumptions we used in the valuation model were based on future expectations combined with management judgment. In the absence of a public trading market, our board of directors with input from management exercised significant judgment and considered numerous objective and subjective factors to determine the fair value of our common stock as of the date of each option grant, including the following factors:

    >
    contemporaneous independent valuations performed at periodic intervals by an independent valuation firm;

    >
    the prices, rights, preferences and privileges of our preferred stock relative to the common stock;

    >
    the purchases of shares of preferred stock and common stock by an unaffiliated venture capital firm and several unaffiliated individual investors from certain current and former employees;

    >
    the purchase of shares of common stock from our Chief Technology Officer and our Chief Architect in June 2011;

    >
    the purchase of shares of common stock by several holders of our preferred stock from certain employees;

    >
    our operating and financial performance and forecast;

    >
    current business conditions;

    >
    the hiring of key personnel;

    >
    our stage of development;

61


Table of Contents

    >
    the likelihood of achieving a liquidity event for the shares of common stock underlying these stock options, such as an initial public offering or sale of our company, given prevailing market conditions;

    >
    any adjustment necessary to recognize a lack of marketability for our common stock;

    >
    the market performance of comparable publicly traded technology companies; and

    >
    the U.S. and global capital market conditions.

        We granted stock options with the following exercise prices since February 1, 2011:

Grant Date
  Number of
Options
Granted
  Common Stock
Fair Value Per
Share at
Grant Date
  Exercise Price  

March 17, 2011

    1,037,000   $ 2.14   $ 2.14  

April 21, 2011

    500,000     2.14     2.14  

April 22, 2011

    50,000     2.14     2.14  

June 14, 2011

    2,299,300     2.94     2.94  

July 15, 2011

    1,000,000     2.94     2.94  

July 28, 2011

    582,500     2.94     2.94  

September 15, 2011

    799,000     3.94     3.94  

October 26, 2011

    150,000     3.94     3.94  

December 15, 2011

    1,780,500     4.82     4.82  

December 27, 2011

    1,547,500     4.82     4.82  

February 17, 2012

    772,500     5.79     5.79  

March 15, 2012

    403,500     9.00     9.00  

April 4, 2012

    1,637,500     9.00     9.00  

        Based upon the assumed initial public offering price of $12.00 per share, the aggregate intrinsic value of options outstanding as of January 31, 2012 was $220.9 million, of which $91.2 million related to vested options and $129.7 million related to unvested options.

        In order to determine the fair value of our common stock underlying option grants, we considered contemporaneous valuations of our stock from an independent valuation firm that provided us with their estimation of our enterprise value and the allocation of that value to each element of our capital structure (preferred stock, common stock, warrants and options). For stock options granted on or prior to October 26, 2011, our enterprise value was estimated using the market-based approach and, within the market-based approach, the comparable company method and the recent transaction method. The market-based approach considers multiples of financial metrics based on both acquisitions and trading multiples of a selected peer group of technology companies. We selected the peer group of companies based on their size, business model, industry, business description and developmental stage. While we believe that the operational intelligence that our software provides to organizations differentiates us from other software companies, we selected this peer group from publicly traded companies and acquired companies that are similarly viewed as being in the information technology, application management and data monitoring industries.

        For stock options granted on or prior to October 26, 2011, we used a revenue multiple to determine our enterprise value under this market-based approach. We selected a revenue multiple because we believe it best represented the fact that our projected revenue growth was greater than the revenue growth of these comparable companies, but at the same time, our company was smaller in size compared to the peer group and remained unprofitable. The revenue multiple of these publicly traded, comparable companies was based on their revenue expectations for 2011. For the acquired company comparables, the revenue multiple was based on their trailing 12-month revenues when such information was available. These

62


Table of Contents

revenue multiples of the peer group of companies were then applied to our forward revenue estimates for 2011 to generate a valuation. For these option grants, our indicated enterprise value at each valuation date was allocated to the shares of preferred stock, common stock, warrants and options using an option pricing method, or OPM. Estimates of the volatility were based on available information on the volatility of common stock of the same peer group of technology companies for each valuation period.

        Significant factors considered by our board of directors in determining the fair value of our common stock at these grant dates include:

        March and April 2011.    In March and April 2011, the U.S. economy and the financial and stock markets were continuing to recover from the global financial crisis that began in 2008 and continued in 2009. The outlook for economic growth in 2011 remained uncertain as a result of the continued unpredictable nature of economic factors such as the unemployment rate, financial contagion from Europe, budget problems at federal, state and local governments, and falling housing prices. During this period, we experienced a seasonal decline in sequential revenue growth, generating revenues of $20.6 million for the quarter ended April 30, 2011, compared to revenues of $22.8 million for the quarter ended January 31, 2011. However, our revenues exceeded our forecast, we added approximately 275 customers, and we released a new version of our software. As a result, we increased our revenue forecast for the remainder of fiscal 2012. During this period we also hired our first general counsel.

        Our board of directors considered these market conditions, especially for companies in the information technology, application management and data monitoring industry, our better than anticipated operating performance, our increased revenue forecast and the reduced operating risk in our business when it determined the fair value of our common stock.

        In addition, our board of directors considered our enterprise value and related allocation of our enterprise value to each element of our capital structure as detailed in a report from an independent valuation firm. The enterprise value was determined by using a market approach weighing public company comparables at 50% and acquired company comparables at 50%. With respect to the public company comparables and based on our growth expectations, relative size and lack of profitability, a revenue multiple of 2.3x was applied to our estimated revenues for 2011. This multiple was between the first quartile and median multiple of the peer group of technology companies. With respect to the acquired company comparables which were based on similar companies in terms of size and revenues, as well as our strong operating performance and increased revenue forecast but lack of profitability, a revenue multiple of 3.3x was applied to our estimated revenues for 2011. This multiple was the mean revenue multiple of the peer group.

        A discount rate of 25% was applied, based on the industry cost of capital for newly public companies in the technology industry. The enterprise value was then allocated to the common stock utilizing an OPM with the following assumptions: a time to liquidity event of two years, a risk free rate of 0.58% and volatility of 52% over the time to a liquidity event. The results of the OPM were reduced by a discount for lack of marketability of 20%.

        After consideration of all these factors, our board of directors determined that the fair value of our common stock was $2.14 per share.

        June and July 2011.    In June and July 2011, the U.S. economy and the financial and stock markets were continuing to recover. While the strengthening of the U.S. private sector and the improving credit conditions for individuals and smaller businesses suggested stronger economic growth in 2011, the economic outlook continued to be uncertain due to a number of factors, including the large federal budget deficit, budget problems at state and local governments, financial contagion from Europe, the U.S. debt ceiling crisis, large increases in commodity prices and continued weakening of housing prices. During this period, we experienced sequential revenue growth, generating revenues of $25.9 million for the quarter ended July 31, 2011, compared to revenues of $20.6 million for the quarter ended April 30, 2011, which

63


Table of Contents

exceeded our quarterly revenue forecast. As a result of these positive operating results, we increased our revenue forecast for fiscal 2012. During this period, we also hired our first chief financial officer, added approximately 325 customers and were granted our first U.S. patent covering our machine data web technology.

        Our board of directors considered these market conditions, our better than anticipated operating performance, reduced operating risk in our business, the hiring of our first chief financial officer, and a shorter time to an expected liquidity event when it determined the fair value of our common stock.

        In addition, our board of directors considered our enterprise value and related allocation of our enterprise value to each element of our capital structure as detailed in a report from an independent valuation firm. The enterprise value was determined using a market approach weighing public company comparables at 50% and acquired company comparables at 50%. With respect to the public company comparables and based on our growth expectations, including our revised revenue forecast for fiscal 2012, relative size and lack of profitability, a revenue multiple of 3.3x was applied to our estimated revenues for 2011. This multiple was between the first quartile and median multiple of the peer group of technology companies. With respect to the acquired company comparables which were based on similar companies in terms of size and revenues, as well as our strong operating performance and increased revenue forecast but lack of profitability, a revenue multiple of 3.8x was applied to our estimated revenues for 2011. This multiple was the average revenue multiple of the closest comparable companies in the peer group based on business description. The selection of these acquired companies from the peer group resulted in a higher multiple than the multiple applied in the prior period and the mean multiple of all of the acquired companies in the peer group. In addition, these selected companies had the most recent acquisition dates of all of the companies in the peer group and therefore better reflected the dynamics in the overall market.

        A discount rate of 25% was applied, based on the industry cost of capital for newly public companies in the technology industry. The enterprise value was then allocated to the common stock utilizing an OPM with the following assumptions: a time to liquidity event of 1.75 years, a risk free rate of 0.51% and volatility of 42% over the time to a liquidity event. The results of the OPM were reduced by a discount for lack of marketability of 20%.

        After consideration of all these factors, our board of directors determined that the fair value of our common stock was $2.94 per share.

        September and October 2011.    In September and October 2011, the U.S. economy and the financial and stock markets began to stabilize from the uncertainty and high volatility that they experienced in the late summer of 2011. However, the overall economic recovery remained tenuous. During this period, we experienced sequential revenue growth, generating $31.2 million of revenues for the quarter ended October 31, 2011 compared to $25.9 million for the quarter ended July 31, 2011. As a result of our positive revenue growth for the quarter ended July 31, 2011, we increased our revenue forecast for fiscal 2012. During this period, we also added approximately 350 customers and introduced Splunk Storm, our cloud-based service currently in beta.

        Our board of directors considered these market conditions, especially for companies in the information technology, application management and data monitoring industry, our generally better than anticipated operating performance, our increased revenue forecast, the reduced operating risk in our business, and a shorter time to an expected liquidity event when it determined the fair value of our common stock.

        In addition, our board of directors considered our enterprise value and related allocation of our enterprise value to each element of our capital structure as detailed in a report from an independent valuation firm. The enterprise value was determined using a market approach weighing public company comparables at 37.5%, acquired company comparables at 37.5%, and the recent transaction method at 25%. The recent transaction method was added as a valuation methodology due to the purchase by existing

64


Table of Contents

preferred stock investors of 46,812 shares of common stock held by some of our employees at a price of $5.55 per share (the same price as the sale by Messrs. Swan and Das in June 2011) on September 9, 2011. The September purchases were made by certain affiliated holders of shares of our preferred stock pursuant to an offer to purchase shares of common stock from each of our employees at a purchase price of $5.55 per share. The offered price was solely based upon the price per share paid to Messrs. Das and Swan in June 2011. A small percentage of our employees elected to sell shares of common stock in connection with this transaction. Based on the terms of the transaction, the relatively small number of shares purchased in the transaction, the limited number of parties involved in the transaction, the manner in which the offer price was fixed, and the purchasers' desire to increase the size of their investments in the company and their belief that the value of the company will appreciate over time, a 25% weighing was deemed appropriate as an indication of our value. With respect to the public company comparables and based on our growth expectations, relative size and lack of profitability, a revenue multiple of 3.2x was applied to our estimated revenues for 2011. This multiple was the median multiple of the peer group of technology companies. The selection of the median revenue multiple was based on a review of the business description, size, and operating metrics of the comparable companies and reflected our strong growth expectations, including our revised revenue forecast for fiscal 2012, and historical performance, while accounting for our smaller size and lack of profitability. With respect to the acquired company comparables which were based on similar companies in terms of size and revenues, as well as our strong operating performance and increased revenue forecast but lack of profitability, a revenue multiple of 3.8x was applied to our estimated revenues for 2011. This multiple was the average revenue multiple of the closest comparable companies in the peer group based on business description. These were the same acquired company comparables and the same revenue multiple used in the prior period.

        A discount rate of 25% was applied, based on the industry cost of capital for newly public companies in the technology industry. The enterprise value was then allocated to the common stock utilizing an OPM with the following assumptions: a time to liquidity event of 1.25 years, a risk free rate of 0.24% and volatility of 38% over the time to an expected liquidity event. The results of the OPM were reduced by a discount for lack of marketability of 15%.

        After a consideration of all these factors, our board of directors determined that the fair value of our common stock was $3.94 per share.

        December 2011.    In December 2011, the overall economic outlook remained uncertain, with some economists foreseeing significantly weaker prospects for the U.S. economy in 2011 and 2012 as the country struggled to avoid another recession. However, during this period, we continued to experience sequential revenue growth and expected to exceed our revenue forecast for fiscal 2012. We also made significant progress in our preparation for a potential initial public offering, including engaging the underwriters for this offering, selecting outside counsel, preparing drafts of the prospectus for this offering, and finalizing appropriate corporate governance policies and processes for a public company.

        Our board of directors considered market conditions, especially for technology companies, our better than anticipated operating performance, our increased revenue forecast, the reduced operating risk in our business, and a shorter time to an expected liquidity event when it determined the fair value of our common stock. After consideration of all of these factors, we decided to use a probability-weighted expected return model, or PWERM, to determine our enterprise value and related allocation. This approach models potential future liquidity events and applies probabilities to each scenario. These future liquidity events are then discounted to present value and, after applying the relevant probability for each potential event, result in a probability-weighted equity value of the company. We estimated the probability of an initial public offering in 2012 at 40%, an initial public offering in 2013 at 10%, a merger or sale of the company in 2012 at 35%, and a merger or sale of the company in 2013 at 15%. The implied revenue multiples resulting from the exit values for each of these future liquidity events ranged from approximately 2.2x to 5.6x, which was between the first quartile to third quartile of the last 12-month revenue multiples of the public company comparables and ranged from approximately 1.5x to 6.7x, which was between the low

65


Table of Contents

to the third quartile of the last 12-month revenue multiples of the acquired company comparables. A discount rate of 25% was applied, based on the industry cost of capital for newly public companies in the technology industry. The results of the PWERM were reduced by a discount of 13% for lack of marketability. This resulted in our board of directors determining that the fair value of our common stock was $4.82 per share.

        February 2012.    In February 2012, the overall economic outlook remained uncertain, with some economists foreseeing significantly weaker prospects for the U.S. economy in 2012 as the country struggled to avoid another recession. While the U.S. economy was showing signs of growth, the pace of such growth was expected to slow in the first half of 2012 and pick up slightly by the end of 2012. Between the third and fourth quarters of fiscal 2012, we experienced sequential revenue growth, generating $43.2 million of revenues for the quarter ended January 31, 2012, compared to $31.2 million for the quarter ended October 31, 2011, which exceeded our forecast. During this period, we also added approximately 400 customers, entered into a significant transaction with a large customer, and released the latest version of our software, which included a number of new features, including mobility, increased power and speed, and an improved user interface. In addition, we continued to make significant progress in our preparation for a potential initial public offering, including filing the registration statement for this offering with the Securities and Exchange Commission.

        Our board of directors considered market conditions, especially for companies in the information technology, application management and data monitoring industry, our better than anticipated operating performance, reduced operating risk in our business, and a shorter time to an expected liquidity event when it determined the fair value of our common stock. After consideration of all of these factors, we determined to use a probability-weighted expected return model, or PWERM, to determine our enterprise value and related allocation. This approach models potential future liquidity events and applies probabilities to each scenario. These future liquidity events are then discounted to present value and, after applying the relevant probability for each potential event, result in a probability-weighted equity value of the company. We estimated the probability of an initial public offering in 2012 at 50%, an initial public offering in 2013 at 10%, a merger or sale of the company in 2012 at 30%, and a merger or sale of the company in 2013 at 10%. The implied revenue multiples resulting from the exit values for each of these future liquidity events ranged from approximately 2.1x to 5.6x, which was between the first quartile and third quartile of the last 12-month revenue multiples of the public company comparables and ranged from 2.2x to 6.8x, which was between the low to the third quartile of the last 12-month revenue multiples of the acquired company comparables. A discount rate of 25% was applied, based on the industry cost of capital for newly public companies in the technology industry. The results of the PWERM were reduced by a discount of 10% for lack of marketability. This resulted in our board of directors determining that the fair value of our common stock was $5.79 per share.

        March 2012.    In March 2012, we reviewed our financial results for the fourth quarter and full year of fiscal 2012. Based on our strong financial performance and the fact that our financial results for the fourth quarter of fiscal 2012 exceeded our forecasts, we increased our projected revenue for fiscal 2013 and provided an updated forecast to the underwriters during the first week of March. The updated forecast was utilized in the valuation models that we reviewed to determine the preliminary price range. In addition, during this period, we continued to make significant progress in our preparation for a potential initial public offering and determined that it was appropriate to apply a 100% weighting that we would successfully complete the offering. By doing so, we excluded any marketability or illiquidity discount for our common stock. We also determined that the fair value of our common stock should assume the completion of the offering and that a public market for our common stock had been created. After considering the preliminary valuation range proposed by the underwriters relative to these financial results, current economic and market conditions, our updated forecast, the removal of any illiquidity discount and a 100% weighting that we would complete the offering, our board of directors concluded that

66


Table of Contents

the midpoint of the preliminary range provided by our managing underwriters, $9.00 per share, was not less than the fair value of our common stock.

        April 2012.    In April 2012, our board of directors determined that there were no material changes in the factors that the board of directors considered in March 2012 when it determined the fair value of our common stock. Therefore, for the same reasons described above, our board of directors concluded that the midpoint of the preliminary range provided by our managing underwriters, $9.00 per share, continued to be not less than the fair value of our common stock.

    Income Taxes

        Income taxes are accounted for under the asset and liability method in accordance with authoritative guidance for income taxes. Deferred tax assets and liabilities are recognized for the future tax consequences attributable to differences between the financial statement carrying accounts of existing assets and liabilities and their respective tax basis and operating loss and tax credit carry forwards. Deferred tax assets and liabilities are measured using enacted tax rates expected to apply to taxable income in the years in which those temporary differences are expected to be recovered or settled. The effect on deferred tax assets and liabilities of a change in tax rates is recognized in income in the period that includes the enactment date.

        We adopted the provisions of ASC 740-10, Accounting for Uncertainty in Income Tax, on February 1, 2009. There was no impact upon adoption of ASC 740-10 as our liability recognized under previous accounting guidance was consistent with that required under the new guidance. We have adopted the accounting policy that interest expense and penalties relating to income tax position are classified within the provision for income taxes.

Quantitative and Qualitative Disclosures about Market Risk

        We are exposed to financial market risks, primarily changes in interest rates.

    Interest Rate Risk

        Our exposure to market risk for changes in interest rates primarily relates to our investments and any variable rate indebtedness.

        The primary objective of our investment activities is to preserve principal while maximizing yields without significantly increasing risk. This objective is accomplished by making diversified investments, consisting only of investment grade securities.

        Any draws under our revolving credit facility bear interest at a variable rate tied to the prime rate. As of January 31, 2012, we had no outstanding debt under our revolving credit facility.

    Foreign Currency Exchange Risk

        Our results of operations and cash flows are subject to fluctuations due to changes in foreign currency exchange rates. Substantially all of our revenues are generated in U.S. dollars. Our expenses are generally denominated in the currencies in which our operations are located, which is primarily in the U.S. and to a lesser extent in Europe and Asia. Our results of operations and cash flows are, therefore, subject to fluctuations due to changes in foreign currency exchange rates and may be adversely affected in the future due to changes in foreign exchange rates. The effect of a hypothetical 10% change in foreign currency exchanges rates applicable to our business would not have a material impact on our historical consolidated financial statements. To date, we have not engaged in any hedging strategies. As our international operations grow, we will continue to reassess our approach to manage our risk relating to fluctuations in currency rates.

67


Table of Contents

    Inflation

        We do not believe that inflation had a material effect on our business, financial condition or results of operations in the last three fiscal years. If our costs were to become subject to significant inflationary pressures, we may not be able to fully offset such higher costs through price increases. Our inability or failure to do so could harm our business, financial condition and results of operations.

Recent Accounting Pronouncements

        In May 2011, the FASB further amended its guidance related to fair value measurements in order to achieve common fair value measurements between U.S. GAAP and International Financial Reporting Standards. The amendments in the updated guidance explain how to measure fair value. They do not require additional fair value measurements and are not intended to establish valuation standards or affect valuation practices outside of financial reporting. The amendments change the wording used to describe many of the requirements in U.S. GAAP for measuring fair value and for disclosing information about fair value measurements. For many of the requirements, the updated guidance should not result in a change in the application of previous fair value measurement guidance. The updated guidance is effective during interim and annual periods beginning after December 15, 2011. We do not expect the adoption of this guidance on February 1, 2012 to have a significant impact on our consolidated financial statements.

        In June 2011, the FASB updated its guidance related to the presentation of comprehensive income. Under the updated guidance, an entity has the option to present the total of comprehensive income, the components of net income, and the components of other comprehensive income either in a single continuous statement of comprehensive income or in two separate but consecutive statements. In both choices, an entity is required to present each component of net income along with total net income, each component of other comprehensive income along with a total for other comprehensive income, and a total amount for comprehensive income. The updated guidance eliminates the option to present the components of other comprehensive income as part of the statement of changes in stockholders' equity. The updated guidance does not change the items that must be reported in other comprehensive income or when an item of other comprehensive income must be reclassified to net income. The updated guidance will be effective for fiscal years, and interim periods within those fiscal years, beginning after December 15, 2011, with early adoption permitted. The updated guidance must be applied retrospectively. We do not expect the adoption of this guidance on February 1, 2012 to have a significant impact on our consolidated financial statements.

68


Table of Contents


BUSINESS

Overview

        Splunk provides an innovative software platform that enables organizations to gain real-time operational intelligence by harnessing the value of their data. Our software collects and indexes data at massive scale, regardless of format or source, and enables users to quickly and easily search, correlate, analyze, monitor and report on this data, all in real time. Our software addresses the risks, challenges and opportunities organizations face with increasingly large and diverse data sets, commonly referred to as big data, and is specifically tailored for machine-generated data. Machine data is produced by nearly every software application and electronic device in an organization and contains a definitive, time-stamped record of various activities, such as transactions, customer and user activities, and security threats. Our software is designed to help users in various roles, including IT and business professionals, quickly analyze their machine data and realize real-time visibility into and intelligence about their organization's operations. This operational intelligence enables organizations to improve service levels, reduce costs, mitigate security risks, demonstrate and maintain compliance and gain new insights that enable them to drive better business decisions.

        The core of our software is a proprietary machine data engine, comprised of collection, indexing, search and data management capabilities. Our software can collect and index terabytes of information daily irrespective of format or source. Our machine data engine uses our innovative data architecture that enables dynamic, schema creation on the fly, allowing users to run queries on data without having to understand the structure of the data prior to collection and indexing. Our machine data fabric for data collection and indexing delivers speed and scalability when processing massive amounts of machine data. Our software leverages improvements in the cost and performance of commodity computing and can be deployed in a wide variety of computing environments, from a single laptop to large globally distributed data centers.

        To extend our software's functionality, customers can deploy additional solutions as well as lightweight applications, or apps, on top of our core data engine. Our apps, which are available for download via our Splunkbase website, provide incremental functionality in the form of pre-built data inputs, searches, reports, alerts and dashboards, and are generally available for free. We, along with a number of third-party developers and customers, have developed approximately 350 apps for specific use cases in our core and adjacent markets. We also build and deliver a select number of packaged solutions that provide more robust functionality targeting a specific end market or use case. We currently provide Splunk for Enterprise Security and Splunk for PCI Compliance and have made available, through a controlled preview, Splunk for VMware. These packaged solutions and apps allow our customers to further extend the value of their machine data using our software. We provide APIs and SDKs in various programming languages that enable developers to leverage our machine data engine and its broad capabilities in their own software. In addition to our packaged solutions and apps, we are investing in the development of Splunk Storm, which is a cloud-based service currently in beta that provides a subset of our software's capabilities, but is tailored for machine data in the cloud. Our online user communities, Splunkbase and Splunk Answers, provide our customers with an environment to share these apps, collaborate on the use of our software and provide community-based support. We believe this user-driven ecosystem results in greater use of our software and drives cost-effective marketing, increased brand awareness and viral adoption of our product.

        Our software is designed to accelerate adoption and return-on-investment for our customers. It does not require customization, long deployment cycles or extensive professional services commonly associated with traditional enterprise software applications. Users can simply download and install the software, typically in a matter of hours, to connect to their relevant machine data sources and begin realizing operational intelligence. We also offer customers with complex IT infrastructure the ability to leverage the expertise of our professional services organization to deploy our software.

69


Table of Contents

        As of January 31, 2012, we had over 3,700 customers, including a majority of the Fortune 100. Some of our largest customers include Autodesk, Bank of America, Comcast, Etsy, Harvard University, Viacom and Zynga. Our customers pay license fees based on their estimated indexing capacity needs. For fiscal 2010, 2011 and 2012, our revenues were $35.0 million, $66.2 million and $121.0 million, respectively, representing year-over-year growth of 89% for fiscal 2011 and 83% for fiscal 2012, and our net loss was $7.5 million, $3.8 million and $11.0 million, respectively.

Industry Background

    The Increasing Use, Diversity and Complexity of Technology are Generating Explosive Data Growth.

        Organizations have broadly deployed business applications and related IT infrastructure to automate processes and improve performance in sales, marketing, customer support, human resources, product development, engineering, finance and operations. As more business processes involving employees, customers, partners, suppliers and other constituents are transacted through software and web-based applications, the amount of digital information produced by these applications and the hardware devices that run them has grown substantially.

        According to IDC, the volume of digital information created and replicated worldwide will grow approximately 45% annually from 1.8 trillion gigabytes in 2011 to 7.9 trillion gigabytes in 2015. The large and diverse data sets that make up this digital information are often referred to as big data and are generally categorized into business application data, human-generated content and machine data. The growth of digital information estimated by IDC may not be indicative of the growth in machine data, which is our primary market and only one of the three types of data included in the estimated growth figure by IDC.

    >
    Business application data is the digital information used by organizations to conduct their daily operations, such as payroll, supply chain and financial data. Most business applications rely on traditional relational database technology and software that have pre-defined data structures, or schema for organizing, storing, accessing and reporting on structured data.

    >
    Human-generated content is the digital information derived from human-to-human interactions, including email communications, spreadsheets and documents, and in recent years, mobile text messages, video, photos, recorded audio and social media messaging. Human-generated content typically comes in the form of unstructured data, which means that it is not optimized for storage in a relational database.

    >
    Machine data is produced by nearly every software application and electronic device. The applications, servers, network devices, desktop and laptop computers, mobile devices and various other systems that organizations have deployed to support their operations are continuously generating information relating to their status and activities. Machine data can be found in a variety of formats such as application log files, call detail records, clickstream data associated with user web interactions, data files, system configuration files, alerts and tickets. It is generated by both machine-to-machine as well as human-to-machine interactions. Outside of an organization's traditional IT infrastructure, every processor-based system, including HVAC controllers, smart electrical meters, GPS devices and radio-frequency indentification tags, and many consumer-oriented systems, such as mobile devices, automobiles and medical devices that contain embedded electronic devices, are also continuously generating machine data. Machine data can be structured or unstructured.

        The increasing complexity of IT infrastructures driven by the adoption of virtual servers and desktops, as well as cloud-based services and mobile technologies, has accelerated the growth of machine data. For example, according to Gartner, the number of x86 server instances deployed globally per year, including virtual servers, is expected to grow from 19.4 million in 2010 to over 59.3 million in 2015. Additionally,

70


Table of Contents

according to IDC, the number of internet-enabled access devices globally is expected to grow from 2.3 billion devices in 2010 to over 4.6 billion devices in 2015.

    Machine Data is a Strategic Asset that Organizations can Leverage to Gain Operational Intelligence.

        As organizations have become highly reliant on their technology assets, they require end-to-end visibility, analytics, and real-time intelligence across all of their applications, services and IT infrastructure to achieve required service levels, manage costs, mitigate security risks, demonstrate and maintain compliance and gain new insights to drive better business decisions. Machine data provides a definitive, time-stamped record of current and historical activity and events within and outside an organization, including application and system performance, user activity, system configuration changes, electronic transaction records, security alerts, error messages and device locations. Machine data in a typical enterprise is generated in a multitude of formats and structures, as each software application or hardware device records and creates machine data associated with their specific use. Machine data also varies among vendors and even within the same vendor across product types, families and models.

        The table below illustrates the type of machine data created and the business and IT insights that can be derived when a single web visitor makes a purchase in a typical ecommerce environment:

GRAPHIC

        The illustration above is an example of the type and amount of valuable information generated by a single website visitor that is recorded in the machine data of IT systems. A typical ecommerce site serving thousands of users a day will generate gigabytes of machine data which can be used to provide significant insights into the IT infrastructure and business operations. As this information is constantly being generated by IT systems, enterprises have the opportunity to realize real-time intelligence about their operations by analyzing machine data.

    Existing IT and Business Intelligence Solutions are Unable to Fully Unlock the Value of Machine Data.

        While machine data has always been generated by computing environments, many organizations have failed to recognize the value of this data or have encountered challenges extracting value from it. As a result, diverse, heterogeneous machine data is largely ignored and restricted to ad hoc use at the time of troubleshooting IT failures or errors.

        A number of IT management products are available to analyze log files and other information related to specific devices, applications or use cases. However, these point solutions are generally narrowly scoped to only work with specific data formats and systems and are unable to correlate machine data from multiple sources, formats and systems for both historical and real-time analysis without significant configuration. Because each point solution targets a specific use case or data format, multiple point

71


Table of Contents

solutions are required to understand, cross-correlate and take advantage of the multitude of machine data sets available to an organization. This can lead to significant IT management complexity as well as significant capital and IT resource expenditures.

        While computing environments have always generated large amounts of machine data, current legacy IT operations management, security and compliance and business intelligence technologies, such as relational databases, online analytical processing, or OLAP, engines and other analytical tools are built on software optimized for structured data, namely data where the structure is known and can thus be placed into pre-defined relational databases. Most of today's enterprise applications are architected for managing data in legacy relational databases. However, because machine data exists in a variety of formats and can be structured or unstructured, these legacy systems are not optimized to address the massive amounts of dynamic machine data generated within an organization. According to IDC, nearly 90% of data growth over the next few years, across IT and other operating environments, will come from unstructured content, a tangible portion of which will be machine data. Unstructured data generally, and machine data in particular, is extremely diverse and complex. Legacy data tools, which are generally designed to handle structured data, need to be re-architected to effectively address the complexity of machine data. If either the analysis or the format of the data changes, the legacy systems needs to re-collect and normalize the data, and the application that leveraged the database need to modify their structure to handle the new data formats. Many legacy solutions are also expensive to install and maintain, often needing extended deployment and update cycles that require significant professional services, extensive training and technical support over several months, and sometimes years.

        Point products as well as legacy IT systems were not built to address the challenges and opportunities of machine data. Moreover, existing solutions and systems are not architected to take advantage of recent improvements in the price and performance of computing and storage systems, and in many cases require significant investment in computing hardware. Because of these limitations, these solutions and systems are unable to fully leverage the information and value in machine data to provide historical and real-time operational intelligence across a wide variety of use cases.

Our Opportunity

        We believe there is a large opportunity to help organizations unlock the value of machine data. Organizations need to capture the value locked in their machine data to enable more effective application management, IT operations management, security and compliance, and to derive intelligence and insight across the organization. Our software enables users to realize real-time operational intelligence across their business. While our software may be used to collect and index all types of data, including business application data and human-generated content, our primary market opportunity is focused on enabling our users to harness the value of their machine data.

        We believe software that provides operational intelligence addresses several established markets that in aggregate have been estimated by Gartner to be approximately $32 billion in 2012. Specifically, Gartner expects the market that our products address for IT operations, in which, for purposes of its market study, Gartner includes application management, to be approximately $18.6 billion in 2012; the market that our products address for business intelligence, including web analytics software, to be approximately $12.5 billion in 2012; and the market that our products address for security information and event management software to be approximately $1.3 billion in 2012. Beyond these areas, we believe software that provides operational intelligence can address a wide variety of additional markets in areas such as online marketing optimization, video-on-demand analytics, radio-frequency indentification tracking and scientific applications using time-series data.

Our Solution

        Our mission is to make machine data accessible, usable and valuable to everyone in an organization. Splunk enables organizations to gain real-time operational intelligence by harnessing the value of their

72


Table of Contents

machine data. Splunk's intuitive, browser-based approach to analyzing machine data makes our software easy to use and extend, allowing both technical and non-technical users to, with minimal training, use our products. Our customers leverage our software for various use cases, including infrastructure and operations management, applications management, security and compliance, business and web analytics, and scientific applications, among many others. Our software helps users derive new insights from machine data that can be used to, among others, improve service levels, reduce operational costs, mitigate security risks, demonstrate and maintain compliance and gain new insights that enable them to drive better business decisions. The result is a new level of operational visibility enabling more informed business decisions that can provide significant competitive advantage for our customers.

    Key Benefits

        Real-time operational intelligence and visibility.    Our software collects and indexes data at massive scale, regardless of the format or source, and enables users to quickly and easily search, correlate, analyze, monitor and report on this data, all in real time. Our software enables users to identify problems, get answers and gain new business insights and intelligence from machine data across their globally distributed enterprise all through one platform. On the other hand, multiple point solutions, such as traditional application management, IT operations management, security and compliance and business intelligence tools, provide a more narrow view of the customer's operations as these products are only focused on one area of the infrastructure.

        Low total cost of ownership.    Our software enables customers to improve their customer service levels and systems availability, reduce operational costs, improve security and compliance, and increase business insights. Although our data engine can index terabytes of data daily, it does not require the high-end hardware, software, extensive professional services or other capital intensive IT investments commonly associated with traditional enterprise software. In addition, our customers have the option of purchasing our software on either a perpetual or term basis.

        Fast time to value.    Unlike traditional relational databases or business and IT applications, our software does not require custom implementations or long deployment cycles. While some enterprises leverage our professional services team to deploy our software in large, highly complex IT environments, most users simply download and install the software, typically in a matter of hours, to connect to the relevant machine data sources and begin realizing operational intelligence. Given our software's ease-of-use, our professional services engagements are typically short in duration and last from a few days to up to several weeks, significantly shorter than the professional services engagements associated with traditional enterprise software.

        Ease of use.    While we utilize complex data structures and algorithms in our machine data engine, we abstract that complexity to provide a compelling, intuitive interface similar to that of an internet search engine. Our software can be accessed through a standard web browser and requires limited training, saving on time and cost as well as making it accessible to the broader set of non-technical users. In addition, we provide flexible and easy-to-use tools to create ad-hoc searches, reports and custom dashboards to visualize business and operational activity and trends derived from machine data.

        Highly scalable and flexible data engine.    Our machine data engine, machine data fabric and broad technology stack are built to be highly flexible and scalable, allowing our customers to index terabytes of data daily and search petabytes of historical data. Our software can operate in a single data center or globally across multiple data centers both inside and outside an organization, and all from a single user interface. This architecture also allows for flexible deployment of additional commodity hardware as needed.

        Open, extensible platform.    Our machine data engine is a powerful, extensible platform on which custom reports, dashboards and applications can be run to analyze machine data for specific use cases.

73


Table of Contents

Splunk provides software development kits (SDKs) and application programming interfaces (APIs) free of charge, making it easy for developers to leverage our platform. Splunk, as well as a number of customers and third-party developers, have developed numerous applications for specific use cases across application management, IT operations management, security and compliance and business intelligence. Some customers have started to utilize our platform and its SDKs/APIs to address machine data challenges outside of our core markets, including health data monitoring, fraud detection and smart grid management, among others. Our community of users, through Splunkbase and Splunk Answers, drives additional value to fellow users through pre-built apps and free, online technical support.

Our Growth Strategy

        Our goal is to make our software the platform for delivering operational intelligence and real-time business insights from machine data. The key elements of our strategy are to:

        Extend our technological capabilities.    We intend to continue to invest heavily in our product development efforts to deliver additional features, address customer needs and enable solutions that can address new end markets. We will continue to expand into adjacent product and technology areas that enable organizations to further unlock the value of their machine data. For example, we are actively investing in Splunk Storm, a cloud-based service that provides a subset of capabilities relative to our current software, and is tailored for machine data in the cloud.

        Continue to expand our direct and indirect sales organization, including our channel relationships, to acquire new customers.    We will continue to increase investments in our sales and marketing organizations to drive efficient acquisition of new customers across geographies and industries. We will continue to expand our sales operations globally to support new and existing customers in these regions. We will continue to invest in and foster the growth of our channel relationships, particularly outside the United States where channel partners provide greater sales leverage and play a greater role in the sales process. For example, we have increased the number of sales representatives and sales engineers in our direct and indirect sales teams and have grown our distributor and reseller partner network to over 250 channel partners worldwide as of January 31, 2012.

        Further penetrate our existing customer base.    We will continue to cultivate incremental sales from our existing customers by driving increased use of our software within organizations. In particular, we continue to seek to upsell existing customers for additional deployments and new use cases which will drive higher daily indexing needs. We believe our existing customer base serves as a strong source of incremental revenues given the horizontal applicability of our software and the growing machine data volumes our customers face. Our sales teams are responsible for driving renewals of existing contracts as well as increased adoption of our software by existing customers.

        Develop additional solutions in adjacent markets as well as products that enable organizations to use our software in different ways, such as Splunk Storm, our cloud-based service.    We believe there is a significant opportunity to provide additional solutions that leverage our core machine data engine to help organizations understand and unlock the value of their machine data in specific end markets and use cases. For example, our Splunk Enterprise Security solution enables customers to effectively target enterprise security events. We will continue to invest in both our core machine data engine as well as end-market specific packaged solutions to drive Splunk market penetration, expand our addressable market opportunity and make Splunk a more targeted solution for the machine data problems our customers and prospects encounter.

        Grow our user communities and partner ecosystem to increase awareness of our brand, target new use cases, drive operational leverage and deliver more targeted, higher value solutions.    We believe our user community has the potential to provide significant operating leverage by delivering apps that extend our software's functionality to new use cases. We will continue to invest in business development initiatives in

74


Table of Contents

order to add additional OEM and strategic relationships to enable new sales channels for our software as well as extend our integration with third party products. In addition, once these relationships have been established, we expect that OEM vendors and managed service providers will invest in and create customized application functionality based on our machine data engine.

        Become the developer platform for machine data.    We intend to continue our investments in SDKs and APIs that help software developers leverage the functionality of our machine data engine. Our SDKs enable developers to build solutions that deeply integrate the functionality of our machine data engine and machine data fabric as well as access the data stored in the data indexes. Through our investments in SDKs and APIs, we intend to promote and extend the capabilities of our platform to customers who wish to build sophisticated applications and interfaces that leverage our software.

Splunk Technology

    Key Technologies

        We believe our investments in our product and key technologies drive significant competitive differentiation. The key technologies of our software, described below, have been built to address today's explosive growth in machine data. Our software has been architected to handle large volumes of machine data at a massive scale with minimal overhead, enabling robust throughput in a high availability environment. Our software platform is highly flexible and is able to collect and index large amounts of heterogeneous data formats, from physical, virtual and/or cloud environments.

        Schema-on-the-fly.    Our software collects and indexes data irrespective of source and format. Rather than requiring that data be input into a pre-defined structure, our software's innovative schema-on-the-fly technology creates structure as it searches the data from a single query. This allows users to ask new and different questions at any time without having to re-architect a schema as would be required in a relational database. Our software builds schema in real time and does not require any user intervention or pre-defined knowledge about the data it is processing. Our software allows different users to run a variety of queries, regardless of changes in format to the data being input into the system.

        Machine data fabric.    Our software provides robust machine data collection and indexing on terabytes of data daily. Our software enables users to process machine data no matter the infrastructure topology, from a single machine to a globally distributed, virtualized IT infrastructure. This machine data fabric allows customers to address the complexities of handling massive amounts of real-time, dynamic, heterogeneous machine data. Our APIs enable users to forward data from our software to other parts of their IT network, creating a machine data fabric across the organization irrespective of whether the data is used by our software for analysis and reporting or as a conduit to other systems.

        Search language.    Our software provides a comprehensive, intuitive and powerful proprietary search language that is specifically designed for working with machine data. Our search language supports basic arithmetic operations to refine searches and conduct calculations with the results of a query in real time. Powerful statistical and reporting commands native to our search language let users perform more robust calculations and analysis. Our software can also learn about the structure of the machine data through the searches users conduct. This learning mechanism allows users to leverage the machine data structure and knowledge garnered by previous Splunk searches. And finally, our search language makes it easier for us to distribute large work loads to the Splunk machine data fabric.

    Features and Functionality

        Our software contains the following features and functionality:

    >
    Universally collect, index, store and archive any machine data, from any source.    Our software processes machine data in real time from any source, format or location. This includes live data generated by hardware devices and software applications.

75


Table of Contents

    >
    Search and investigate.    Our software lets users search real-time and historical machine data simultaneously.

    >
    User-friendly interface.    Our software uses an intuitive, user-friendly, customizable interface that enables users to understand and adopt the product. The interface also provides type-ahead and contextual help to accelerate adoption and usage.

    >
    Knowledge store.    Users can store knowledge about events, fields, transactions, patterns, statistics and key-value pairs so others who utilize the Splunk instance can leverage this information.

    >
    Monitor and alert.    Users can save searches so they can be run automatically to raise real-time alerts that trigger actions such as sending emails, running scripts, or posting to an RSS feed.

    >
    Report and analyze.    Users can create ad hoc reports on real-time and historical data to analyze business and IT data trends.

    >
    Custom dashboards and views.    Our software enables users to create custom dashboards that integrate multiple charts and views of real-time data to satisfy the needs of different users in different roles.

    >
    Platform extensibility.    Our software serves as an extensible platform through the use of its APIs and SDKs. The APIs and SDKs enable developers to leverage our machine data engine and its broad capabilities to build their own applications.

    >
    Role-based access and controls.    Splunk incorporates role-based access controls and authentication, integrated with existing enterprise-wide security policies, to help secure the data stored within our indexes as well as cont