On Thursday Cisco agreed to purchase Splunk in a $28 billion deal meant to deal with AI-enabled safety and observability points.

Cisco introduced yesterday its intention to amass Splunk, a famend identify in knowledge observability and safety, in a deal valued at roughly $28 billion. Cisco intends to pay $157 in money for every share of Splunk.
This acquisition, which is Cisco’s largest deal ever, is aimed toward furthering the corporate’s transfer to develop the following era of AI-enabled safety and observability options that aren’t able to solely menace detection and response but additionally menace prediction and prevention.
Additionally, Splunk’s expertise helps companies monitor and analyze their methods for cybersecurity dangers and different threats. Cisco has centered primarily on manufacturing laptop networking gear, which is a line of enterprise that has not too long ago come below an rising price of provide chain assaults. With this acquisition, Cisco hopes to chop down its decades-long reliance on networking gear manufacturing and solidify its cybersecurity and AI commitments to satisfy consumer demand and gas development.
Bounce to:
When will the Cisco/Splunk deal shut?
This deal is about to shut by the top of the third quarter of 2024. Though a unanimous settlement has been reached by the boards of administrators at each Cisco and Splunk, the deal continues to be topic to regulatory approval and the consent of Splunk shareholders. Assuming the deal is finalized, Splunk CEO and President Gary Steele will be a part of Cisco’s government management.
Cisco initially expressed curiosity in buying Splunk final 12 months, as reported in February 2022 by The Wall Road Journal. This brought about Splunk’s inventory worth to extend.
Why this acquisition is an efficient transfer for Cisco and Splunk
New income streams and safety improvements
Cisco asserts that the merger will speed up its income development with out impacting its beforehand introduced share buyback program or dividend program. As well as, this acquisition is fueled by the altering panorama through which Cisco operates.
The rising affect of the general public cloud has considerably impacted Cisco’s conventional legacy applied sciences, necessitating the exploration of recent and substantial income streams. In response, Cisco has recognized cybersecurity as a key space for development and funding because it seeks to adapt and thrive amidst evolving business dynamics. That is additionally good for Splunk, as the corporate has struggled lately with cloud improvements for its safety data and occasion administration platform.
Previous to this Splunk information, Cisco’s largest deal was the $7 billion buy of Scientific-Atlanta, a number one supplier of cable set-top packing containers, end-to-end video distribution networks and video methods integration again in 2006, which solely accounted for a 7% of Cisco’s market cap on the time.
What the CEOs are saying
“We’re excited to convey Cisco and Splunk collectively. Our mixed capabilities will drive the following era of AI-enabled safety and observability. From menace detection and response to menace prediction and prevention, we are going to assist make organizations of all sizes safer and resilient,” mentioned Chuck Robbins, chair and chief government officer of Cisco, within the firm’s press launch in regards to the deal.
Splunk’s Steele is quoted within the press launch as stating that the choice was essential to result in one other part of development within the firm’s journey. “Uniting with Cisco represents the following part of Splunk’s development journey, accelerating our mission to assist organizations worldwide change into extra resilient whereas delivering fast and compelling worth to our shareholders. Collectively, we are going to type a worldwide safety and observability chief that harnesses the facility of information and AI to ship wonderful buyer outcomes and rework the business.”
SEE: Guidelines: Community and methods safety (TechRepublic Premium)
Trade consultants’ reactions to the Cisco/Splunk information
Some business consultants have expressed considerations about how applied sciences from every agency will fuse into the opposite, particularly within the areas of AI and SIEM cloud adoption. Neither Cisco nor Splunk are thought-about key gamers within the AI area, and Splunk hasn’t perfected SIEM cloud automation.
In an announcement made obtainable to TechRepublic, Adam Geller, chief government officer of cloud-native SIEM platform Exabeam, reacted by stating, “We consider it is a good consequence for Splunk. They’ve struggled to get to cloud-native and their innovation velocity has slowed. This acquisition is likely to be the most effective exit for them. Right this moment’s cybersecurity buyer calls for innovation in cloud-native options, notably on this AI-driven period the place over 90% of as we speak’s enterprises are utilizing the cloud over on-premises options.”
Reacting to the information in a LinkedIn submit, Rob Strechay, lead enterprise tech analyst at SiliconANGLE Media’s theCUBE, argued that whereas the deal affords to convey SIEM and prolonged detection and response collectively for a extra complete platform, it nonetheless faces a problem in AI integrations and developments. “Splunk and Cisco are behind on their use of AI, and the present architectures of the merchandise don’t lend themselves to fast aggressive benefit, specifically with a number of the impartial and hyperscale safety rivals,” Strechay wrote.
What this implies for the way forward for SIEM and SOC groups
The international SIEM market is projected to achieve $5.5 billion by 2025, based on MarketsandMarkets. Whereas there’s a potential that Cisco and Splunk have complementary capabilities that span the safety analytics spectrum, there are challenges that will stand of their manner.
A current survey of greater than 230 safety professionals by Gurucul on the 2023 RSA Convention exhibits that SIEM customers nonetheless face many challenges, thus affecting SIEM adoption.
Greater than 42% of the respondents battle with including new knowledge to SIEM instruments, and that this course of generally takes days, weeks and even months. This means that SIEM suppliers are nonetheless struggling to effectively implement a dependable automated knowledge ingestion function of their SIEM options. Practically 23.6% of survey respondents revealed they use third-party automated knowledge supply mapping instruments to ingest knowledge into their SIEM options. Additionally, about 17% responded aren’t assured that SIEM options can assist them detect unknown threats.
These survey outcomes reveal the SIEM market nonetheless has an extended approach to go. So, no matter who acquires whom, the SIEM market may be very a lot open to the seller(s) able to addressing most or a few of these challenges.