Splunk .conf26

Splunk .conf26 is the annual user conference for the Splunk platform, running 14-17 September 2026 at the Colorado Convention Center in Denver, with keynotes and key sessions also carried remotely on the Global Broadcast. Run under Cisco ownership, the 2026 programme is organised around three product pillars — Platform, framed as turning machine data into agentic action; Security, framed as defending at machine speed; and Observability, framed as optimising AI at scale — with the agentic security operations centre as the through-line. The week opens with a Welcome Keynote on Monday evening and a Product Keynote on Tuesday morning, followed by breakouts, hands-on workshops, panels, theatre sessions and show-floor demos in the Pavilion. Splunk University runs 12-14 September as a separately priced pre-conference training track, and certification testing is available on site 14-17 September. The venue expects roughly 6,500 attendees.

Date

September 14–17, 2026

Location

Colorado Convention Center, Denver

Format

Hybrid

Event Type

Conference

Status

Upcoming

Expected Attendance

6,500

Pricing

Paid

Organizer

Splunk, a Cisco company

Added

Jul 5, 2026

Updated

Aug 19, 2026

• ✓CISO
• ✓Security operations / SOC manager
• ✓Detection engineer
• ✓Site reliability engineer
• ✓Observability and platform lead
• ✓IT operations director
• ✓Splunk administrator

For a security or observability owner, .conf is where Cisco's integration of Splunk stops being a slide and starts being a shipped roadmap — the Tuesday Product Keynote is the announcement vehicle, and the three-pillar structure tells you plainly where the investment is going. The concrete return is skills: Splunk University's one-, two- and three-day courses plus on-site certification mean an engineer comes home credentialed, while the BOTS competition and roundtables surface detection patterns your team can copy. Budget the training separately, though — it is priced apart from the conference pass and can cost more than the pass itself.

• ✓Welcome Keynote, Monday 14 September, 5-6pm MT
• ✓Product Keynote, Tuesday 15 September, 8:30-10am MT
• ✓Splunk University pre-conference training, 12-14 September, in 1-, 2- and 3-day courses
• ✓On-site certification testing, 14-17 September, 8:30am-6pm MT
• ✓BOTS (Boss of the SOC) competition
• ✓Splunkie Awards
• ✓The Pavilion expo floor with theatre sessions and demos
• ✓Welcome Party and Soiree
• ✓Partner General Session and breakouts, Sunday 13 September, 12:30-3:30pm MT
• ✓Roundtable discussions and hands-on workshops
• ✓The .conf26 AI Assistant, which builds a personalised session schedule from job title and objectives

• ★The Splunk platform's only first-party user conference — product announcements land in the Tuesday morning Product Keynote
• ★Splunk University runs 12-14 September as three separate pre-conference training days, with certification testing on site 14-17 September, so an engineer can leave credentialed
• ★The programme is split into exactly three pillars — Platform, Security and Observability — each framed around agentic AI rather than dashboards
• ★The BOTS (Boss of the SOC) capture-the-flag competition runs alongside the sessions
• ★A Global Broadcast carries keynotes and key sessions for people who cannot travel
• ★A Pavilion-only pass at $1,395 lets evaluators work the show floor without buying full conference access

Four in-person pass tiers are published: Pavilion-only $1,395; Partner and alumni $1,795; Public sector $1,895; General admission $2,095. Early-bird pricing closed on 22 June 2026. Splunk University pre-conference training is priced separately at $1,000 for one day, $1,800 for two days or $2,400 for three days, or 100/180/240 training units, and has no virtual option. Cancellations: full refund less a $100 processing fee through 30 June 2026, 50% refund less $100 from 1 July to 13 August, and no refunds from 14 August 2026. A Global Broadcast streams keynotes and key sessions remotely; its price is not published.

When is Splunk .conf26?

Splunk .conf26 takes place September 14–17, 2026 in Denver, Colorado.

Where is Splunk .conf26 held?

Splunk .conf26 is held in Denver, Colorado. The event format is hybrid.

How much does Splunk .conf26 cost?

Splunk .conf26 is paid. Four in-person pass tiers are published: Pavilion-only $1,395; Partner and alumni $1,795; Public sector $1,895; General admission $2,095. Early-bird pricing closed on 22 June 2026. Splunk University pre-conference training is priced separately at $1,000 for one day, $1,800 for two days or $2,400 for three days, or 100/180/240 training units, and has no virtual option. Cancellations: full refund less a $100 processing fee through 30 June 2026, 50% refund less $100 from 1 July to 13 August, and no refunds from 14 August 2026. A Global Broadcast streams keynotes and key sessions remotely; its price is not published.

Who should attend Splunk .conf26?

Splunk .conf26 is aimed at CISO, Security operations / SOC manager, Detection engineer, Site reliability engineer, Observability and platform lead, IT operations director, Splunk administrator.

What topics does Splunk .conf26 cover?

Splunk .conf26 covers Agentic AI for security operations, Security information and event management, Observability, Threat detection and response, Machine data and log analytics, IT operations analytics, AI platform operations, Certification and technical skills.

This page was written from 4 sources, 1 on domains other than conf.splunk.com.

1. 1.conf.splunk.com — conf.splunk.comvendor
2. 2.conf.splunk.com — faqsvendor
3. 3.conf.splunk.com — agendavendor
4. 4.denverconvention.com — splunk conf26