Free Newsletters for the Channel
Register for Your Free Newsletter Now
February 14, 2022
The Wall Street Journal reported that Cisco offered the data observability and security information and event management (SIEM) provider $20 billion. People close to the company said the talks occurred recently, according to the Journal. However, those same sources indicated that Cisco and Splunk aren’t currently talking to each other.
Neither company agreed to requests for comment.
“As a policy, we don’t comment on rumors or speculation,” a Splunk spokesperson told Channel Futures.
360 SOC’s Chris Ichelson
Chris Ichelson, CEO at managed security services provider 360 SOC, said such a deal would make Cisco “the overpowering giant” in the security industry. Ichelson, whose company is a certified Cisco partner, said the deal could help Cisco with its SIEM capabilities. In addition, he said Splunk’s Phantom and SOAR offerings will give security operations centers better availability than Cisco’s Secure X platform.
Keep up with the latest channel-impacting mergers and acquisitions in our M&A roundup.
“Should Cisco decide to make this transaction or another similar transaction, [it] could easily bridge the gap in to the missing components of the Cisco security offering or fabric,” Ichelson told Channel Futures. “A purchase of Splunk would include a leading data-driven platform coupled with a leading SOAR ‘Phantom.’ My opinion is Cisco could win back many lost security customers with this.”
Splunk would join a host of other companies Cisco has bought in recent years to bolster its software, security and cloud stack. Cisco in 2018 bought Duo Security, which provides single sign-on tools, two-factor authentication and endpoint remediation. The deal cost nearly $2.4 billion. Cisco announced the acquisition of PortShift in 2020 to bolster its security capabilities in Kubernetes environments. Moreover, the company in 2017 spent $3.7 billion to acquire AppDynamics. AppDynamics provides observability capabilities that many pundits describe as similar to Splunk. Cisco has bolstered its AppDynamics portfolio with acquisitions of network intelligence provider ThousandEyes, Kubernetes cost and governance management provider Replex, and other companies.
A $20 billion deal would dwarf all of the prior ones. However, Daniel Newman, principal analyst at Futurum Research, said the price might need to go higher.
Smart opportunistic move by @Cisco to try and acquire @Splunk. The synergies are apparent, but I think the est. offer was too low. Could still happen. I think the premium would need to be higher, likely north of $24 billion to gain traction.https://t.co/OMVgeILvbv $SPLK #Tech
— Daniel Newman (@danielnewmanUV) February 12, 2022
Gossip about Cisco buying Splunk dates back to 2019, when RBC Capital’s Matthew Hedberg said Splunk could complement the AppDynamic portfolio. He said a deal could create a “premier data management platform.” Furthermore, he said Splunk could bring security expertise to Cisco.
“With around 50% of Splunk’s use cases being security-related deals, buying Splunk would also get Cisco deeper into security,” Hedberg said at the time.
Cisco and Splunk are no strangers to one another. Splunk won …
… Cisco’s ISV of the Year award in 2016.
TechCrunch senior editor Alex Wilhelm pointed out that Cisco remains a predominantly hardware-based company, with its recent networking revenues hitting about $6 billion last quarter, despite its ambitions of becoming a software and services company. On the other hand, Splunk reported a 75% year-over-year increase in its cloud annual recurring revenue (ARR) in its latest quarterly earnings.
“Cisco’s interests in Splunk can be described both in terms of cloud revenue addition – accelerating its revenue mix-shift to software from hardware in a single move – and acceleration; Splunk’s cloud business is growing more quickly than the fastest-growing segment of Cisco software. So, the Splunk deal is scale and speed in one,” Wilhelm wrote on Twitter.
— alex (@alex) February 14, 2022
Eric Parizo watches Splunk as part of his job as Omdia‘s principal analyst for cybersecurity operations. He observers of Splunk view it in two different ways.
One group recommends an inorganic growth route.
“Wall Street has been somewhat frustrated because they believe the company’s performance recently has been somewhat uneven versus the predictability the company has offered in the past and what financial analysts expect. As a result, some believe that Splunk’s growth opportunity has maxed out, and perhaps now is the time to pursue an acquisition in order to maximize value,” Parizo told Channel Futures.
Omdia’s Eric Parizo
However, Parizo and Omdia don’t view a Cisco acquisition as favorable for Splunk. He credited former CEO Doug Merritt (who left the company in November) for helping to transform its revenue model.
“Merritt led a trying yet largely successful multiyear transition away from ingestion-based pricing, a model that proved lucrative but was causing Splunk to be decreasingly competitive in the marketplace, to a workload pricing program, a much more reasonable model which charges based on the compute power required to run its software,” Parizo said. “During Merritt’s eight years at the helm, Splunk grew from $302 million in revenue in fiscal 2014 to nearly $3 billion in annual recurring revenue in the third quarter of fiscal 2022, when Merritt departed, leaving Splunk financially strong. At the same time Splunk is strategically on track to continue its growth, focusing on high-growth areas like cybersecurity and observability.”
A Cisco cybersecurity specialist answered objections that her company’s acquisitions have ultimate harmed the purchased companies.
I hope we do buy Splunk, they make some good stuff.
Also, I’ve been there 8 years, I’ve seen us acquire more security companies than most of you have ever worked in, and we haven’t changed anything for the worse in any of them. They all still operate fairly independently and
— Lina (@d0rkph0enix) February 12, 2022
Morgan Stanley analyst Meta Marshall wrote that the “mixed bag” of success Cisco has encountered in M&A should not deter it from pursuing Splunk.
” … an ability to package Splunk’s leading Security analytics and ITOM solutions with other security offerings, further optimize distribution and pricing, could present very interesting potential M&A synergies for Cisco,” Marshall said.
Despite the advantages the deal might provide for the customer, Ichelson said it might also present challenges for partners. Specifically, it could raise complexity.
“For the Cisco-driven partner, I think this also would open up a challenging-to-navigate and difficult channel partner onboarding process,” Ichelson said. “For many, they look away from both brands because of certifications and unrealistic requirements of most.”
Ichelson said he expects consolidation to continue.
“Companies will recognize that orchestration happens more efficiently in a like-branded world; therefore, more of this should and will happen,” he said.
Senior News Editor, Channel Futures
James Anderson is a news editor for Channel Futures. He interned with Informa while working toward his degree in journalism from Arizona State University, then joined the company after graduating. He writes about SD-WAN, telecom and cablecos, technology services distributors and carriers. He has served as a moderator for multiple panels at Channel Partners events.
You May Also Like
Cloud Computing News: AWS Loses Another Key Exec to Azure; Canalys, Vega Cloud, Hyve NewsFeb 23, 2024
Channel Futures Reveals 2024 Circle of Excellence InducteesFeb 23, 2024
Canalys Channel Leadership Matrix Names AWS, Cisco, HP Among 'Champions'Feb 22, 2024
CrowdStrike, SonicWall Cyber Threat Reports Highlight Attacks, Popular TacticsFeb 21, 2024