Find costly Splunk ingest without sending data anywhere
Log Spend Auditor is a local-first CLI for understanding where Splunk ingest volume is going and which datasets may deserve review. Run a free Community Quickscan using read-only Splunk metadata or CSV exports. Pro adds full evidence, explanations, recommendations, risk context, and HTML/Markdown reports. Your raw Splunk events stay in your environment.
Pace needs two or more snapshots. This launch has 1, so velocity and momentum read as unmeasured rather than zero.
A source that found nothing is a measurement. A source that has not run is a gap. Neither means the launch lacks the thing.