Splunk will no longer be available for Russian companies

Splunk announced that it will no longer be selling its services to Russian companies. There will be no direct sales or via partners. This also includes companies whose headquarters is situated in Russia. However, they will continue to provide support for existing accounts/services. But, any renewals or expansion of accounts will not be entertained.

Security researcher @SwiftOnSecurity spotted this first.

https://twitter.com/SwiftOnSecurity/status/1097694742706556928

Some users are encouraging the act and also suggesting this be done in China:

https://twitter.com/Primed_Mover/status/1097717830580166657

They plan to continue services globally with this exception. The announcement on the Splunk website explains that this decision is effective for:

“...opportunities with technical partners, resellers, distributors and vendors. It also applies to business with subsidiaries based in countries outside of Russia whose parent company is in Russia, or who would use the software or services within the territory.”

Splunk is a business intelligence tool with a web UI. They also provide Security information and event management. It’s not very clear as to why they decided to drop support for Russia. Malicious cyber crimes like disinformation propaganda and hacks have been traced back to Russia in the past. Perhaps Splunk does not want to be linked to such activities or actors.