> ## Content Index
> Fetch the complete content index at: https://www.theamericanquorum.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Cisco Agrees to Buy Splunk for $28 Billion, Paying $157 a Share to Expand Security and Observability
- URL: https://www.theamericanquorum.com/taq-historical-2023-09-23-tech/
- Published: 2023-09-24T03:59:00.000Z
- Updated: 2023-09-24T03:59:00.000Z
- Description: Cisco agreed to acquire Splunk for about $28 billion in cash, its largest announced acquisition, betting that security, observability and recurring software revenue will drive its next phase.
- Author: Kenneth R. Deans Jr.
- Tags: Tech, #Import 2026-09-01 05:58

Cisco Systems agreed Thursday to acquire Splunk for $157 a share in cash, valuing the cybersecurity and data-observability company at approximately $28 billion and setting up the largest acquisition in Cisco’s history. The deal is a major bet that the future of enterprise infrastructure will depend as much on analyzing and securing machine data as on the networking hardware that built Cisco’s franchise.

The companies’ [September 21 announcement](https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2023/m09/cisco-to-acquire-splunk-to-help-make-organizations-more-secure-and-resilient-in-an-ai-powered-world.html?ref=theamericanquorum.com) says Splunk President and Chief Executive Gary Steele will join Cisco’s executive leadership team after closing and report to Cisco Chair and Chief Executive Chuck Robbins. The boards of both companies unanimously approved the transaction, which is expected to close by the end of the third quarter of calendar 2024, subject to Splunk shareholder approval, regulatory review and customary conditions.

## The price reflects a strategic shift toward software and recurring revenue

At $157 per share, Cisco is offering a substantial premium to Splunk’s unaffected trading price and committing tens of billions of dollars to a business centered on software subscriptions, cybersecurity analytics and observability. Cisco said the combination should be cash-flow positive and gross-margin accretive in the first fiscal year after closing and non-GAAP earnings-per-share accretive in year two.

The transaction’s legal terms are recorded in Cisco’s [Form 8-K filed September 21](https://www.sec.gov/Archives/edgar/data/858877/000119312523239165/d464532d8k.htm?ref=theamericanquorum.com), which includes the merger agreement and a voting-and-support agreement with funds affiliated with Hellman & Friedman. The filing underscores that the acquisition is not complete: Splunk remains an independent public company, and closing depends on shareholder and government approvals.

Splunk made its own [SEC filing](https://www.sec.gov/Archives/edgar/data/1353283/000110465923102595/tm2326347d2%5F425.htm?ref=theamericanquorum.com) describing the transaction and the communications being made to shareholders. The structure calls for Splunk shares to convert into the right to receive cash at closing rather than stock in Cisco, making the transaction a direct deployment of Cisco’s balance sheet rather than an equity combination.

## Security and observability are the technological rationale

Splunk’s software ingests and analyzes large volumes of machine-generated data from applications, infrastructure, networks and security systems. Customers use the platform to investigate cyber incidents, monitor application performance, detect anomalies and understand the health of complex digital environments. Cisco sees that data layer as increasingly important as enterprises operate across clouds, corporate networks and distributed applications.

Robbins argued in a [Cisco blog post](https://blogs.cisco.com/news/cisco-and-splunk-driving-the-next-generation-of-ai-enabled-security-and-observability?ref=theamericanquorum.com) that the combination can link networking, security and observability as artificial intelligence increases both the value of operational data and the complexity of protecting digital systems. Cisco’s thesis is that customers need visibility across infrastructure and applications to move from detecting failures and attacks after they occur toward predicting and preventing them.

That ambition also places the combined company against a broad set of competitors. Cloud providers, security vendors, observability specialists and enterprise software companies are all expanding into adjacent markets. Cisco already sells networking and security products; Splunk brings a large installed base of software customers and a platform built around logs, telemetry and analytics.

## Splunk sees Cisco’s distribution scale as a way to accelerate its transformation

Steele said in a [September 21 message](https://www.splunk.com/en%5Fus/blog/leadership/splunk-and-cisco-unite-to-accelerate-digital-resilience-as-one-of-the-leading-global-software-companies.html?p=5&ref=theamericanquorum.com) that the deal would give Splunk greater resources and access to Cisco’s global sales organization and partner network. Splunk has spent recent years moving from perpetual software licenses toward cloud subscriptions and recurring revenue, a transition that can pressure reported results before producing a more predictable revenue base.

That business model is attractive to Cisco for similar reasons. The networking company has been trying to increase the share of revenue tied to subscriptions, software and services rather than one-time hardware purchases. Splunk gives Cisco a large recurring-revenue software asset at a moment when demand for security and observability is rising with cloud adoption and the spread of AI-driven applications.

The [Cisco investor webcast](https://investor.cisco.com/events-and-presentations/event-details/2023/Cisco-Investor-Webcast-2023-6YAtbc%5F3ej/default.aspx?ref=theamericanquorum.com) devoted to the deal emphasized those financial and strategic themes, including the expected effects on growth, margins and cash flow. Management also said the transaction would not change Cisco’s previously announced dividend or share-repurchase program.

## The acquisition will face regulatory and integration tests

The scale of the deal guarantees scrutiny, even though Cisco and Splunk are not direct substitutes across all of their businesses. Regulators will examine overlaps in cybersecurity, observability and related enterprise software markets, as well as whether combining network infrastructure with a major analytics platform could affect competition or customer choice.

The companies are also assuming substantial integration risk. Large software acquisitions can lose value if key engineers and salespeople depart, if customers slow purchases during uncertainty or if product road maps become confused. Cisco must preserve Splunk’s software culture and customer relationships while integrating technology, sales channels and corporate functions into a company with a much broader portfolio.

Splunk’s board nevertheless concluded that the all-cash offer provides immediate value to shareholders. Cisco, by contrast, is accepting the execution risk because it believes the combined platform can create a stronger position in markets where enterprises are spending heavily to manage cyber threats, application reliability and increasingly complex data environments.

## A $28 billion statement about Cisco’s next identity

The transaction is significant not simply because of its size but because of what Cisco is buying. The company that became synonymous with routers and switches is placing its largest acquisition behind security analytics, observability and software economics. That follows years of smaller acquisitions intended to broaden Cisco beyond hardware and make more revenue recurring.

The companies’ [joint Splunk-hosted transaction materials](https://www.splunk.com/en%5Fus/newsroom/press-releases/2023/cisco-to-acquire-splunk-to-help-make-organizations-more-secure-and-resilient-in-an-ai-powered-world.html?ref=theamericanquorum.com) describe the combination as creating one of the world’s largest software companies. While that characterization depends on how software revenue is measured, it captures the strategic direction: Cisco wants a larger share of enterprise spending that sits above the physical network and closer to data, security and application operations.

Nothing about the outcome is guaranteed. The transaction still requires shareholder and regulatory approvals, and the promised financial benefits depend on successful integration after closing. But the commitment of roughly $28 billion makes Cisco’s priority unmistakable. It is betting that enterprise customers increasingly want networking, security and observability to operate as a connected system—and that owning Splunk will give Cisco a central role in that architecture.