Compare the best free and open-source alternatives to Splunk — self-hosted and desktop replacements you fully control, ranked by GitHub stars, license and platform support.
Curated by open-source.store · Updated November 2026 · 12 alternatives
| Tool | License | Platforms | Self-hosted | |||
|---|---|---|---|---|---|---|
| 77,656 | AGPL-3.0 | DockerLinux | Yes | Nov 2026 | Visit | |
| 32,560 | MIT | Web | No | Nov 2026 | Visit | |
| 29,111 | AGPL-3.0 | LinuxDocker | Yes | Nov 2026 | Visit | |
| 22,789 | MPL-2.0 | LinuxmacOSWindowsDocker | Yes | Nov 2026 | Visit | |
| 22,699 | AGPL-3.0 | LinuxDocker | Yes | Nov 2026 | Visit | |
| 14,972 | — | Web | No | Nov 2026 | Visit | |
| 7,998 | Apache-2.0 | Web | No | Nov 2026 | Visit | |
| 7,518 | Apache-2.0 | Web | No | Nov 2026 | Visit | |
| 4,531 | MIT | Web | No | Nov 2026 | Visit | |
| 3,888 | AGPL-3.0 | DockerLinux | Yes | Nov 2026 | Visit |
Open-source vulnerability scanner using YAML templates to detect CVEs, misconfigurations, and protocol flaws across applications and infrastructure.
vs Splunk: a free, open-source option you fully control, licensed MIT.
Grafana Loki is a log aggregation engine replacing Splunk and CloudWatch Logs with cost-effective label indexing and native S3 object storage.
vs Splunk: a free, open-source option you fully control, licensed AGPL-3.0.
OpenObserve replaces Splunk with an S3-native log and telemetry engine that uses Parquet columnar storage and SQL to lower infrastructure costs.
vs Splunk: a free, open-source option you fully control, licensed AGPL-3.0.