Splunk Inc. (SPLK) Q4 2015 Earnings Call Transcript
Published at 2015-02-27 00:20:09
Ken Tinsley - Former Treasurer and Director of Investor Relations Godfrey R. Sullivan - Chairman, Chief Executive Officer and President Haiyan Song - Senior Vice President of Security Markets Doug Merritt - Senior Vice President of Field Operations David F. Conte - Chief Financial Officer, Principal Accounting Officer and Senior Vice President
Philip Winslow - Crédit Suisse AG, Research Division Brent Thill - UBS Investment Bank, Research Division Keith Weiss - Morgan Stanley, Research Division Raimo Lenschow - Barclays Capital, Research Division Edward Maguire - CLSA Limited, Research Division Kash G. Rangan - BofA Merrill Lynch, Research Division Daniel H. Ives - FBR Capital Markets & Co., Research Division John Stephen DiFucci - Jefferies LLC, Research Division Mark R. Murphy - JP Morgan Chase & Co, Research Division Gregory Dunham - Goldman Sachs Group Inc., Research Division Karl Keirstead - Deutsche Bank AG, Research Division
Good day, ladies and gentlemen, and welcome to the Splunk, Inc. Fourth Quarter Fiscal Year 2015 Financial Results Conference Call. [Operator Instructions] As a reminder, today's program is being recorded. I would now like to introduce your host for today's program, Ken Tinsley, Splunk's Corporate Treasurer and Vice President of Investor Relations. Please go ahead.
Great. Thank you, Jonathan, and good afternoon, everyone. With me on the call today are Splunk CEO, Godfrey Sullivan; CFO, Dave Conte; as well as Executives Haiyan Song and Doug Merritt. Our press release was issued after the close of the market today and is posted on our website. This conference call is being broadcast live via webcast, and following the call, an audio replay will be available on our website. On this call, we'll be making forward-looking statements including financial guidance and expectations for our first quarter and fiscal 2016, transaction and product mix, planned product sales and facilities investments, our market opportunities and customer adoption of our products, expected success of our market groups and use case opportunities. These statements reflect our best judgment based on factors currently known to us, and actual events or results may differ materially. Please refer to documents we file with the SEC from time to time, including the 8-K filed with today's press release. Those documents contain risks and other factors that may cause our actual results to differ from those contained in our forward-looking statements. These forward-looking statements are being made as of today, and we disclaim any obligation to update or revise these statements. If this call is reviewed after today, the information presented during this call may not contain current or accurate information. We will also discuss non-GAAP financial measures which are not prepared in accordance with generally accepted accounting principles. A reconciliation of GAAP with non-GAAP results is provided in the press release and our website. With that, let me turn it over to our esteemed leader, Godfrey Sullivan. Godfrey R. Sullivan: Thank you, Ken, and I have to say that was one of your best disclaimers ever. I mean, that was awesome. Welcome, everyone, thanks for joining the call. We had a great finish to the year and I want to thank our customers for their enthusiastic support, and also our Splunk employees for their many contributions. Revenues for Q4 were $147.4 million, up 48% year-to-year. License revenues, $98.1 million, up 43% year-to-year. We finished the full year $450.9 million, up 49% from the prior year. Notable customers in Q4 include Macy's, Toyota, Lennar Corporation and New York City Transit. We welcomed a record 600 new customers to Splunk in Q4 and had a rocking quarter for Splunk Cloud. We showed progress in product diversity. One good example is our recent press release regarding Hunk adoption by Yahoo, and we also closed new Hunk opportunities with Societe Generale and CenturyLink. Our themes for this call are markets and geos. Over the last year, I've been describing Splunk's increasing TAM and how we're organizing into market groups so that we can deliver best-in-class solutions in our core use cases. The market groups enable us to great strategies that are a direct match to our customers' needs and aspirations. These groups own the vision, product spec and go-to-market elements with world-class domain experts leading them. The security market group is a great example, and that business is on fire because of our focus and great leadership. Today, I've invited Haiyan Song, who runs our security business, to join us and give you a read out on our progress and velocity. In addition to Haiyan leading security, we also now have Marc Olesen, running our cloud team; and Rick Fitz, leading our IT markets group. On future calls, we'll have Mark and Rick as guests to update you on their progress. For your favorite CEO, that would be me, it gives me the ability to delegate these core markets to a very capable exec team so that I can focus on spinning up the next area of opportunity. The market that I want to target next is business analytics. Many of you know that our customers start using Splunk for IT ops or security, but they ultimately discover high-value use cases like customer experience analytics. We have a unique value to deliver here, and it's time we formed up a focused team around analytics use cases. So 2 themes today: markets and geos. On the geo side, we're investing heavily in our field because we know that more customer touch is great for customers and it's great for us. I've invited Doug Merritt, who runs customer facing teams, to give you a read out on our wins and our field activities. Before turning it over to Haiyan and Doug, a few comments on products. First, cloud. From Q3 to Q4, we increased the number of cloud customers by 90%, including a number of 6- and 7-figure orders. Washington Post has been a Splunk customer for many years. In Q4, they chose Splunk Cloud to monitor and analyze their new mobile apps. theScore, think of them as ESPN of Canada, is a new customer. They'll use Splunk Cloud to monitor their infrastructure, trace engineering requests and receive threshold alerts to better anticipate and prevent system problems. Also, happy to tell you that Computer Reseller News just named Splunk one of the coolest cloud vendors for 2015. We also had a strong quarter with Hunk. Societe Generale, the third largest bank in France, expanded their use of Hunk within their big data innovation center. We had a strong quarter at Amazon and sold tens of thousands of hours of Hunk on the Amazon EMR console. And just last week, we announced that Yahoo is using Hunk to explore, analyze and visualize data from their Hadoop environment which stores more than 600 petabytes of data. I can't even say petabyte. To quote Yahoo, "Insights we gain from Hunk helps us saves millions of dollars per year in hardware provisioning." The Yahoo production teams are also using Splunk Enterprise to analyze more than 150 terabytes of machine data daily. So great progress on markets and geos, all to accelerate the velocity of some great products. We just completed our annual company kickoff event, and I can tell you that everyone is fired up about our plans for this year: platform, apps, cloud, market groups, partners and developers. And we have significant work underway in each area. Okay, so Q4 was outrageous and fun. Now to get to the security story, I'm happy to turn the call over to Haiyan.
Thank you, Godfrey. It was indeed another great quarter for our security market. With increased awareness and concern around high-profile breaches and insider threats, companies and government agencies are looking to companies like Splunk to provide the next-generation security solution. Splunk is now the go-to-platform for the next-generation security operations center. Some even signified this evolution with a new name, security command center, or what I like to say, Splunk is becoming the new nerve center, the security brain for organizations around the world. In public sector, cyber-attacks are on the minds of just about everyone, and Splunk is becoming one of the go-to companies for agencies for better detection and protection from today's cyber threats. The U.S. Department of State, a long-time Splunk customer, expanded their use of Splunk to help protect the networks domestically and abroad. Security use cases have expanded from a departmental purchase and are now driving enterprise-wide adoption of Splunk. A global banking institution standardized on Splunk for security analytics and did a global replacement of a legacy SIM. Solution selling continues to be one of the highlights of our security business. Our app for enterprise security continues to be a driver in opportunities and competitive wins. Zurich Insurance Group is a new customer that is replacing their legacy SIM with Splunk, and we are now their global security intelligence platform. We're also seeing more organizations adopting the new cloud paradigm and leveraging Splunk Cloud to deploy security solutions. 1-800-FLOWERS.COM uses Splunk Cloud to comprehensive -- for comprehensive real-time web performance monitoring across their e-commerce platform to provide a superior customer experience. They also utilize Splunk's security solutions, which include multiple security apps to help manage emerging security threats, alerts and real-time incidence response. Splunk Cloud enabled customers to respond to security threats faster than ever before. They don't have time to stand up the internal infrastructure. They just need to get the work done. More organizations understand that the data can be secure in the cloud and they're comfortable and have confidence in our security model in Splunk Cloud. It has been a great year at Splunk since the formation of the security market group. Our mission has been to lead, focus and enable. I recently attended the White House Cybersecurity Summit with the President and the nation's leading CEOs, and it's clear that cybersecurity will continue to be a top priority for every business and government agency. And Splunk is a key part of that discussion. Looking ahead to the next year, we will invest further in analytics-driven security with a focus on breach analysis and insider threat use cases to help our customers combat today's advanced threats. We'll also continue to invest in our ecosystem of security partners with Splunk acting as the nerve center for security operations. I am proud of the progress we have made and the results we have delivered in our security market. I'm very excited about the opportunities ahead. Now I'll turn it over to Splunk's head of field operations, Doug Merritt.
Thank you, Haiyan. It's such a great time to be at Splunk and I'm excited to share more on our excellent quarter. On this call, I'll talk about markets, geos, partners and pricing. You just heard from Haiyan about how our focus on the security market is delivering tremendous success. We're extending the same focus to our other markets as well. First, IT ops. In Q4, the U.S. Navy expanded their license to help with an ongoing data center consolidation. They're closing more than 200 data centers and moving the workloads to Navy enterprise data centers, and they're using Splunk to monitor and ensure a successful and smooth transition. Macy's is a long-time Splunk customer that expanded their license in Q4. Splunk is helping increase uptime and performance of Macys.com and Bloomingdales.com, all leading to a better online customer experience. Long-time customer Zillow significantly expanded their use of Splunk for IT ops and also purchased the Splunk App for VMware. Splunk's platform now functions like a utility providing dashboards to all their developers and engineers to improve quality and performance of Zillow's products and services. Their ops team is even using Splunk to change the color of their office lighting as problems become critical. Now that is an innovative use of Splunk. Other organizations selecting Splunk for IT ops include the City of Boise, Hong Kong University of Science and Technology and Pentagon Federal Credit Union. Next, business analytics. We closed an opportunity with Walmart Brasil in Q4. Walmart Brasil is using Splunk Enterprise for business analytics as well as for app delivery and IT ops. They analyze their e-commerce platform to improve website performance, ensure uptime and discover new revenue opportunities by improving the customer shopping experience. Other companies choosing Splunk for business analytics in Q4 include Auchan, a large French retailer, and CenturyLink. Now on to the geos. All geos delivered a strong Q4, with international contributing 25% of our revenues and growing bookings greater than 60% over last Q4. As part of our continued focus on customer adoption and success, I'm happy to tell you about several changes in leadership, including 2 new leaders to the international team. Adam Bangle joined us as head of sales in EMEA. Adam formerly was with RSA and we're pleased to have him on board. Thanks again to Tom Schodorf for spending Q4 in EMEA to assist with the transition. And in APAC, Emilio Umeoka, who is our head of global partners, will now also lead the APAC sales. Emilio has extensive experience in APAC. He was formerly president APAC in Microsoft. And by the way, Computer Reseller News magazine just named Emilio a top channel chief of 2015. In addition to Adam and Emilio, we put Bill Cull, who's been leading the public sector in the Americas for the past 3 years, in charge of global public sector; and Anthony Palladino continues to do a fantastic job as our head of sales in the Americas. And I'm sure you've heard that Vishal Rao is leaving Splunk. I want to thank him for 4 great years. We've decided to eliminate the position of head of direct sales and now all the geos will report directly to me. I'm very pleased about our strong leadership that's in place to help us prepare for this next phase of growth. Now on to partners. Investment in partners is absolutely critical to our growth strategy and you'll see us put renewed focus on this in fiscal year '16 as we launch the Splunk Partner Plus program which we will unveil at our upcoming partner summits. ServiceNow is both a strategic partner and a customer. They signed an enterprise agreement in Q4 to expand in several use cases including IT ops, application delivery and security. We also had a strong partner relationship headlined by our compelling product integrations. Fox is another important partner. They've purchased a multi-terabyte license to expand their use cases from IT ops to security and business analytics, gaining insight into their end-user activity to feed their queue of new product features and functions. Our joint customers also appreciate the Splunk App for Box which enabled business teams to track usage trends, security teams to spot suspicious activity and finance teams to audit for compliance. Deloitte, our partnership with them is expanding. We had a number of joint transactions in public sector alone in fiscal year '15, including the State of Georgia Health and Human Services in Q4. I2, our higher ed partner, is also on a tear. This quarter, we received 10 orders totaling more than 1 terabyte with universities, including Ball State, the University of Alabama and Washington State. Washington State is standardized on Splunk across IT, IT operations, security and networking. And the last topic, pricing. Over the past year, you've heard us talk about how we are constantly looking for ways to improve our pricing strategies to accelerate broad adoption and time-to-value for our customers. Learning from our experience with customers, we've already standardized on Splunk within EAA. Today, we rolled out a program to make it easier for customers to deploy Splunk enterprise-wide. The goal is to have a standard enterprise pricing program that provides budget predictability for these customers. So what's different? Our new unlimited pricing is aligned with the size and scale of the customer and their systems, and is not based directly on volume of daily data indexed. This approach will enable customers to ingest more data from more sources with the cost determined upfront. So in summary, we had a fantastic quarter. We are investing in markets, in the field in making enterprise adoption easier, and in our partners to deliver a strong fiscal year '16. Now back to you, Godfrey. Godfrey R. Sullivan: Thanks, Doug. As I've mentioned at the start of this call, FY '16 is the year of the markets. A year ago, we introduced the idea and now we're in full execution mode with cloud, IT ops and security. All the breach headlines are driving organizations to make faster and more comprehensive decisions when selecting a security solution, so that business will continue to be very strong for us. For me, business analytics is the next stop and I'll be spending a lot of time there. In our geos, we're expanding sales and technical headcount and we're ready for the next phase of growth. And as you've heard from Doug, partners are key to our growth strategy and we're excited about the marquee relationships we're building and strengthening this coming year. With that, I'm delighted to turn the call over to CFO Conte, who will mesmerize you with the numbers. Go, Dave. David F. Conte: All right. Thanks, Godfrey. Maybe I'll hypnotize you with my numbers instead. As you can hear from the team's enthusiasm, Q4 was a strong finish to a remarkable year for Splunk. The investments we've made in product development, field expansion, our market groups and the cloud drove performance substantially above our fiscal '15 plan. Fourth quarter revenue totaled $147.4 million, a 48% increase over Q4 of last year. License revenue grew 43% over last year, totaling $98.1 million for the quarter. For the full year, revenue grew 49% to more than $450 million in total, of which about $283 million was license revenue or a 42% increase over last year. Our product in cloud investments are all about making the adoption and expansion of Splunk easier for our customers, allowing them to gain valuable insights from their machine data, irrespective of their environment, data sources or where their data lives. And our market group approach helps us bring solutions tailored to our customers' most important use cases and enhances the value they get from their data. On the field side, we continue to build our capacity globally. We ended the year with 306 quota carriers. As we've discussed, our go-to-market strategy is evolving from a singularly geo-based approach into a multidimensional field organization. As a result, we expect our selling capacity in the future will reflect more than our traditional quota carrier model and include global channel leverage, such as partners, market-oriented specialists and resources dedicated to key verticals or even specific use cases. I'll continue to update you later in the year around our capacity overall as this evolution continues. More broadly, we grew our total company headcount by about 400 in fiscal '15 and ended the year with more than 1,400 total employees. As pleased as I am with our progress, we're still in the early stages in our markets. We have a unique opportunity to establish Splunk as the standard for our customers and their data analytics and we'll continue our aggressive and focused investments in our product portfolio, the field, our market groups and the cloud to ensure customer reach and success. Splunk continues to deliver incremental value to our customers as they index more data across their enterprise. Once again, more than 70% of our Q4 license bookings came from existing customers while we also recorded a record 600-plus new customers in the quarter. For the full year, we added over 2,000 new customers overall and ended with over 9,000 customers in total. Our continuing commitment to enable Splunk adoption via product innovations, as well as more effective pricing strategies such as EAAs, collectively is driving adoption. In Q4, we recorded 429 orders, greater than $100,000, compared to 289 in Q4 last year. On a full year basis, we booked just over 1,100 large orders compared to 791 last year. In Q4, we also recorded a record 39 transactions greater than $1 million compared to 21 last Q4. For the full year, we booked 68 orders greater than $1 million compared to 41 last year. Our growing product family plus increased awareness and adoption of Splunk software are driving this type of adoption. As a result, we've seen our full year license ASP range increase to $40,000 to $50,000 in fiscal '15, up from $30,000 to $40,000 in prior years. The growing appeal of our EAA transactions as well as our subscription product momentum continue to impact our bookings mix. In Q4, the total of all our ratable transactions accounted for 45% of our license bookings. For the full year, our ratable mix was 38%, which was above our previously guided full year range of 25% to 35%. Last quarter, I said that the pace of adoption of our cloud offerings and other ratable products would drive ratable mix even higher. With current visibility into customer buying behavior and incorporating our expanded EAA offerings plus Hunk and cloud momentum, we now estimate that full year ratable mix going forward will likely range between 30% and 40%. The mix of ratable transactions will continue to vary substantially quarter-to-quarter, generally following seasonal trends. All right. Our education and professional services represented 6% of revenue in Q4, consistent with past levels of 5% to 10%. Remember, since we recognize revenue on services only when they're delivered, services bookings typically do not flow through the balance sheet as deferred revenue. Turning to margins. The detail I give for operating metrics are non-GAAP. Overall Q4 gross margin was 90% in line with our expectations and prior period levels. Q4 operating income was approximately $11.5 million, representing a positive margin of about 8% and better than our expectations on the strength of our overall top line performance. Q4 net income was $11.6 million or $0.09 per share based on fully diluted weighted average share count of 128.6 million shares. For the full year, operating margin was 2.7%. On a non-GAAP basis, this was our first profitable fiscal year. Full year non-GAAP net income was about $11 million or $0.09 per share based on a fully diluted weighted average share count of 127.1 million shares. Cash flow from operations in Q4 was $51 million. Free cash flow was $49 million. Full year cash flow from operations was about $104 million or 23% of total revenues. Free cash flow was $90 million. Looking back over the year, investments in our markets, product, field and cloud are clearly paying off. Looking forward, we will continue to aggressively invest in these areas as we scale the business for our next phase of growth. This is central to our long-term strategy of delivering Splunk anywhere and everywhere our customers' data resides. Our plan is to invest proportionately with our top line growth. So for the full year 2016, we are targeting non-GAAP operating margin of between 2% and 3%, consistent with our fiscal '15 up margin performance. Over the medium term, our operating margin targets include the impact of a gradual 1% to 2% increase in cost of services to reflect the ramping of our cloud business. We remain committed to running the business on a positive operating cash flow basis and estimate that full year operating cash flow will be approximately 20% of total revenues with the quarterly levels following the trend we've seen over the past several years. Fiscal '16 will be a higher CapEx year for us as we expect the bulk of our San Francisco HQ buildout costs will be incurred this year. We combine with our global facility expansions to accommodate our growing employee base. We're planning for approximately $50 million in total CapEx in fiscal '16, weighted about $20 million in the first half and $30 million in the second. We expect to achieve these operating results and our expected full year revenue of about $600 million, an increase from our previous guidance of $575 million. We expect Q1 revenue to range between $116 million and $118 million, with subsequent quarterly revenues following the seasonal patterns we've seen historically. With the continued investments I've described and overlaid with our revenue plan, we expect negative non-GAAP operating margin of between 2% and 4% in Q1, increasing to about breakeven in Q2 then turning positive in Q3 and Q4, consistent with the seasonal nature of our model. Because we denominate globally in U.S. dollars, we have no foreign exchange exposure to our revenue line. We do, however, have modest risk below the revenue line from foreign currency fluctuations. In Q4, we benefited from the strong dollar to the tune of about $0.01 a share at the bottom line. Overall, our Q4 results and our full year performance were solid. Our product investments are driving customer success and our field expansion and market focus is enhancing our execution capabilities. Our strategy is working well and we plan to continue to invest and fuel the pace of adoption as we aim to make Splunk the standard for machine data analytics. Thanks much for your time and interest. With that, we'll take your questions.
[Operator Instructions] Our first question comes from the line of Phil Winslow from Crédit Suisse. Philip Winslow - Crédit Suisse AG, Research Division: Two questions. One, just sticking with the theme of markets here and verticals. Your security, if I rewind back to sort of the IPO time, I think you all talked about sort of security being 20% or less of sort of the mix of your business. I know it's always hard to tell sort of what exactly Splunk capacity is being used for, but what has that gotten up to now? It sort of feels like it's maybe 30%, 35%, wondering if you could just give us a sense of that. Then also, when you think about that business going forward, how do you kind of think about the TAM? I mean, obviously, we've talked about your security information management, but now you've seen sort of security intelligence sort of a new field kind of starting to show up as well. Just how do you think about sort of the potential of that? And then sort of second question, just on the big data side. Obviously, you mentioned the contract with Yahoo, basically the birthplace of Hadoop for Hunk, Godfrey, just from a very high-level perspective, what do you think that means, in the sense that the place that Hadoop was born is actually paying for and using Hunk? Godfrey R. Sullivan: Hey, Phil, first, thanks for the -- for your comments and happy to take those on. So part of the -- I mean, the whole motivation for doing market groups to begin with was that we -- one of the challenges of running Splunk is, you guys well know, is trying to decide what not to do. That is, customers use the engine for so many use cases that we had to start looking for the place where we would see repeatable use cases and know that we could do a certain solution multiple times as opposed to everything being sort of a one-at-a-time issue. And security is a great example of that. So we started working on the Splunk app years ago which was a way to put workflow and content and all the partner data into a place where customers could easily use it. So I think that security has been the first of our use cases to mature where we could actually fully form up platform, app, best practices and the like. And I think Haiyan has just done a marvelous job of unifying that team, further driving product strategy, and you can see it in our results. So I think the direct answer to your question around percentages, it's anywhere in the 35% to 40% range on a quarter-to-quarter basis throughout this year. And I would expect for it to stay in that range going forward because that business is just on fire. So the rest of the business growing nicely too, but security has been doing great. And now it's our challenge to then move on to each of the other areas where we have repeatable use cases and do something exciting there. So I'm very, very bullish about that. On the Hunk side, I still see Hadoop primarily used as enterprise data warehouse replacement. It's cheap storage and replacement of very expensive storage. And once that happens and customers say I need to have a way to get to that data and the fact that Hunk can analyze that data in place, that is, we sort of index it within the cluster and give you the answer back, even on an iterative basis is so different than having to move the data out of Hadoop in order to do analytics on it. So the architecture and the approach of Hunk is exactly what the big Hadoop shops look for when they're trying to analyze that data, especially very large data sets over time. So I think that Hadoop -- I should say, the Hunk world will continue to make progress more slowly than our other segments of business just because there are not as many Hadoop customers as mature as a Yahoo and some of the other bigger Hadoop installations. But we're bullish about that business, too.
Our next question comes from the line of Brent Thill from UBS. Brent Thill - UBS Investment Bank, Research Division: Godfrey and Doug, it's around the EAAs and around the formalization now. Can you just maybe give us a sense of what you think this does now with some of the larger enterprise accounts? And I know you've been very flexible with your clients on pricing in the past, but what does this mean now with today's announcement and what you think this will do for some of the pipeline of larger transactions, and perhaps some of the multi-solution areas that you're going after? Godfrey R. Sullivan: Thanks, Brent. You folks have been pretty vocal with us over the last several years saying we always hear that your customers love your products, they like the company, they like everything about Splunk except they worry about the pricing model having an indeterminate cost attached to it because they don't know how big their data could get. And so kind of look back, I like the old Oracle analogy from their early days where -- when it was very early game, they've said let's go out and offer customers the ability to put as much data as they want into this -- into the engine and then go from there. And I think that's a good model for us where these are early days, but we have first mover advantage and we have a very differentiated product. And the combination of those 2 means we should give our customers a way to think about, put as much data as you want into Splunk, not just high-value data or data that is held back by an indexing rate. So from a strategy standpoint, it's just a matter of let's make it as easy as possible for customers to standardize on Splunk. So I don't know, Doug, you've been on an airplane a lot over the last 9 months, you've gotten plenty of feedback yourself, so.
Yes, it's in line with what Godfrey just went through that, first of all, being able to offer more structured vehicles so that our sales force can have direct dialogue with customers that really do want to go larger with Splunk, without all the check backs that were necessary with a little bit more handcrafted approach, I think is super important with where we are now as a company given the desire of many companies to expand and what wasn't -- may not have been as clear in that announcement. Customers want to deploy multiple modalities, classic or perpetual term and unlimited. The announcement is focused on unlimited, but we're continuing to give choice with the EAA structures so that we can map to customers buying preferences and make sure that we meet their needs for the use of Splunk. Brent Thill - UBS Investment Bank, Research Division: Great, and just a quick follow-up for Dave, just on the move to the cloud versus term or perpetual. There's been some concerns perhaps that there may be different economics. I'm just curious if you could just walk through the quick view in terms of what you're seeing economically across the different ways that you can go to market. David F. Conte: Sure, the -- when you look at -- in terms of the top line, Brent, the economics are really specific to the use case. And we're seeing that customers, many of our customers are taking advantage of hybrid search, so they'll have certain use cases where their data is behind the firewall, another use cases where their data is in the cloud, and the ability to leverage Splunk across all those data sources is really valuable. And that translates into, I would say, top line economics that are appropriate for the particular use case, and we see that across the delivery vehicles. Obviously, from a cost perspective, and I mentioned it in my prepared remarks, there's incremental cost for us to deliver that service and we see that again increasing our cost of service and hitting our gross margin by maybe 100, 200 basis points over the course of the year.
Our next question comes from the line of Keith Weiss from Morgan Stanley. Keith Weiss - Morgan Stanley, Research Division: I was wondering if you guys could give us a little bit more color on the sales investments that you're looking to make? It seems like last year was heavy-focused on sort of geographic expansion and security. Is it a similar sort of pace of expansion when you go into BI, is it a similar sort of type of guy that you're bringing on board? And then if Dave could quantify maybe a target of where you look to end the year in terms of sales capacity, that would be helpful. Godfrey R. Sullivan: Thanks, Keith. Yes, so -- and consistent with what I walked through, I think it's a combination of geo expansion. There's still a lot of opportunity across multiple different theaters. The market investments, making sure you've got the right specialist capability or domain expert capability to support our general sales force and continued balanced investment across the partner ecosystem as well. And Dave, I'll hand it to you for any specifics on. David F. Conte: Sure, Keith. We've been talking about the composition of the sales team and I was a little more explicit that it's an evolution in terms of its breadth. And Doug just touched on the fact that market specialization, the investment we're making in terms of getting ultimately what we want is a leverage channel relationship with not just pure VARs but strategic channel partners. Those are all part of our investment thesis. In terms of what you can expect for the next year, if you go top down, the expectations around op margin will be a consistent amount of positive operating margin overall for the fiscal year. We'll look to make those investments consistent in terms of the expense category between sales and marketing, R&D, G&A that you've seen from us in prior years. As it relates to specific metrics around capacity, as I've mentioned in my prepared remarks, we'll continue to measure those internally and determine what's appropriate to share externally so that you can build your model which we want to reflect our model. Consistent with what we've done in the past in that regard, we get to about the middle of the year and then I'll give some insight in terms of how we're thinking about year-ending sales capacity overall. Keith Weiss - Morgan Stanley, Research Division: Got it. It kind of sounds like the actual number of sales heads perhaps might be a little less important because you had so many guys working around them than it might be about actual productivity of each one of those sales guys is enhanced by partners, by market specialists. Is that the right way to be thinking about it? David F. Conte: Well, we're certainly looking to always address and make our sales folks productivity. I mean, that is never-ending exercise for us, and I think we've done a nice job of it, and I'm certainly happy with the productivity that we experienced and the productivity gains that we've experienced. But it's really about how do we address what looks to us to be an ever-increasing TAM. And we need to have the right experts in the sales teams partnering with our market groups, like Rick and Haiyan, and also our direct sales guys to go into the customer and say, "Okay, we're going to tell you how you extract all the value from your data." So I think you are thinking about the right way, but in terms of specifics, again, midyear I'll come back and I'll give you guys some specifics in terms of how to think about it for the end of the fiscal year.
Our next question comes from the line of Raimo Lenschow from Barclays. Raimo Lenschow - Barclays Capital, Research Division: The question was on the pricing announcement you announced this morning, and I know we have talked about this before. Can you talk a little bit about the implications you see in your conversations with the big customers around that? I mean, you obviously had EAAs before. What kind of a different debate you can have now and what impact are you expecting for next year and going forward? Godfrey R. Sullivan: Thanks, Raimo. I'm going to turn that over to Doug and I'll sweep up the floor in case it's necessary. Raimo Lenschow - Barclays Capital, Research Division: No pressure.
Hey, Raimo. So the way that we approach EAAs, it is -- by the time a customer -- you don't lead right away with an EAA, obviously. You build credibility within the customer to actually get there. And I'm really thankful and happy for the thoughtful and thorough processes we have around sales here, and we've got a whole best practices guideline for EAAs that has pricing as actually the eighth step of 8 key steps. It's certainly important, but there's a lot of understanding the customer, understanding their needs, understanding the environment, building the right champions and coaches, proving value along the way, and ensuring that the customer's got the right momentum before we drop into an EAA discussion. I think the clarity that we're adding with the new EAA structure makes an easier early framework for our customers as they're dealing with us and makes it a cleaner discussion or landing point for them as they want -- as they get -- as they understand where their demand set for Splunk will go over time. So I think the main focus was in 2 aspects: ensure that we help our customers get greater adoption and traction by taking the pricing issue -- or by making the pricing issue more clear for them, and ensuring that our reps are more empowered and have more clarity and tools at their disposal to have those discussions on a broad-based and scaled orientation. Raimo Lenschow - Barclays Capital, Research Division: Perfect. Godfrey, are you okay with that? Godfrey R. Sullivan: Raimo, as long as you're happy, I'm happy.
Our next question comes from the line of Ed Maguire from CLSA. Edward Maguire - CLSA Limited, Research Division: I just had a question about some of the sales changes you're making and how those actually map into the industry groups. It sounds to me, from how you've described it, that you are moving from even more of a specialized approach than even the structure of the market groups. And I'd be interested in any color in terms of how that is actually sort of informing not just the go-to-market but also how that's tied into your development of solution sets. Godfrey R. Sullivan: Ed, I heard a rumor that you're in Tokyo or somewhere, is that right? Edward Maguire - CLSA Limited, Research Division: It's not a rumor. Yes, I'm here. Godfrey R. Sullivan: So you're asking me that question at 4 in the morning? I just wanted to make sure I was clear about that. Edward Maguire - CLSA Limited, Research Division: It's 14 hours ahead, so it's actually a civilized hour. Godfrey R. Sullivan: All right, all right. Well, thanks for the question and, as always, good to hear your voice. So I'd like to ask Haiyan to opine on this a bit. But when you look at the market group formation is more -- field structure is a part of the market group formation, but it's really about forming up competency in our major use cases. Haiyan, maybe it's worth just to talk about what the members of your team, like, what are the types of titles that belong to your team and then how does that apply to apps and sort of the solution stack and then we can come back to fields.
Sure. Ed, good to talk to you, again. As I mentioned, the mission for the security market group is to lead, to focus and to enable. So what we have is our head of product management, head of development, head of solution marketing, they are fully focused on the security market. And not only that, we have a dedicated CD Director who focus on building our ecosystem. And that into the field, what we're doing is we're building a multitiered team with subject matter expertise and they are distributed into the field into different regions and there's a global support for them for more strategic accounts and more advanced prototype needs. And not only that, we also built a dedicated professional services organization just for security customers, and so we can provide trusted advisory services to them. And with all of those, it's really the market group provides the vision and the strategy and also the enablement for the execution, if that helps. Edward Maguire - CLSA Limited, Research Division: Great. And just a quick follow-up. You know, a year on, we started talking about Internet of Things last year, and I know you guys have some initiatives. Just quick thoughts on progress, and I do realize it's early days, but any color on that from you would be very helpful. Godfrey R. Sullivan: Yes, thanks, Ed. The Internet of Things to me still looks like it's shaping up to be an industry conversation more than anything else. I always think what's the primary lens you look at when you look at a market or a set of customers. And inside of the existing Splunk company, the primary lens we look at is kind of a market or solutions lens, how many people are buying the product to use it for security use cases, or IT operations use case. When you get to IoT, it looks an awful lot like industry segments and very specific even to that. So within building systems, you'd be in military operations, or residential would be 2 very different market segments. In traffic management, we see trains, we got a lot of train customers that use Splunk for monitoring trains remotely. At the same time Smart Grid would be a completely separate industry but with very similar types of technology stacks applied. So I don't have that one all figured out yet, I'm spending a lot of time this year on the business analytics piece, but we're doing a lot on IoT. We probably have more IoT customers than any other big data company because the product is so easy to use. But I think that the work that will apply to IoT will be industry specific and therefore partners will be a big part of that conversation.
Our next question comes from the line of Kash Rangan from Merrill Lynch. Kash G. Rangan - BofA Merrill Lynch, Research Division: One question for Doug. With respect to the new pricing model for EAA, I know you eloquently explained how these 2 deals are going to be different. So it feels like you've got a pretty good handle on potential spillover from one bucket to the other. Can you talk a little bit more about how you are pricing it exactly? Is it based on headcount, or revenue, whatnot? And how do you think that the expansion sales of current customers are likely to play out? And I guess a follow-up for Mr. Conte is have you -- are you really of the view that since this pricing model is launched today, you really don't have a great feedback, level of feedback from the customer to be able to assess how much of your business mix is going to be from the ratable because it seems like it's going to take some time for this to be sorted out among your customers and there could be some volatility in that mix. Okay, just wanted to get that. Godfrey R. Sullivan: Doug.
So to start on the actual strike -- on the actual structure. For the unlimited EAA, it's based on customer size. Revenue is a component after that, but there's other factors that go into that size as well. And again, the goal there is to take the data volume piece away and instead allow the customer focus on how to use Splunk as machine data platform across all functions, all use cases, the way that they've given us feedback that they want to drive. To structure the different vehicles we came out with, we did do a series of interactions over the past 6 to 8 months with key customers that already were beginning to discuss different EAA-type formats. So we've got some decent field validation and customer validations on how these things should be structured. And I feel pretty good about the thoughtfulness that went into it. Dave's team was key in driving the overall structure and making sure it worked, and I'll hand the remainder of the question to Dave. David F. Conte: Hey, Kash, it's Dave. Your question about mix and volatility in that mix, you're spot on. As we get into -- just because we've structured the program -- as you know, we've been doing EAAs for certainly well over the last year, but each one an individual exercise, not just for the customer, but for the field. So this program has some dual benefit in terms of enabling customers to get the predictability that they want and standardizing on Splunk, enabling field to deliver that structure to the customer. So I expect we'll continue to see quarterly volatility -- again, I expect it to be the way -- seasonal in terms of how we've seen by quarter. Q1, probably having the least amount of ratable composition and Q4 having the greatest, generally tied to larger transactions. But as you know, I've been providing an outlook on mix for the last 3 years. That's gone from 10% to 20% of license to 20% to 30% of license, to now 30% to 40% of license. So the composition is obviously grown as a percentage of the whole, but it's certainly volatile on a quarter-to-quarter basis and all the way down to a particular transaction and when it closes. Kash G. Rangan - BofA Merrill Lynch, Research Division: And quickly, if I could. Within that subscription mix, any feel for how the proportion of Hunk deals versus ratable deals versus deals [indiscernible]. Which piece is smallest? Just your thoughts on that. David F. Conte: Yes. I mean, it's hard to -- obviously, as we move from single product to multiproduct, many of those multiproducts -- and while cloud isn't necessarily a separate product, it's rev rec is treated separately and ratable. But given the overall growth in the business and our traditional enterprise platform sales, it's really tough to measure exactly, well, how much can I expect these new products and delivery mechanisms are going to increase that ratable contribution? Because the rest of the business isn't standing still. So again, you're just going to have to stick with me as I give you guys the visibility that I have in the way we plan for ratability across the balance of the year, and we'll continue to refine that metric as it becomes refined for us.
Our next question comes from the line of Daniel Ives from FBR Capital Markets. Daniel H. Ives - FBR Capital Markets & Co., Research Division: Godfrey, could you maybe talk over -- if we compare where we were a year ago and how the conversation with customers have changed in terms of the adoption curve and just more customers willing to really spend significant dollars with the Splunk platform. Maybe you could just compare and contrast where we were a year ago. Godfrey R. Sullivan: Sure, happy to, and thanks for the question. We show that in the numbers, just if you look at the increase in the number of 7-figure transactions, for example, from one year to the next. It's a pretty impressive percentage. And that is the mirror image of the fact that customers went from departmental to multi-departmental and now are expanding out to more enterprise adoption. So I think that part of the maturity curve that we will go up is just a continuation of that expansion from multi-departmental to more of an enterprise flavor and the pricing model helps accelerate that. So the difference in conversations -- 2 or 3 years ago, I was out meeting with the sys admins and first-level IT administrators and I was trying to explain to them what a search engine for machine data was. More recently, I was out in Europe meeting with 3 C-level execs of a large European telecom, and their comment to me was Splunk is everywhere inside our company. We need to come back and spend several days doing technical planning with your development team because we need to embed you as a mission-critical part of our cloud service. So pretty good example of how the conversations have changed over the years. And I couldn't be more excited about it. Daniel H. Ives - FBR Capital Markets & Co., Research Division: Yes. And this is a quick follow-up. I mean, if cybersecurity and just sort of this convergence, what we're seeing with Splunk on the security side, I mean, how big of a game changer has that been to your business and even going forward in fiscal '15? Godfrey R. Sullivan: I'm not sure I heard the question. How big is... Daniel H. Ives - FBR Capital Markets & Co., Research Division: In terms of security, in terms of maybe if I just think about the security tailwind that you guys have flown in the platform. Just talk about how big of a contributor that is going forward over the next 1 to 2 years and just -- and how that's really been a big change that you've seen in terms of that demand cycle? Godfrey R. Sullivan: Got it. You broke up a little bit there, but I'm going to turn this over to Haiyan from a standpoint that, 2 years ago, we had a collection of a handful of really smart security practitioners, individual practitioners scattered across the company, and now we have a fully-formed marketing -- market team around it. But I think Haiyan it's probably best for you to answer how that looks.
Sure. I think in my year here at Splunk, I've certainly seen great momentum building up. The market is embracing our analytics-driven approach and that you're reembracing the solutions. You can see from the results that we have shared, and we have been growing really, really healthy, and just I think multiples of the market growth for the security market. And those wins is not because the market itself expanding only and is also for competitive wins that we've got in this existing market. In terms of for this couple of years, as I mentioned in the call, from just attending the White House Cybersecurity Summit and the people and the resources that was made available by the government and by the enterprises, we can continue to see top priority is going to be given to cybersecurity and defense. And we are becoming the go-to platform for a lot of enterprises and organizations, partly because the role that they're expecting us to play, and we have proven being the nerve center in a lot of the security operations, is really helping the security organization team evolve into the next-gen technology solution for security and solving the more advanced threat. Daniel H. Ives - FBR Capital Markets & Co., Research Division: That's a very helpful answer. David F. Conte: Yes. I'm really bullish on the fact that the content that you've assembled, like the app and the dedicated proserve team and all that, has been a real enabler because we're seeing a very high attach rate now on our Enterprise Security app, our solution on top of our engine sales. It's a great sign of the marketplace looking to us for a complete solution.
Our next question comes from the line of John DiFucci from Jefferies. John Stephen DiFucci - Jefferies LLC, Research Division: I have another question on the EAAs and the pricing and then a follow-up for Godfrey. But on the pricing, and you're saying in the press release, it's for customers of any size. And I guess I'm just wondering, do you anticipate this for smaller customers? And maybe, could you give us -- sort of give us an example of general terms, and like what is the license price going to be based on, and especially the smaller customers. We sort of get it with the larger ones, but just how might this work differently for smaller customers, if at all? Godfrey R. Sullivan: One of the cool things about Splunk is the data volume is not dependent on size of the organization. There's a number of smaller -- technically smaller, revenue-wise, midsize and small dot-coms that have huge data volumes and still would fit in well with an unlimited EAA or one of the other structured vehicles we have. But I also understand your point of when someone is still -- is not completely wall-to-wall with Splunk, how do EAAs help them? And that's why we've got that perpetual term and unlimited triumvirate structure and the perpetual -- the other vehicles still maintain a data orientation, just give visibility on what that data pricing is and they go down to smaller levels. They go down to as low as 100 gig or 250 gig. So we're hoping that we cover the full gamut of customers that are interested in Splunk. David F. Conte: Hey, John, it's Dave. I mean, I think the conversation around enterprise adoption, preprogram or pre-announcement this morning, it's really about the customer maturity and how do we get them in that position where they're comfortable -- they want more of our product and giving them that predictable ability to deploy broadly our solution -- our platform and solutions on top of it is really the objective. So when we talk -- we want to make that the case for all customers regardless of their size that are at that level of maturity so that we can move them off from that operational intelligence level 1 to the ultimate goal of operational intelligence level 4, where they're deriving mission-critical information from their data. So -- and as Doug mentioned, we've created the program with what I think enough flexibility to make it attractive for all of our customers regardless of what their particular needs are, whether it's perpetual, whether it's term. And the sizing of the license will certainly be factored on many things where, in this case, not our historic capacity pricing, but rather size of customer. John Stephen DiFucci - Jefferies LLC, Research Division: Okay, that's helpful, guys. Because I think -- and you guys know this, right? I mean, we get to ask the questions all the time about your pricing and it's always been a big question and its actually been somewhat of a concern of investors. But I think when I talk to investors, I usually say, "Listen, Splunk management is not stupid. I mean, if it makes sense to do things in a different way with a large customer, that's what they do." But it sounds, in this case, where you might be able to -- at least as far as I know, you haven't been doing that a lot with smaller customers, and what I mean that they don't have huge businesses yet. And when you talked maturity, Dave, I just want to make sure you're talking about maturity as to how -- not maturity of the company and how big they are but maturity of their adoption of Splunk. David F. Conte: That's right. You got it. How far along are they on their data journey with Splunk? John Stephen DiFucci - Jefferies LLC, Research Division: Okay, got it. Great. And if I could follow up for Godfrey. Godfrey, when you speak about the business analytics opportunity, does this refer to what most people think of when they think of Splunk, like web analytics of retail websites? Or are you referring to something even broader than that, like some of the applications that traditional business intelligence address? And I guess, if you are thinking broader than that, will that require more specialized apps to be written on top of Splunk? Godfrey R. Sullivan: Great question. So I do not think that Splunk has -- should pursue the analytics marketplace as defined by today's BI tools. There are plenty of tools that understand how to search, report, analyze structured data sets, and that's not a place where we would add significant value. The place where we really add value is in data in-flight. So you think about data that's in motion, and that's where Splunk's time-series engine has a significant advantage over everything else. Now if you combine those 2 sets of data, data that's in motion with data that's at rest, you could do something, oh, like Domino's does when they look at real-time phones from folks' mobile devices to their web system. And you could understand what pizza right now is being ordered that's most popular in Cleveland, let's put a marketing promotion out there to boost sales in that moment. So the traditional BI market, people just -- they compare this quarter's results to last quarter's results and look for variances in those numbers, and time really isn't a dimension. And our customers want very high transaction volumes and customer-facing dot-com environments or mobile environments, which is really on the search, you want to be able to combine the value that's in the data in motion along with some of the data that's at rest like customer names, account numbers, pricing information and so forth. And we have an enormous opportunity there. We have a lot of customers that do that with Splunk today. It's mostly kind of a custom business where they grow into that over time and I think we can accelerate that if we start to put a model around it. And so -- the answer to the last part of your question is, yes, it will require some template or content that help accelerate that level of adoption because it's a fairly complex set of technologies that you're pulling together. John Stephen DiFucci - Jefferies LLC, Research Division: Okay, great, that's helpful. And if I could, so it sounds like you're talking about real-time analytics. And is it the next step there? And is it part of what you were saying? Were you sort of implying that you also, by doing this, get into predictive analytics, too? And -- or maybe that's too broad a category? Godfrey R. Sullivan: Yes, I agree with that.
Our next question comes from the line of Mark Murphy from JPMorgan. Mark R. Murphy - JP Morgan Chase & Co, Research Division: Yes. Godfrey, I believe you said the security group is on fire and I'm curious did it grow materially faster than the total revenue growth for the quarter, which came in at 48%, even if you can comment directionally on that? And do you expect that the security group is going to outgrow the rest of the business this fiscal year? Godfrey R. Sullivan: Yes, I mean, as I mentioned to, I believe it was Phil who asked the question. Security business is running between 35% and 40% of our revenue on any given quarter basis. So it's growing at -- or as fast or faster depending on the geo and all the rest of that. So it's all good. The reason it's on fire is Haiyan, by the way, I just want to be clear about that.
Thank you, Godfrey. Mark R. Murphy - JP Morgan Chase & Co, Research Division: And then as a follow-up, Godfrey, I was digesting the handful of changes in sales management and, of course, I always wonder if you're factoring in any possibility of any minor disruptions that could result in the field this fiscal year or beyond. And then when you mentioned the new unlimited pricing, I started wondering if there could be an offset there just in terms of perhaps some pent-up customer demand. I guess I'm asking this question from a different angle. I'd have to think you could see a surge of some larger transactions from customers who want to separate the cost from the data growth or maybe a pull forward of certain transactions. So I'm just curious, what do you expect on both fronts, and is the timing of those 2 events purely coincidental? Godfrey R. Sullivan: On the disruption question, I think Q1 is Q1. It's always the place where Doug and his team, they assign new quotas, they split territories, they reassign account teams, whatever it is. All the changes that occur in enterprise software, they always occur in Q1, which is I think one of the reasons why you see Q1 seasonally weaker than the rest of the quarters. It's when all the change happens. So there's nothing particularly different this year about it than prior. It's just that all those changes that you roll out at the beginning of the year and off you go. So that part of it feels pretty good. I would just like to reemphasize what Doug said, and that is, on the pricing model, we have multiple dimensions to that model. We have a perpetual model for customers who want to spend CapEx and own software, we have term for people who like to buy it that way, and we have unlimited, depending on what you need as a customer. And through all these years, the #1 thing you could count on is that the customer has an opinion about how they want to do that and they usually tell us which of those models are most important to them. So I don't expect a surge of anything as much as I expect. Well, if there's a surge, it would be in conversations with the customer saying, "Come, tell me about your program." I think that'll be fantastic. But as Doug said, pricing is the eighth step out of an 8-step customer management process that we teach here, and so we don't lead with pricing. It's just a way to have the customer better understand the models. So I'm excited about the new programs, but it's going to take the normal amount of time for each of these opportunities for it to show us what the outcome is, which way the customer prefers to buy.
Our next question comes from the line of Greg Dunham from Goldman Sachs. Gregory Dunham - Goldman Sachs Group Inc., Research Division: Well, quick one on security. It's really to Haiyan's comments that it's not just that the security market is doing well, it's that you're outgrowing the market. So the question really is, what has been the impact from the security markets group? And what have you measured the benefits to that in the last year? And could you rank order? Is it volume? Is it less discounting? Is it consistency? How do you measure the success of moving to that model within security now at year end?
So let me give you a couple of things that we set out as goals for our team. I think it's the winning and the momentum comes from us bringing the right solutions to the customer. And what they really need is to have a new approach to help with today's advanced threats. Some of the legacy product is not really meeting that need. So I think that's the most important part. In terms of metrics and others is how many times we get invited to the table. I think with us being recognized as the leader for the market, we are in all the conversations because we get automatically included in the RFP. The other part is how many times that we can go and message out to the market and the customers why a new approach is needed, why being the new nerve center is the important thing as part of their technology refresh when they look at into security. I think other areas for us is getting our field organization trained, and so we can have a productive conversation with customers and with the users and different audiences with the right messaging and the right solutions to them. I think those are few, there's probably many other things in terms of attach rates and growth rates. I think those are things I'll defer to Dave. David F. Conte: Yes, Greg, it's Dave. I think we've been talking a long time about single product to multiproduct, and we've been investing significantly in terms of content that we can provide on top of our platform and enabling others to provide content, both our customers and third parties, to provide content on top of our platform. Shining example of that is our Enterprise Security app that sits on top and Haiyan mentioned attach rate. The rate of attach that we see as our market group, that's led by Haiyan, is able to engage and articulate the value proposition of our solution around security, has been a differentiator for us in that market. And we see it ultimately in our win rate, which is extremely high. When we're engaged in an opportunity, the depth of expertise that our market group focus brings to the field organization and its influence on the product development organization creates a solution that customers have to have to protect themselves.
And due to time constraints, our final question comes from the line of Karl Keirstead from Deutsche Bank. Karl Keirstead - Deutsche Bank AG, Research Division: Actually, I'm good. I'll ping Ken afterwards.
This does conclude our question-and-answer session for today's program. I'd like to hand the program back to management for any further remarks. Godfrey R. Sullivan: Great. Thanks, Jonathan, I appreciate your help today. And thanks, everybody, for joining us. As a reminder, we'll be hosting a SplunkLive! event in D.C. on April 8. You can register via the website. I hope everybody has a good evening. Thank you for your time today.
Thank you, ladies and gentlemen, for your participation in today's conference. This does conclude the program. You may now disconnect. Good day.