“Uses Splunk” is not “verified current Splunk customer” — only 7 of 83 signals clear the bar today
Asked:
“Anything I’m missing here? Anything here where info is outdated? I only want to target customers using Splunk today.”
An automated web audit extracted 83 Splunk-usage signals across 50 independent sites — job posts, employee profiles, vendor customer stories, and recruiter mirrors. This is candidate evidence, not a clean customer registry: triaged against the asked account list, 7 accounts stay as priority targets, 60 need reverification with a dated 2025–26 operational signal before outreach, and 16 rows are out-of-scope contamination or duplicate entities to consolidate in CRM.
Triage of all 83 evidence rows, coloured by evidence quality
Keep the seven Tier-A accounts — Esri, Kaiser Permanente, LPL Financial, RingCentral, UKG, University System of New Hampshire, Wells Fargo — where notes describe direct, current Splunk workloads or commercial events; e.g. UNH’s own media portal shows Splunk in use (media-gallery.unh.edu).
16 of 83 signals sit on weak, off-brand recruiter mirrors — Airbnb, Apple, Cedars-Sinai, Netflix Studios, ServiceNow and others are supported only by suspicious job-mirror hosts and belong in “reverify”, not “confirmed” (macanswerbase.com).
21 rows rest on a single employee profile — treat Coinbase, DIRECTV, Carvana, Western Digital and similar as leads to corroborate against a current official source, not as confirmed customers (linkedin.com).
Two Tier-A notes need immediate validation: “Splunk 10.6 upgrade” at Esri may be a typo, internal build label, or stale version reference (linkedin.com); “Splunk quotas came back” at RingCentral likely means “quotes” (tal.club).
Fix CRM hierarchy before deduplicating: normalize LPL Financial/Holdings, CSAA, Sony/PlayStation and First American variants; check Invitae under Labcorp, MindTouch under NICE, Square as Block, Build.com under Ferguson, Health Net/Magellan under Centene, Silicon Valley Bank under First Citizens; note Yahoo’s Apollo ownership, keep Sandisk and Western Digital separate post spin-off, coordinate Pitzer with The Claremont Colleges, and do not let Las Vegas Sands inherit a Venetian contact after the 2022 sale (splunk.com).
Gating rule for outreach
Target an account only when there is direct internal confirmation or a credible, dated operational Splunk signal within the last 18 months. Undated customer stories, old contact titles, conference scans, “Cribl customer” alone, optional Splunk skills, and generic recruiter mirrors are insufficient on their own — hold the account until a qualifying signal exists.
Evidence table — all 83 extracted signals
Account
Triage
Evidence quality
Latest date
Evidence
Source
Method: 83 Splunk-usage evidence rows auto-extracted from 50 public web hosts (job posts, employee profiles, customer stories, recruiter mirrors), latest evidence dates 2017–Nov 2026, audited Nov 2026. Each row carries one triage bucket (keep / reverify / consolidate-remove) and one evidence-quality badge judged from its source host and date. Evidence text truncated to 220 characters. The audit is evidence-based but incomplete: private customer contracts, pricing, opportunity stage, contact employment, renewal dates and NDA status are not publicly verifiable and were not attempted.