Chiron reduces your Splunk bill without losing any log data. The Chiron Estimator runs on a sample of your own logs to measure how much less you would need to index and how much you could save, before making any changes in production.
How much smaller your logs would get: an expected figure and a conservative one you can count on, broken down by step and by source. Add your daily volume and license rate and it shows the annual saving. Delivered as a PDF and as JSON.
Repeated and similar lines are combined, and every line's content and fields can be rebuilt. Optionally, chosen sources become short summaries for a deeper cut. The report shows how much extra that saves and what it gives up.
The rules, collector transforms and Splunk settings a Chiron pilot needs to reproduce the estimate on your system, with a guide to where each file goes.
Splunk exports, OTLP JSON, Kubernetes container logs and plain text files, compressed or not. No reformatting.
One command on macOS or Linux. It adds the estimator to Claude Code or Cursor, along with a small sample to try first.
Export a few minutes from a busy cluster, or about an hour from a quieter one, and ask your agent for a savings estimate. A run takes roughly 15 minutes to an hour.
The agent walks you through each setting with figures the tool computed. You end with the report and the pilot configuration.
You need a Mac or Linux machine, Claude Code, Cursor or another MCP client, and free disk space of about three times your sample.