I was going to ask the same! What killer feature does Splunk has that could justify its hefty price tag, that Elastic couldn't do?