This conference call transcript was computer generated and almost certianly contains errors. This transcript is provided for information purposes only.EarningsCall, LLC makes no representation about the accuracy of the aforementioned transcript, and you are cautioned not to place undue reliance on the information provided by the transcript.
spk10: Good afternoon. My name is Abby, and I will be your conference operator today. At this time, I would like to welcome everyone to the Splunk First Quarter 2024 Financial Results Conference Call. All lines have been placed on mute to prevent any background noise. After the speaker's remarks, there will be a question and answer session. If you would like to ask a question during this time, simply press star followed by the number one on your telephone keypad. If you would like to withdraw your question, again, press star 1 on your telephone keypad. Thank you. Katie White, Director of Investor Relations, you may begin your conference.
spk00: Thank you, Abby. Good afternoon, and thank you for joining today's call. With me on the call are Gary Steele, President and CEO, and Brian Roberts, CFO. After market closed today, We issued our earnings press release, which is also posted on our investor relations website, along with supplemental material. This conference call is being webcast live, and following the call, an audio replay will be available on our website. On today's call, we will be making forward-looking statements, including financial guidance and expectations, including our long-term growth and profitability, forecast for our second quarter and full year fiscal 2024, and our future expectations of revenue, total ARR, cloud mix, non-GAAP OpEx, non-GAAP operating margin, free cash flow, free cash flow margin, cloud gross margin, and equity compensation usage, as well as trends in our markets and our business, our strategies and expectations regarding our business, AI, acquisitions, products, technology, customers, and demand. These statements are subject to risks and uncertainties and are based on our assumptions as to the macroeconomic environment and reflect our best judgment based on factors currently known to us. Actual events or results may differ materially. Please refer to documents we file with the SEC, including our Form 10-K and 10-Qs, as well as the Form 8-K filed with today's press release. These documents contain risks and other factors that may cause our actual results to differ from those contained in our forward-looking statements. These forward-looking statements are being made as of today and we disclaim any obligation to update or revise these statements. If this call is reviewed after today, the information presented during this call may not contain current or accurate information. We will also discuss non-GAAP financial measures which are not prepared in accordance with generally accepted accounting principles. A reconciliation of GAAP and non-GAAP results is provided in the press release and on our website. So with that, let me turn it over to Gary.
spk03: Good afternoon, and thank you for joining us today. To begin our call, I'm pleased to share that Splunk delivered a solid start to our fiscal year. I'm proud of our team's hard work and dedication to helping our customers around the world keep their digital systems safe and resilient. As we discussed on these calls since I joined Splunk just over a year ago, we remain squarely focused on driving durable growth with increasing profitability and free cash flow. Our Q1 results demonstrate this focus in action as we exceeded guidance across our top and bottom line metrics. We grew annual recurring revenue 16% year-over-year to $3.725 billion, $25 million above the guidance provided during our March call. Total revenues were up 11% to $752 million, well above our guidance. We delivered the 16% ARR growth while remaining tightly focused on our expense control strategy, reducing non-GAAP OPEX by 1% year-over-year. At the same time, we delivered free cash flow of $486 million in Q1, up 253% year over year, and exceeding our guidance by $11 million. Given our progress on operational efficiency, we're increasing our annual free cash flow outlook. As we discussed last quarter, we believe ARR and free cash flow are the best top and bottom line indicators of the health of our business, and we're pleased with what we've accomplished during the quarter. Brian will expand on our progress here during his prepared remarks. Our first quarter results demonstrate the strength and momentum of our business. Although we continue to see delayed cloud migrations and expansions and increased deal scrutiny consistent with last quarter, we exceeded our growth target as we focused on delivering compelling value and strong ROI to our customers. We entered Q1 with 810 customers with 1 million or more in ARR, up by 120 from this time last year, and 20 since last quarter. This includes 433 customers with cloud ARR over $1 million, up 32% year-over-year. Looking at the year ahead and beyond, I remain confident that Splunk is well-positioned to continue to drive top-line growth while continuing to improve profitability and free cash flow. Since joining Splunk 13 months ago, I focused on the transformational initiatives needed for us to deepen our customer relationships and extend our market leadership. Today, the elements of our growth engine are primed, and it is even clearer to me that no other company can deliver the value we provide at enterprise scale in what we believe is a $100 billion and growing addressable market. I meet personally with four or five customers every week who consistently tell me that Smunk is more essential than ever in driving their digital resilience across cybersecurity and their entire digital footprint. CISOs, CTOs, and CIOs are under a lot of pressure to make their organization's digital systems more resilient amidst a formidable cybersecurity landscape, greater technology complexity, demands for better digital experiences, and IT budgets that continue to be scrutinized. Only Splunk has the enterprise scale, unified product portfolio, industry maturity, and vision to meet these needs, and our key growth drivers were on full display over the past quarter through many significant customer expansions and competitive wins. Our dedication to helping customers modernize and shift to cloud on their timeline was evident during the quarter, with the signing of the largest public sector cloud agreement in Splunk's history. This eight-figure deal added Splunk Cloud to an existing Splunk footprint at a major US agency that already included compliance, cybersecurity, and advanced threat hunting. As this agency moves to a hybrid environment, adding Splunk Cloud will provide it with the visibility it needs to monitor the many applications and services it has moved to the cloud. Our hybrid approach and the cost of ownership benefits of the cloud were critical to winning this particular deal. Splunk's continued investment in meeting government compliance requirements illustrates our commitment to serving our public sector customers. In fact, over the past few months, we achieved two important designations. The first is as in process as we work towards FedRAMP high authorization, one of the most rigorous certifications a cloud service provider can achieve, and a tier above our current FedRAMP moderate authorized status. The second designation is as pending for State RAMP. Achieving State RAMP authorization assures state and local governments and higher education institutions that our technology has achieved a heightened security standard. Turning to cybersecurity, our focus on enabling organizations to stay ahead of emerging cyber threats was evident in significant security deals during the quarter. In Q1, we expanded up for print within a global IT services and consulting company with an eight-figure deal for the extended use of our core platform, coupled with the addition of Splunk Enterprise Security. This deal underscores both the power of our continued partnership with this organization as well as the power of our relationships with CISOs. Following the CISOs directive for more stringent security, we displaced the legacy SIM and will address several use cases, including safeguarding personally identifiable information for the hundreds of thousands of employees worldwide. Our best-in-class offering is in perfect alignment with the customer's digital transformation efforts, And this deployment will enable us to help drive a unified approach for resilience across the customer's IT and engineering environments. On the observability front, we were pleased to see further momentum during the quarter as we continued our strategy to bring the value of our observability offerings to our existing customers. In Q1, we secured an eight-figure deal with a leading financial information services provider. This company has grown from an on-premises account to a multimillion-dollar cloud customer. Their need for greater resilience across their digital systems resulted in a multimillion-dollar observability deal during the first quarter. This organization has made several acquisitions in recent years and plans to consolidate more than 20 costly observability tools that it has amassed down to only splunk. We were the only company that was able to demonstrate technical differentiation based on our commitment to open telemetry and that our observability solutions could manage the complexity across this organization's multiple business units. We also made progress on international expansion during the quarter with notable customer wins across security and observability. In Q1, we secured a significant deal in Europe for Splunk Cloud and Splunk IT Service Intelligence, or ITSI, with a multinational semiconductor manufacturing company. The organization has gained strong momentum recently due to the high global demand, and they selected Splunk's observability solutions over competitive offerings. Our proof of concept demonstrated that we were the only vendor with the unified observability products that could enable this customer to modernize its manufacturing and service monitoring to resolve incidents faster, predict and prevent outages, and improve resilience. Turning to the Asia-Pacific region, during Q1, we secured a major cloud deal for a Japanese central government agency. Following a competitive selection process, only Splunk was capable of meeting this agency's need for flexible and efficient data management, rapid issue resolution, and streamlined operations. This Splunk cloud and enterprise security deal is the latest in a series of successful contracts with this customer, as well as the realization of the government's overall cloud-first policy. We believe that our continued focus on our key growth drivers, including cloud adoption, customer expansion, international growth, furthering our security leadership, and accelerating our observability business are staging Splunk for a solid year. Since joining Splunk, one of my top priorities has been to accelerate our product innovation. And I'm pleased that today we have a robust product roadmap, well aligned to our customers' complex needs, across multi-cloud and hybrid environments. At RSA and in many customer conversations, one of the most important topics of discussion is how AI will transform our industry. I'd like to share how we're thinking about AI and ML more broadly and where we believe there will be significant benefits for our customers and Splunk. Let me start by saying that Splunk has been empowering security and IT teams with machine learning for a long time, including with over 200,000 downloads of our machine learning toolkit, which we introduced in 2017. Earlier this year, we introduced the Splunk app for anomaly detection, which uses ML to detect seasonal patterns and finds anomalies in time series data in just a couple of clicks. In terms of AI, enterprises are just beginning to understand its promise and risks, but we view AI as a definite opportunity, one we've been working on since well before the most recent buzz. One immediate application is to help make our products easier to use without requiring deep knowledge of SPL or search processing language, allowing more of our customers to drive better outcomes faster. SPL is what enables organizations to conduct complex analytics in a highly flexible language. This application of AI is table stakes and a clear path to value. In fact, we released a preview of an SPL assistant based on large language models back in 2022, which helps users ask plain English questions to query data in Splunk, lowering the barrier to entry for more practitioners to drive outcomes with Splunk. We know that AI requires a contextually relevant, rich data set to be beneficial, and Splunk's flexible and highly scalable data architecture positions us to continue delivering the solutions that today's enterprises need. We are enthusiastic that AI can help our customers get more value out of Splunk, improving security and observability outcomes around the areas of detection, investigation, and response. We fundamentally believe that AI will transform the way the world's largest and most complex organizations keep their digital systems secure and reliable, not only by augmenting mission-critical security and observability solutions, but also by helping to shore up the global talent shortage of nearly 3.5 million workers in cybersecurity. We view AI as an accelerator to human decision-making, not a replacement. But it can make understaffed teams more efficient. Looking ahead, we believe AI will bring enormous value by automatically detecting anomalies, recommending actions, and focusing users' attention where it is most needed based on intelligent assessment of risk. AI can be a growth driver for Splunk as it enhances user experience and outcomes in both our core and premium products. As an example, we see significant opportunity to drive further automation in SOX, through AI-enhanced SOAR and other premium Splunk security products. At .conf23, we plan to share how we're advancing our AI strategy to help customers gain more value, make Splunk easier to use, and accelerate security and observability outcomes. Let me turn now to further innovation on the product front. During the quarter, we announced general availability of several products that will further augment the value customers get from Splunk. For example, our enhanced mission control brings together security analytics, automation and orchestration, and threat intelligence capabilities under one common work surface, empowering security teams to stay ahead of cyber threats. Our 2023 State of Security Report found that nearly two-thirds of SOC teams complained about switching between too many disparate security tools and management consoles. with little if any integration, inhibiting comprehensive and timely investigations and response. Mission Control solves exactly that problem. Splunk Observability Cloud also got important upgrades during the quarter. We introduced Splunk Incident Intelligence to help incident response teams increase efficiency so they can diagnose, remediate, and restore services before their customers are impacted. Next, new trace analyzer for APM helps easily identify problems from billions of traces and endless combinations of metadata. And IAM Network Explorer enables teams to easily monitor and assess their cloud network health and resolve issues faster. Our continued investment in enterprise-grade observability solutions for monitoring across complex hybrid environments further accelerates the value we deliver to customers. With comprehensive visibility and a more unified approach to incident response, only Splunk is delivering the full-stack observability solutions needed to help organizations improve digital resilience. In Q1, we introduced Splunk Edge Processor to increase our customers' visibility into and control over the volume and content of data before it leaves their network. By supporting processing at the edge, customers can control the cost of data transfer and storage, better ensure that sensitive data does not leave their defined boundaries, be confident that they are collecting all the data that they need, and ensure that the data ends up at the right destination in the right format, all with the flexibility to scale cost-effectively. We're also driving ongoing innovation with our partners to make it easier for organizations to gain value from Splunk. Last week, we announced Splunk's SAP Premium Certified Endorsed App for SAP's Industry Cloud, which is expected to be available for purchase in the SAP Store next month. SAP environments contain business-critical information, and one of the challenges has been to have the visibility needed to protect against risk and cyber threats. Through our strategic partnership with SAP, this app will bring security-relevant SAP data into the fold of Splunk Security Analytics and operations workflows, enabling security teams to monitor, detect, and rapidly respond to threats impacting their SAP environments. Looking ahead, we're continuing to invest in ways to make it easier to get data into Splunk, gain value, and drive resilience. For example, we're making good progress on integrating capabilities from our acquisition of TwinWave last year to strengthen our customers' ability to quickly analyze and remediate attacks. At .conf23 in July, we'll share more about our continued cross-portfolio innovation and how we're thinking about AI-powered premium Splunk solutions. Let me change gears from our technology to our talent. Building the leadership team Splunk needs to steer us through the next chapter of opportunity and growth has been among my top priorities, and we continue to invest in our people during the quarter. In Q1, we welcome Min Wang as Splunk's Chief Technology Officer. Min brings over 20 years of experience in applied research and product development with a focus on AI, ML, data analytics, and the enterprise cloud. Most recently, she spent more than five years at Google, including three years leading a team responsible for critical components of the company's AI-driven Google Assistant. I'm looking forward to having Min further accelerate Splunk's technical leadership and catalyze the development of more world-class technology. In April, I appointed Splunker Tony Pavlovich as our new Chief Customer Officer. Tony's three decades of industry experience and unrelenting focus on delivering for our customers are already helping ensure that organizations around the world continue to gain amazing value from our products while enjoying a best-in-class customer experience every step of the way. I'm pleased with the progress we've made building out a world-class leadership team that is a line behind our common purpose and effort to deliver exceptional results for customers and shareholders alike. Outside of our management team, Splunk welcomed Yamini Rangan, President, CEO, and Director of HubSpot to our board of directors. I'm looking forward to partnering with Yamini and our directors to further accelerate Splunk's market leadership. And I'm enthusiastic that the changes we've made to our board composition have positioned us for driving the business forward as we grow and scale over the coming years. As I wrap up, I want to reiterate my appreciation for Splunkers around the world for all the hard work and execution to deliver a strong Q1. Our team demonstrated once again that only Splunk has the deep industry partnerships, operational rigor, and unified security and observability solutions needed by the Global 2000 to help keep their digital systems resilient. Although macroeconomic conditions continue to impact our customers' buying behavior, we still delivered solid ARR growth along with a significant increase in free cash flow. I remain confident that the go-to-market, organizational, and workforce changes we've implemented over the past year and our steadfast focus on efficiency set the stage for Swunk to continue delivering the long-term durable growth and profitability I have focused on since joining the company. And with that, I'll turn it over to Brian to share more about our Q1 results and outlook. Thank you.
spk04: Thanks, Gary. So let's get to Q1. As Gary mentioned, the macro environment remained challenging. We continue to see more scrutiny on expansions than deals. Additionally, cloud migrations remain sluggish. That said, we were able to successfully navigate this economic backdrop and close a solid quarter as we exceeded or met our outlook across all guided metrics. We grew total ARR by 16% year over year, to $3.725 billion, which exceeded our most recent guidance by $25 million. Cloud ARR grew 29% year-over-year to $1.815 billion. Cloud DBNRR was 120%, which was in line with our expectations given delayed cloud expansions. Q1 total revenue was $752 million, ahead of our guidance range of between $710 and $725 million. cloud revenue increased by 30% year over year to $419 million. In terms of sequential growth, we want to remind investors that our fiscal Q1 has three fewer calendar days than Q4, and three days equates to over $10 million of cloud revenue. With regards to cloud gross margin, we continue to make progress on our expense initiatives. Cloud gross margin reached 73.6%, which is up nearly 600 basis points year over year and better than our outlook. In Q2, we expect cloud gross margin will decline towards 73% while we focus on improving service levels and customer experience. This would still represent a nearly 400 basis point improvement year over year. We continue to expect that we can achieve cloud gross margin of approximately 74% in Q4. Given our priority of increasing profitability, we remain laser focused on managing expenses we continue to identify initiatives and investments that could help us generate additional OpEx leverage. In Q1, we were able to tightly manage headcount and contingent labor expenses. Ultimately, we were able to reduce non-GAAP OpEx by 1% year-over-year, even while driving 16% ARR growth. Our success leveraging OpEx combined with our revenue beat helped us succeed our guidance on non-GAAP operating margin. In Q1, we achieved a positive 3% non-GAAP operating margin, ahead of our guidance of negative 3 to negative 5%. Let's move to free cash flow. In Q1, we generated $486 million of free cash flow, which is $11 million ahead of our guidance, as we more than tripled quarterly free cash flow year over year. Q1 is annually our largest free cash flow quarter, driven by the seasonally high bookings in Q4, which are mostly collected in Q1. For that reason, we recommend that investors evaluate free cash flow on a trailing 12-month basis, which totals $776 million at the end of Q1, more than quadruple the $179 million generated over the 12 months ending April 30, 2022. Before I move to guidance, I want to reemphasize that Splunk software license revenue related to term contract volume is recognized up front. Thus, GAAP revenue is highly subject to both bookings mix and contract duration. We believe ARR is a better indicator of future free cash flow because we bill both cloud and term software licensed customers on an annual basis. I want to be super clear. We're focused on ARR and free cash flow growth to create shareholder value. You will note that in the supplemental slides, we calculate the rule of 40 metric based on ARR growth instead of revenue growth and free cash flow margin as a percentage of ARR. Now, what may be less visible to investors are the long-term investments we're making that we expect to translate into future growth. These investments span both the R&D and go-to-market organizations. On the tech side, under new leadership, we're focused on accelerating product roadmaps and amplifying value to customers. Additionally, we're making investments in our field to deepen our international footprint, improve coverage ratios, and position Splunk to win a new global greenfield accounts. With these actions, we believe we are well positioned to accelerate ARR growth in fiscal 25, assuming we see an economic recovery and a return to a more rapid pace of cloud migrations. And with that, let's turn to guidance. We continue to experience increased scrutiny on expansions and deals, as well as delayed cloud migrations. Given we are still early in the fiscal year and based on the current market environment, we are maintaining our guidance range that we set last quarter. for fiscal 24 ARR of between $4.125 and $4.175 billion. Until we see a positive change in the macro environment, we believe it's prudent to keep our ARR guidance unchanged despite our solid Q1. In terms of revenue, in Q1, term duration trended slightly ahead of our expectations. We are updating our annual revenue guidance to the top end of our prior range of approximately $3.9 billion. As a reminder, though, duration and mix of term contract volume could significantly impact reported revenue and associated growth rates. Given the current macro trends, we continue to expect the cloud mix of software bookings will range between 55% and 65% in fiscal 24, but actual mix could vary from quarter to quarter, just as we've seen historically. In Q1, cloud represented 58% of software bookings in line with these expectations. We continue to expect that cloud will begin to represent a majority of total ARR in the second half of this year. So let's move to expenses and the impact on free cash flow. It's important to understand that in addition to looking for opportunities to leverage expenses, we will also make fiscal 24 investments that we expect can accelerate growth during the economic recovery and beyond. Our objective is to drive long-term ARR and free cash flow growth. We made solid progress in Q1 on our expense structure, and looking forward, we remain extremely focused on increasing our operating efficiency. As a result, we are updating our annual expense outlook, as we now expect to manage annual non-GAAP OPEX growth below the prior 7% outlook. We expect that we can hold non-GAAP OPEX growth to roughly between 5% and 6%, a reduction of 100 to 200 basis points from our prior outlook. It's worth noting that in the second half of the fiscal year, we will face more challenging OPEX growth comparisons as we begin to comp the cost actions we took last year. In terms of the impact on margins, we now expect fiscal 24 non-GAAP operating margin to increase to between 18 and 18.5%, up 100 to 150 basis points from our prior guidance range. Based on our successful expense management, we're also increasing our annual free cash flow forecast by $30 million. We now expect to generate free cash flow between $805 and $825 million in fiscal 24, which represents an increase of between 89 and 93% year-over-year. As a percentage of ARR, this would represent a margin of between 19.5 and 19.8%, up from 11.6% in fiscal 23. Let's move to equity. As I mentioned last quarter, we have taken and will continue to take deliberate steps to reduce our use of equity compensation and over the next several years get to a lower and sustainable dilution rate. Even though stock-based compensation expense is a lagging indicator, we are pleased with a double-digit percentage decline in Q1 year-over-year. Looking forward, we will outline our capital allocation strategy at our Investor and Analyst Day later this fiscal year. it's worth mentioning that we see potential scenarios to reduce the total share count in fiscal 25 by being disciplined with our use of equity along with future capital allocation decisions. Let's move to near-term guidance. In Q2, we expect to grow ARR by approximately $100 million to $3.825 billion, which represents 15% growth year-over-year. From a GAAP perspective, we expect total revenue of of between $880 and $895 million. In terms of costs, we plan to manage non-GAAP OpEx growth to between 2 and 2.5% year-over-year. From a margins perspective, this translates into an expectation of a non-GAAP operating margin of between 10 and 12%. In terms of free cash flow, Q2 follows our seasonally slowest bookings quarter, and as such, Similar to prior years, we expect quarterly free cash flow to dip negative in Q2, which we estimate at negative $15 million. This implies free cash flow of approximately $785 million for the 12 months ending July 31, 2023, which is nearly quadruple the $216 million of free cash flow for the 12 months ending July 31, 2022. We then expect modest positive free cash flow in Q3 with further growth in Q4. Again, for the full year, we expect free cash flow between $805 and $825 million, which is an increase of $30 million compared to our prior guidance range. In closing, despite macroeconomic headwinds, execution in Q1 was solid, and we delivered strong operating expense leverage. We're focused on driving durable long-term growth and increasing our free cash flow and free cash flow margin. And with that, let's open it up for questions.
spk10: At this time, I would like to remind everyone, in order to ask a question, press star then the number one on your telephone keypad. We'll pause for just a moment to compile the question and answer roster. Your first question comes from Raymond Linshow from Barclays. Your line is open.
spk13: Thank you and congrats for a very good start to the year. Gary, during the conference call, you mentioned quite a bit competitive wins where you kind of demonstrated that you can do cloud and on-premise as well and can do both. With the current situation, the customers kind of use the current environment to stay maybe a little bit longer in there. How much is that playing to your advantage, and how do you think about that as we're coming out there? Do you think there's a fundamental change in thinking in terms like how much is in cloud and how much is not cloud and how much is this helping you, or do you think it's temporary and how much is helping you? Thank you, and congrats again.
spk03: Yeah, thanks so much. I believe that our hybrid approach in supporting customers as they want to evolve to the cloud on their timeframe has been very important and strategic to us. What I see when I speak to customers is I see more hesitation today and more thoughtfulness about what's going into the cloud and what's staying in their own data centers. And so I think from a strategic point of view, I think it's been advantageous that we have the ability to deliver great value across hybrid environments, and I don't see that changing anytime soon. I think that will continue to be a strategic advantage for the company.
spk06: Okay, perfect. Thank you. Well done.
spk10: Your next question comes from the line of Brent Seale from Jefferies. Your line is open.
spk14: Thanks, Gary. For you to raise guide for the year, can you just give us a sense of where the strength you're seeing, the confidence to do that, what areas of the portfolio seem to be shining? And for Brian, really good expense discipline, good to see. Can you just give us a sense of kind of what you're –
spk03: Modeling expecting you know in terms of the overall environment to continue the the impressive margin improvement that you're seeing going forward Yeah, so a couple things so one is We saw strength in cyber and as we indicated in our prepared remarks We see customers taking out legacy Sims as an example that has been fueling growth we see this opportunity as we were talking previously of where customers know the cloud will play a role and they want to make that step, but they're still leaving things on-prem to deliver a hybrid architecture. That's been strategic and advantageous. And then I think thematically we're seeing consolidation opportunities. And I would just reference back to the example we gave in the prepared remarks where a customer chose our observability solution to consolidate down over 20 observability products to Splunk. That's been a play that we think is very repeatable and has been working well for us.
spk04: And I would just add that in terms of the bottom line, look, we are committed to increasing profitability and free cash flow. And so we see multiple scenarios to achieve our new increased free cash flow outlook across a range of different operating environments. And to be frank, this is just really a continuation of the work that we've already begun. And we will always be seeking opportunities to prove how we operate as we grow. And as part of this, we'll continue to seek more impactful and efficient ways of just operating, really, which includes changing sort of how we approach expenses, which is having a zero-based budgeting mindset, really driving better processes, looking for opportunities to flatten the organization, which will save money but also just increase velocity, and then finally growing our emerging talent centers.
spk06: Thank you.
spk05: Your next question comes from the line of Brad Seals from Bank of America.
spk10: Your line is open.
spk11: Oh, wonderful. Thanks so much for taking my question. I wanted to ask the question on operating efficiency here in another way. Obviously, you're seeing real progress here with some efficiency gains, OPEX down 1%, ARR growth of 16, better than your 15 guide. My question is, we know you're still investing in the business. You've talked about some of those investments, but yet you're generating this kind of leverage. So How are you able to kind of balance the investments that are going into the business while still delivering on this type of top line?
spk04: Sure. Look, we're very pleased with the progress we made leveraging expenses in Q1. And we just, based on our progress, and we have a nice slide in the investor supplement where you can look at the focus areas of what we did in Q1. But we expect the success in Q1 will flow through now to the entire year. So to your point, we continue to make investments. to leverage our costs, but it's just offsetting a larger portion of the investments now. And so when you look at the full year, from a non-GAAP OpEx growth perspective, we think it can be now in the range of 5% to 6%, which is down from 7%, which is driving the increase in margins now up to, on a non-GAAP operating margin basis, 18% to 18.5%. So that's up 100% to 150 basis points year over year. Wonderful. Thanks so much. Sure.
spk10: Your next question is from the line of Matt Hedberg from RBC Capital Market. Your line is open.
spk02: Great, guys. Thanks for taking my question. And all for my congrats on the consistency. Really good to see. Brian, you talked about accelerating growth in maybe fiscal 25. You know, obviously, there's probably a macro element to that. But sort of curious, like when you think about that acceleration in growth, do you think that can happen – And sort of an unchanged macro, in other words, like company-specific drivers give you confidence in that sort of a trajectory?
spk04: Yeah, I mean, I think it's important to look at the investments we're making. If you look at last year on a gap basis, we invested $1 billion in R&D. And so some of that is coming to fruition. So we really were excited about the product portfolio and really trying to amplify the value for our customers. Yes, an economic recovery will help, obviously, it helps all businesses. All boats will rise in that tide. But we feel really good about the product portfolio. And then as we discussed on the prepared remarks, we're making a number of investments in our go-to-market that I think are really important to call out. So we are deepening our international footprint. We're improving coverage ratios. And we're trying to position Splunk now in new global greenfield accounts. And so all these things will contribute a little bit this year, but it's more about the multi-year growth opportunity.
spk06: Really good to hear. Thanks, guys. Best of luck. Sure.
spk10: Your next question comes from the line of Andrew Nowitzki from Wells Fargo. Your line is open.
spk15: Great. Thank you, and congrats on a great quarter. I wanted to ask a follow-up question on the public sector cloud deal that you mentioned. So I was wondering, how competitive was that deal? Is there an expansion opportunity with that specific agency? And then do you think there's a way to leverage that opportunity very strategic win with some leverage with other agencies down the road?
spk03: Absolutely. I think that this was, they looked at all the alternatives out in the market when they made the decision, so it was a competitive deal. I think that this is really the starting point, though. We really planted a flag, and there's plenty of opportunities for expansion. And we fundamentally believe that broadly public sector represents a very interesting opportunity for us. And it's why we've made the commitment to go to FedRAMP High, which opens the doors to different parts of the public sector. And I think it gives us access to more customer opportunities. So we feel very good about that particular win as being a key marquee account that we can then more broadly leverage. And the investments that we continue to make we think are also critical to laying the foundation to drive long-term growth in public sector.
spk06: That's great. Thanks, Gary. Keep up the good work.
spk03: You bet. Thank you.
spk10: Your next question comes from the line of Jake Roberge from William Blair. Your line is open.
spk01: Hey, thanks for taking my questions, and I'll echo the congrats and the great results. Just on the generative AI front, I'm curious how you're thinking internally about the magnitude of data and workloads that generative AI could create for Splunk to really secure and monitor over the next few years. And then just as a follow-up there, how do you see AI playing into your migration journey with just maybe more customer willingness to move to the cloud to really get that type of technology?
spk03: Yeah, great questions. One of the things that we're very excited about is the advances in AI that are open to us, given the rich data sets that we hold with customers. And one of the things that I'm particularly excited about is over the past couple years, we've just seen some very good wins where customers have been able to leverage AI to get interesting outcomes, like in the area of fraud. And so broadly speaking, we think that we're at the very beginning of this journey, which will open the doors to many more use cases given the kind of data, the richness of data that Splunk holds, and the opportunity there. So we feel like we're just at the very beginning of this, and this wave of generative AI just opens a lot of doors and accelerates a lot of activity for us.
spk06: Thanks. Congrats again on the great results. Thank you so much.
spk10: Your next question comes from the line of Mike Seacost from Needham & Company. Your line is open.
spk12: Hi, guys. This is Matt Colitre on from Mike Seacoast from Needham & Company. Thanks for taking the question. I was wondering how the first quarter tracked versus your internal expectations and if the top line out performance is tied to a specific customer segment, geography, or vertical.
spk04: Yeah, I would say in terms of Q1, you know, I think across the verticals we were quite pleased. I would say probably the strongest vertical would be U.S. public sector. We had really strong booking strength there. I think in terms of, you know, and actually on Q1 as well, I'd just add, you know, renewals performed very well, which we were very pleased about. We were definitely ahead of our renewal plan.
spk06: Awesome. Appreciate the call.
spk10: Your next question comes from the line of John DeFucci from Guggenheim. Your line is open.
spk16: Yes, thank you for taking my question. Actually, just a follow-up to the question I was just asked, and Brian, we know, we realize that ARR is the most important top-line metric, but we have to manage the revenue too, right? And being able to go from one to the other, or at least model it, is important. So, License was strong, and you said renewals were strong. But we thought it could even be stronger. So I guess I'm just trying to understand, for the on-prem subscription, that renewal base, what that looks like for the rest of the year. And also, how would you expect contract duration, which you talked about in your prepared remarks, how that might trend?
spk04: Sure. So what we've said in terms of the renewal opportunity this year, it's going to grow roughly 20% to approximately $2 billion. In terms of just the duration, let me talk about duration. I'll come back just again in terms of revenue. Duration, as you know, it's impossible to perfectly forecast. We are expecting duration to be within a similar range to what we've seen in the last couple of quarters. But based on what we've seen, we've, again, raised guidance revenue to the top end of our prior range so now 3.9 billion dollars as it relates to q1 again we came in well above the revenue outlook so we were quite pleased with that trying you know we have a lot of customers that as they approach renewals they're still trying to decide if they're going to migrate to the cloud or not and so that's something that we're going to continue to watch as But again, we do expect that with an economic recovery, we're going to see an acceleration of cloud migrations. And I think that's something right now. I think investors should realize as any company approaches this opportunity, it's just a matter of when, not if, for a lot of these workloads. And it's in this environment, a lot of CFOs just do not want to take on additional costs this year. And there's typically a cost to move to migrate to the cloud. And that's why we expect with a economic recovery, we're going to see an acceleration. a re-acceleration.
spk16: Sorry, that $2 billion, is that total renewals? Because I'm just curious about the on-prem subscription, because that's the thing that can screw us up with the revenue recognition, right, the upfront portion there.
spk04: Yeah, the $2 billion is overall. And the other thing in terms of REC, given 606, there is an increasing portion of cloud in that renewal mix. And so relative to that, that's what's causing some of the drag on, you know, quoted, you know, accounting revenue versus true ARR. Got it.
spk16: Okay. Thank you very much, Brian.
spk04: Sure.
spk10: Your next question comes from the line of Michael Turretts from KeyBank. Your line is open.
spk08: Hey, guys. Great job on efficiency. Even margins, the guy is like 18% on revenue for this year. I like that. thought process of free cash flow relative to ARR as a percentage, which is getting towards 20%. I was wondering if you could just comment on how you, or at least philosophically at this point, think about those margins longer term and about the relationship between the two of them.
spk04: Yeah, so I think it's important to stay tuned for Investor Day because we will provide the long-term expectations around growth as well as our entire margin structure of free cash flow margins. But I think it is fair to assume, you know, we don't see anything structurally in our business that prevents us from increasing our free cash flow. So, again, we expect free cash flow margin to increase next year as well.
spk08: If I could just sneak in one technical question. On that Fed, what was the impact on REVs, billings, bookings, et cetera, this ARR this quarter from that?
spk06: I'm sorry, is the question around Fed ramp high?
spk08: No, I think it was a large Fed deal that you talked about.
spk04: We're not getting into specifics on individual transactions. Okay.
spk06: Thanks very much. Sure.
spk10: Your next question comes from the line of Keith Backman from BMO. Your line is open.
spk07: Hi. Many thanks. I wanted to ask about the competitive landscape, and particularly with an orientation around your traditional business, not the observability business. And the context of the question is you did call out some new logo wins. And I think investors are candidly sort of surprised to hear about new logos with Splunk. And I was wondering if you could just articulate as you look out over the growth algorithm you had, I mean, how much is actually driven by new logos And which would presumably be largely competitive wins since everything's competitive. But if you could just talk a little bit about the competitive landscape and how important our new logos. And then secondarily, you also have, you've highlighted the SAP partnership, which is a bit different in terms of taking a deep dive with one particular company. software provider, what drew you to that conclusion? Is there other relationships that you think will come from, you know, in competition with SAP? In other words, will you do more specific partnerships with other large software vendors? If you could just talk a little bit about the strategy there and what the implications are. That's it for me. Many thanks.
spk03: Great. I'll let Brian start by talking just briefly about how much new logos represent in our in our ARR?
spk04: Yeah, so typically when you look at net new ARR, it's roughly 20%. We see that consistently. We tend to measure that on a trailing 12-month basis because you can see a volatility. But again, that's something that has held now for multiple years.
spk03: And then competitively, in accounts where we're going in and looking broadly at competition, we've had very good success taking out incumbent legacy SIM solutions, so that's been a sales motion that's been quite productive for us. In those circumstances, the customer will look at a variety of solutions, and I think we continue to demonstrate that we can meet the complex scale requirements that organizations have, that we offer more flexibility than our competitors out in the market, and just the broad set of security capabilities, including orchestration and automation, thread intel, broad security analytics, all of these things integrated into a single product is a pretty unique offering that doesn't exist in the market. So our win rate is quite high, and we do quite well in those new logo environments. And then going to your SAP portion, shifting gears, going to the SAP portion, one of the things that's super cool here is If you talk to CISOs today, they struggle with visibility into what's happening with SAP. And so what we've done basically with this app is it increases the level of visibility that security teams have relative to what's happening within SAP, and they can bring that into the broader Splunk environment and drive broader correlations across their entire security footprint. And so it provides visibility that, frankly, they just haven't had in the past. You know, this is, we're super excited about this. We're happy to be engaged directly with SAP. They're an important partner to us. And could we do this with other vendors? That's possible. But I think if you just look at the history of Splunk, which you obviously know well, we've always been a company that wanted these TAs or apps that allowed for integration of data into the broader Splunk environment. I think in this particular case, it made a ton of sense to do a very strategic relationship and drive a combined go-to-market. So I feel really good about this and excited about the potential here.
spk07: All right. Many thanks.
spk03: You bet.
spk10: Your last question comes from the line of Gray Powell from BTIG. Your line is open.
spk09: Hi. This is Janet Dine on for Gray Powell. Thank you for taking the question. My question is on the observability product set. I was wondering what are some of the things you can do to improve the go-to-market motion with the observability product set over the next year, and how quickly could that have an impact on your ARR growth?
spk03: That's a great question. I think our go-to-market motion has been one where we're taking the observability cloud and really working with our existing customers to drive those opportunities. And I think, frankly, we've shown up in the last couple earnings calls with some really interesting strategic wins, which we saw again this quarter. And so that go-to-market motion is working well. And while we're relatively early there, we're seeing very big, very strategic wins coming from that go-to-market motion.
spk06: So we feel good about it.
spk10: This concludes our question and answer session. Mr. Gary Steele, I turn the call back over to you.
spk03: Great. I want to thank you for joining us on the call today. We had a solid start to our year and feel great about the opportunity going forward. We look forward to seeing many of you at .conf23 in Las Vegas in July. Take care. Thank you.
spk10: This concludes today's conference call. You may now disconnect.
Disclaimer