Note: This article is based on hedge fund 13F filing data and investor letters current as of Q1 2019. It is intended as a historical reference. Splunk was subsequently acquired by Cisco Systems in 2024. Do not use this data for current investment decisions.
Source: finance.yahoo.com
Why Hedge Fund Sentiment Matters for Tech Stocks Like Splunk
Tracking what institutional investors — particularly hedge funds — do with their capital is one way analysts gauge conviction in a stock. Hedge fund 13F filings, published quarterly, reveal long equity positions held by funds managing over $100 million in assets. While these filings are backward-looking by up to 45 days, they can highlight meaningful accumulation or distribution patterns in a given stock.
Splunk Inc (NASDAQ: SPLK), the machine data analytics and SIEM platform provider, drew particular attention from institutional investors heading into mid-2019. The company had established itself as a leader in log management, security information and event management (SIEM), and operational intelligence — making it relevant not just to equity investors but to the DevOps and security engineering communities who use its products daily.
The broader market backdrop at the time was shaped by a debate between value and growth investing. As Vilas Fund noted in its Q1 2019 investor letter:
“Since 2006, value stocks (IVE vs IVW) have underperformed 11 of the 13 calendar years and when they beat growth, it wasn’t by much. Cumulatively, through this week, it has been a 122% differential (up 52% for value vs up 174% for growth). This appears to be the longest and most severe drought for value investors since data collection began… We believe the value part of the global equity market is the only place to earn solid risk adjusted returns and we believe those returns will be higher than normal.”
— Vilas Fund, Q1 2019 Investor Letter
Splunk, as a high-growth technology company, sat firmly in the growth camp — making hedge fund positioning in SPLK a useful signal for how sophisticated money managers viewed the software sector’s continued expansion.
Hedge Fund Activity in Splunk Inc (NASDAQ: SPLK) — Q1 2019
According to data tracked by Insider Monkey as of the end of Q1 2019, a total of 29 hedge funds held long positions in Splunk Inc. This represented a 16% decline from the prior quarter, and was also down from the 36 hedge funds that held bullish positions in SPLK a full year earlier.
Despite the overall drop in the number of funds holding the stock, certain managers were actively building or initiating positions — a signal that conviction among remaining holders may have increased even as smaller or more opportunistic funds exited.
Largest Holders at End of Q1 2019
- Two Sigma Advisors held the largest stake, valued at approximately $81.8 million.
- Citadel Investment Group held the second-largest position, worth approximately $48 million.
- Arrowstreet Capital, D E Shaw, and Polar Capital were also noted as significant holders with meaningful portfolio allocations to SPLK.
Notable New Positions Initiated in Q1 2019
Several prominent fund managers initiated brand-new positions in Splunk during the quarter, which can be a stronger buy signal than existing holders simply maintaining their stakes:
- Duquesne Capital (managed by Stanley Druckenmiller) initiated a position worth approximately $14.4 million.
- Moore Global Investments (managed by Louis Bacon) initiated a position worth approximately $11.8 million.
- ZWEIG DIMENNA PARTNERS (Joe DiMenna), Partner Fund Management (Christopher James), and Maplelane Capital (Leon Shaulov) also opened new positions in SPLK during the quarter.
The entry of high-profile managers like Stanley Druckenmiller — widely regarded as one of the most successful macro investors of his generation — into a position is typically watched closely by market observers as an indication of directional conviction.
How Splunk Compared to Peers by Market Cap
For context, analysts at the time also tracked hedge fund sentiment in stocks with comparable market capitalizations to Splunk, including:
- Freeport-McMoRan Inc. (NYSE: FCX) — copper and gold mining
- Cerner Corporation (NASDAQ: CERN) — healthcare IT
- International Paper Company (NYSE: IP) — paper and packaging
- Liberty Global plc (NASDAQ: LBTYA) — international cable and broadband
Comparing institutional sentiment across same-cap peers helps investors evaluate whether interest in a specific stock is sector-driven or reflects company-specific conviction.
What This Means for the DevOps and Security Community
For engineers and architects who evaluate Splunk as a platform rather than an investment, institutional sentiment data still carries indirect relevance. A company with sustained and growing hedge fund backing typically has the financial runway to continue R&D investment, maintain enterprise sales teams, and develop integrations with adjacent platforms — all of which affect the product roadmap.
As of 2019, Splunk’s core product lines included:
- Splunk Enterprise — on-premises machine data indexing and search
- Splunk Cloud — SaaS-delivered version of the platform
- Splunk Enterprise Security (ES) — SIEM solution built on the Splunk platform
- Splunk IT Service Intelligence (ITSI) — AIOps and service monitoring
Strong institutional confidence at the time correlated with Splunk’s ongoing transition from a perpetual license model to a cloud subscription model — a shift that compressed near-term revenue recognition but signaled long-term recurring revenue growth, a pattern institutional investors were familiar with from other SaaS transitions.
Historical Note
This analysis reflects publicly available data from Q1 2019. Splunk’s institutional ownership profile changed substantially in the years that followed. In September 2023, Cisco Systems announced its acquisition of Splunk for approximately $28 billion, a deal that closed in March 2024. Splunk (SPLK) no longer trades as an independent public company.
For current information on Splunk’s product direction and enterprise positioning, refer to Cisco’s official Splunk documentation and press releases.