ARCHITECTURAL COMPARISON / VERIFIED 2026-10-05

OpsKnight and
Splunk On-Call.

Compare scheduling, reporting and mobile workflows with OpsKnight’s installable PWA and self-hosted operational model.

Vendor Context

Splunk On-Call

Splunk describes on-call scheduling, escalation policies, incident context, response reports and iOS and Android apps. Confirm commercial terms directly with the vendor.

Verified 2026-10-05 · primary vendor source

Splunk On-Call product page

The OpsKnight Model

Self-hosted operating model (AGPL-3.0-only)

OpsKnight v2.1.0 is self-hosted under AGPL-3.0-only. You operate the application, database, backups and network boundary. Optional commercial support and implementation services do not gate product features.

Key Architectural Differences

Where OpsKnight is intentionally different.

The comparison focuses on deployment ownership, data custody, release inspectability and the operational trade-offs of a self-hosted model.

Self-hosted deployment

OpsKnight runs in infrastructure you operate rather than as Splunk On-Call's vendor-managed service.

Open-source release

OpsKnight v2.0.0 is AGPL-3.0-only and can be inspected directly.

Application data custody

OpsKnight incident and paging records live in the PostgreSQL deployment and network boundary you control.

Independent product stack

OpsKnight does not require Splunk Enterprise or Splunk Observability to provide on-call and incident response.

Fair & Objective Assessment

Where Splunk On-Call may be stronger.

Every software architecture requires trade-offs. Here is where Splunk On-Call may be better suited depending on your team's constraints and procurement model.

Splunk ecosystem integration

Organizations already using Splunk can keep on-call response close to their existing Splunk products and operational workflows.

Managed service operations

Splunk operates the service, avoiding self-hosted application and database maintenance.

Native mobile applications

Splunk documents iOS and Android applications; OpsKnight v2.0.0 uses an installable PWA.

Established commercial support model

Splunk sells the product as a commercial service; confirm current support and packaging terms directly with the vendor.

Feature-by-Feature Matrix

Direct Side-by-Side Breakdown

Comparing capabilities between OpsKnight v2.1.0 and Splunk On-Call. Grounded in dated vendor public documentation and v2.0.0 codebase realities.

How you run it

Deployment

OpsKnight: Compose, Swarm, Helm, Kustomize. Others: vendor product model as of Oct 2026.

Verified 2026-10-05

OpsKnight v2.1.0Self-hosted: Compose, Swarm, Helm, Kustomize (your VPC)
Splunk On-CallVendor SaaS (Splunk Observability)

Software license

OpsKnight v2.0.0: AGPL-3.0-only. Published v1.4.0 and earlier retain the licenses shipped with those artifacts, including Apache-2.0 where applicable. Grafana OnCall OSS was AGPLv3; that repo is archived.

Verified 2026-10-05

OpsKnight v2.1.0AGPL-3.0-only (v2.0.0)
Splunk On-CallProprietary

Commercial model

OpsKnight v2.0.0: AGPL-3.0-only open source with optional commercial support and implementation services. Vendor packaging changes over time; use the linked vendor pricing pages for current terms.

Verified 2026-10-05

OpsKnight v2.1.0AGPL-3.0-only open source; optional commercial support & services
Splunk On-CallCommercial Splunk On-Call service

Incident data location

OpsKnight v2.1.0Application database and backups stay in infrastructure you operate; configured external providers receive only the traffic you enable
Splunk On-CallSplunk cloud

Product standing (Oct 2026)

OpsKnight v2.1.0 is the stable release under AGPL-3.0-only. Atlassian Opsgenie and Grafana status from their public migration/archive pages.

Verified 2026-10-05

OpsKnight v2.1.0v2.1.0 stable release (AGPL-3.0-only)
Splunk On-CallActively sold

Runtime topology choice

OpsKnight v2.0.0 documents integrated and split runtime roles across Compose, Kubernetes and Swarm. SaaS competitors operate their application runtime for customers.

Verified 2026-10-05

OpsKnight v2.1.0Integrated runtime or independently scalable Web, Scheduler, General, Critical, Bulk and Status roles
Splunk On-CallVendor-operated Splunk runtime

Release / upgrade control

OpsKnight operators pin container/chart/source releases and choose upgrade timing. SaaS vendors control production rollout timing for their hosted service.

Verified 2026-10-05

OpsKnight v2.1.0Operator pins the release and schedules upgrades
Splunk On-CallVendor-managed rollout

Database & backup responsibility

OpsKnight is self-hosted around PostgreSQL and published backup/recovery guidance. SaaS vendors operate their service storage layer.

Verified 2026-10-05

OpsKnight v2.1.0Operator manages PostgreSQL, backups, restore testing and capacity
Splunk On-CallVendor operated

Network edge & TLS responsibility

OpsKnight deployment guides make DNS, HTTPS, reverse proxy / ingress and network policy operator responsibilities. SaaS vendors operate the public product endpoint and transport layer for their service.

Verified 2026-10-05

OpsKnight v2.1.0Operator owns DNS, TLS, ingress / proxy and network policy
Splunk On-CallSplunk operates service endpoint and TLS

Application secret & key custody

OpsKnight v2.0.0 hardening and recovery guidance requires operators to manage application/provider secrets and preserve required encryption keys. SaaS vendors manage service-side cryptography while customers retain tenant and integration credentials.

Verified 2026-10-05

OpsKnight v2.1.0Operator manages application keys, provider credentials and recovery copies
Splunk On-CallSplunk manages service keys; customer manages tenant/integration credentials

Runtime scaling responsibility

OpsKnight v2.0.0 publishes integrated/split runtime roles, database connection budgeting and scaling guidance. Hosted competitors operate capacity for their SaaS control plane.

Verified 2026-10-05

OpsKnight v2.1.0Operator scales web/workers/database and budgets connections
Splunk On-CallSplunk manages service-plane capacity

Incident-platform health monitoring

OpsKnight exposes Health Center, Prometheus metrics and structured logs for operator monitoring. SaaS vendors monitor their hosted control plane; customers still monitor their own integrations and vendor status.

Verified 2026-10-05

OpsKnight v2.1.0Operator monitors Health Center, metrics, logs, queues, DB and providers
Splunk On-CallSplunk monitors hosted platform; customer monitors integrations/vendor status

Incident response

Incident lifecycle

OpsKnight Prisma IncidentStatus. Others: core incident/alert products.

Verified 2026-10-05

OpsKnight v2.1.0Open, ack, snooze, suppress, resolve
Splunk On-CallTriggered, ack, snooze, reroute, resolve

On-call schedules

OpsKnight layers/overrides. Others: documented schedule products.

Verified 2026-10-05

OpsKnight v2.1.0Layers, rotations, overrides, timezones
Splunk On-CallTeams, rotations, paging policies

Escalation policies

OpsKnight v2.1.0Steps: user, schedule, or team
Splunk On-Call

Outbound paging channels

OpsKnight NotificationChannel enum + docs. Vendor contact-method docs.

Verified 2026-10-05

OpsKnight v2.1.0Email, SMS (Twilio or AWS SNS), push, Slack, WhatsApp, webhook, Twilio voice calls
Splunk On-CallPush, SMS, phone, email; WhatsApp available in paging policy

Native voice / phone calls

OpsKnight v2.0.0 adds Twilio voice paging on incident trigger (single-key DTMF ack, press 1). Others: notification/contact docs.

Verified 2026-10-05

OpsKnight v2.1.0Yes — Twilio voice paging on trigger (press 1 to ack)
Splunk On-CallYes — phone paging

Slack ChatOps war rooms

OpsKnight Slack OAuth war rooms from v1.2. Vendor Slack apps.

Verified 2026-10-05

OpsKnight v2.1.0Channel per incident; ack/assign/resolve from Slack
Splunk On-CallSlack app: cards to ack/reroute/resolve/snooze; channel mapping

Microsoft Teams ChatOps

OpsKnight v2.0.0: Native Teams war rooms and incident channels. Others: published Teams apps.

Verified 2026-10-05

OpsKnight v2.1.0Native Teams war rooms & incident channels
Splunk On-CallVictorOps Teams app: bi-directional ack/resolve/snooze

Video bridge on incident

OpsKnight: Jitsi generator + Zoom/Meet URL templates. Vendor collaboration docs.

Verified 2026-10-05

OpsKnight v2.1.0Jitsi; Zoom/Meet via URL template
Splunk On-CallWar-room automation (bring your conference tool)

Postmortems + action items

OpsKnight Postmortem + ActionItem models. Vendor PIR docs.

Verified 2026-10-05

OpsKnight v2.1.0Timeline-based postmortems and action items
Splunk On-CallPost-incident reviews in the product

Status page

OpsKnight v2.0.0: One public/private status page per install with subscribers. Other vendors: status-page product docs.

Verified 2026-10-05

OpsKnight v2.1.0v2.0.0: 1 public/private page with custom domain & subscribers
Splunk On-CallNo first-party customer status page; use a third-party page

MTTA / MTTR / SLA

OpsKnight SLA definitions/analytics. Other vendors: reporting products.

Verified 2026-10-05

OpsKnight v2.1.0MTTA/MTTR and SLA definitions in-app
Splunk On-CallMTTA/MTTR reports in product

Mobile

OpsKnight: installable PWA with push. Vendor App Store / Play apps.

Verified 2026-10-05

OpsKnight v2.1.0Installable PWA with push; no App Store listing
Splunk On-CalliOS and Android apps

Integrations & platform

Inbound monitoring webhooks

OpsKnight published docs catalog: 28 native parsers. Other vendors: integration directories.

Verified 2026-10-05

OpsKnight v2.1.028 native parsers + generic JSON
Splunk On-CallREST + third-party integrations

PagerDuty Events API v2 ingest

OpsKnight docs: POST /api/integrations/pagerduty/v2/enqueue. PagerDuty: events.pagerduty.com/v2/enqueue.

Verified 2026-10-05

OpsKnight v2.1.0Yes — ingest adapter (routing_key payload). Not a PagerDuty clone
Splunk On-CallOwn REST / integrations

Jira Cloud

OpsKnight published integration and vendor Jira integration guides.

Verified 2026-10-05

OpsKnight v2.1.0Bi-directional issue sync
Splunk On-CallJira add-ons and webhooks

REST API keys

OpsKnight v2.1.0
Splunk On-CallAPI ID + API key

SSO

OpsKnight v2.0.0: OIDC with PKCE, JIT provisioning, claim-to-role mapping, and SCIM 2.0 user provisioning. Vendor SSO docs for other products.

Verified 2026-10-05

OpsKnight v2.1.0OIDC (PKCE, JIT, claim-to-role) + SCIM 2.0 provisioning (v2.0.0)
Splunk On-CallSAML 2.0 and SCIM 2.0

RBAC + audit log

OpsKnight roles + AuditLog. Other vendors: documented admin controls.

Verified 2026-10-05

OpsKnight v2.1.04 roles (Admin, Responder, Observer, Auditor) + append-only audit log
Splunk On-CallTeam admin roles + org SSO

Operational Boundaries

OpsKnight supports 1 status page per installation. Mobile client is an installable PWA. Capability-enabled Microsoft Teams cards; no manual escalation control in Web or standard Slack incident actions.

Auditability

Verified Documentation Sources

Public links and references used to verify capabilities and boundaries.

Your incidents should belong to you.

Run OpsKnight on infrastructure you control.

v2.1.0 · AGPL-3.0-only · Self-hosted · 28 inbound integrations