My name is Mike Cikos. I'm the Lead Analyst here covering cybersecurity and infrastructure software. Pleased to say we have with us Elastic. I'm joined up here on the stage for a fireside chat with GVP of Finance, Eric Prengel. We'll go through some questions we have planned on our side, but please, we'd love this to be interactive. If you guys have any questions, lob them in. We'll get them while we have Eric here. With that out of the way, Eric, thank you for joining us again. Just in the interest of intros, you want to walk through your background?
Yeah, and thanks for having me. It's always a pleasure. I'm glad to be here in person. I think last year I did this and I had technical difficulties in the middle of the thing. We can't have technical difficulties now. We're literally in person, so we won't have that issue. That was terrible, especially as a tech company. But my background, so I've been at Elastic for three years now. I'm the Global Vice President of Finance.
I cover FP&A, investor relations, procurement, and a number of other functions. I basically have all of the finance function. Before the three years at Elastic, I was an investment banker for 15 years, most recently at JP Morgan. And at JP Morgan is where I got to know Elastic. I was the banker who took them public, and then I also did the debt deal for Elastic. So I've known them for a while, seen the evolution, and I joined because I thought they were a phenomenal company with a phenomenal team.
Super high level, just for anyone who's new to the name, I know you guys have been out in the public markets for some time, but potentially revisiting the story, can you just do a quick overview of Elastic? What is the value prop they're providing to their customers, competitive differentiation?
Yeah, I'd love to. So Elastic is a platform that was built to handle unstructured data, and it handles unstructured data incredibly well. We can ingest unstructured data, we can manage it, we can search it, and that's really what Elastic does. And that can be used to solve a ton of different problems. It can be built for ride - hailing, where you can apply it to geographies. It can be built for website search. But as the company evolved, we also found out that there were some specific use cases that were very monetizable and repeatable that search could be used to solve. And that was Observability and Security. In Observability, ingesting logs and then being able to search through those unstructured logs and parse them out was something that Elastic's platform did phenomenally well.
And in Security, SIEM was a capability that was also involved dealing with log data and finding out incidents and being able to identify them was something that Elastic did tremendously well. Since that time, Observability has branched out, and we now have metrics in APM, and in Security, we've added XDR. In addition to that, as the world has evolved, Elastic has been a Search company at its core, and a new problem with search has come around with vectors. And so when I joined three years ago, Elastic was already deep into vector search and vector databases. And I remember when I joined and at the leadership level, we were talking about the work we were doing on our vector database. I had no idea what a vector database was at that time.
This is before ChatGPT really became popular, and it was something that Elastic had been working on for years. So when this whole GenAI revolution occurred, it wasn't that Elastic went and chased that. Elastic was actually very well positioned. It had a lot of functionality in these GenAI capabilities with vector search, with vector databases, and really was able to build on them and augment them and really be differentiated in terms of what we can do in GenAI, where we have re-ranking models, we have embedding models, we've got a ton of different capabilities, we've got semantic search and hybrid search that really enable us to provide relevance and context when you think about GenAI.
And if you think about the evolution of GenAI, where early days it was just generating ideas, and now it's becoming moving more and more towards agentic, the importance of getting things right and the importance of relevancy is only increasing, where with an agentic model, you're not just getting some words on a page, but you're actually taking actions, and you need to make sure that you're taking the correct actions. And that's where Elastic really shines, providing that relevancy and that context in these GenAI workplaces. So that's in a nutshell how I think about Elastic.
On the Search specifically, let's go there first. We're going to digest this, right? But on Search, you guys are looked at as being a leader within enterprise search as an example. I remember when we had this conversation last year, and it struck me. I was having a conversation with a colleague at the time where everyone was trying to figure out database, vector, what does vector search mean? And I was actually talking with a colleague who was working at Pinecone at the time when they were coming out, and they were like, "Listen, the only one that I would actually give credit to is actually Elastic, because I think you guys had built out those vector search capabilities as early as like 2019, 2020, like way before ChatGPT hit." So the credit where credit's due as far as being at the fore on that.
I think one thing management has been sounding the alarm on is the fact that, hey, with GenAI, the Search business has seen a resurgence, in part because of GenAI, but also there's incremental budget going into that Search avenue. So can you help us understand from a boots-on-the-ground perspective, what are you guys hearing in the field? How has customer adoption been tracking towards those newer GenAI capabilities and the pull-through of the core Search? It's always been there now.
Yeah, so as we think about what's driving the acceleration in Search, it's really predominantly this GenAI motion where more customers are adopting GenAI, and that's driven Search to be the fastest growing part of our business for multiple quarters now, which is really exciting. It did not used to be the fastest growing part of our business. This is really a shift in the dynamics, and it's all attributable to GenAI, and so we've seen customers who've adopted us for a number of use cases, and they've been a broad range of customers. You've seen smaller AI-native companies who are building their applications on us. You've seen ISVs who are using us to augment their applications and provide GenAI capabilities to their customers.
And then you've seen some very large organizations outside of technology, financial institutions, healthcare institutions, what have you, who are using us to build applications that are either internal or external-facing within their organizations. Now, all that being said, I do want to remind everyone that we're seeing a lot of positivity in GenAI. It's still earlier days. A lot of the dollars that are being spent around GenAI are associated more with model training and infrastructure that's needed for model training, and the broad deployment of applications that are either internal or external-facing is still a little bit earlier. And so that's going to. We've seen some positivity and some revenue from GenAI, but it's going to continue as you see more applications be adopted more broadly.
And that was going to feed into the next one, right? It feels like we've been standing in this experimentation, exploration. It was only like last year we began talking about agentic AI, and everyone was like, "Really? Is that?" And now it seems like it's almost certainly we're going to be going into that arena. From where you sit today, does it feel like this year is going to have more of these workloads or applications moving into production environments, or is it still too early to call that just yet?
I think it's easy to answer that it'll be more, because it certainly won't be less.
Coming off the low base.
So more is a clear answer. I think the degree to which we'll see the adoption is still TBD. I think there will be an uplift and an increase, but I don't know exactly what that's going to look like. We're seeing a lot of positivity. We're seeing a lot of engagement. So I think that across the board, we're going in the right direction, and we'll see how it plays out in the year.
When you are seeing customers explore your GenAI capabilities, is that serving as an avenue now? Walk us through what you guys are seeing from a new logo standpoint as far as customer engagement with the platform, or is it predominantly, I know that you guys have a massive customer base, just going back to the existing customers for cross-sell opportunity?
It's both, and it benefits us in so many compelling ways. So as GenAI has been more important, it's really up-leveled with the conversations that we're having with our customers, where there's board-level interest, there's C-suite-level interest around GenAI. And so the level of engagement over the last year or two years that we've seen with our customers because we're at the forefront of GenAI has been really dynamic, and it's changed the kind of conversations that we're having. And so customers are investing with us because of what we're doing with GenAI.
Customers are investing with us because of our GenAI roadmap, and they might not be using GenAI today, but they want to be partnering with a company who's got a clear roadmap and who already is doing things in GenAI because they see an opportunity to grow with us and to really partner with us over multiple years. And it's also just getting us in front of customers in a way that we weren't able to in the past because what's critical to us and the things that we're doing are very compelling to them. And so it's really a manifold way in which it's benefiting us, this whole GenAI capabilities that we have and the ability to engage with customers around it.
All right. And again, we're going to unpack the different primary use cases here, but if we jump over to Security for a standpoint, you had noted SIEM and XDR. I think both of those categories within broader cybersecurity are extremely active right now, topical just given recent acquisitions, potential for shared displacement. Can you help us think about when you are winning a new logo from a Security standpoint, it feels like it's going to be predominantly for that SIEM use case? And correct me if I'm wrong on that. If that is the case, how much of this is brownfield dual source?
You're not wrong, but we talked in Q2, we talked about a $20 million plus deal that we had, and it was a displacement of a competitor, and it was a net new customer for us. It was a large-scale global chemical manufacturer, and they chose us for not just SIEM, but also XDR, and they had us compete against, I think it was eight companies that were in the RFP, the best of the best, and we competed and we won on the merits of our solution, both for SIEM and XDR, so SIEM is obviously where historically we've been really strong, but I think that our XDR capabilities are ready to go head-to-head with anyone's as well, and so this was a phenomenal win, and I think probably one of the better proof points around our XDR capabilities.
With the traction you are seeing for SIEM and XDR today, is it fair to assume that for the most part, organizations are dual tracking you? The market's pretty established. I feel like in some ways, someone already has that SIEM vendor they're already tapping into. And so they'll dual track it and then potentially wean off of an existing solution, bring you more over time. Is that what the evidence?
There's a migration process that has to happen, and we're doing things. We understand that we've got a big displacement opportunity, and we're doing things in our go-to-market motion where we're proactively setting our reps up to succeed in displacement scenarios where we'll be able to make concessions to help people get onboarded with us if they're going to make multi-year commitments so that they don't have to deal with the dual costs for too long.
How do I think about, again, there are even, I feel like some of the large platform cyber guys are getting more aggressive in how they're talking about SIEM, and everyone sees this opportunity because we're how many years out of the chute now with Cisco acquiring Splunk. There's some other tools that are just long in the tooth, right? Are you actually seeing more competitive replacements today versus six months ago? How has that pipeline continued to build?
Yeah, I think that the competitive displacements don't just come up out of nowhere. You have to build the relationship. You have to engage with them. You have to work towards getting them to understand the value of your solution, what you bring to the table. And then as they come up for renewal, that's when you have an opportunity to win those deals. But these are large deals. I mean, some of them are eight-figure deals. And in order to win those away, you have to build a long-term relationship.
You have to have a real path to migrate over onto your solution. And so it's not just that they're showing up today versus six months ago. They were here six months ago. They might be starting to close today, and there's a whole lot more that are in our pipeline that are going to take multiple quarters and even in many cases, multiple years to close. But they're definitely something that we've been putting a lot of effort into.
Last but not least is the Observability element. So you guys, I think, predominantly known for your capabilities around logging. To your point earlier, you've built out metrics and traces, right? We've had this for some time. A lot of attention with the announcement that Palo Alto is going to be entering the market through its Chronosphere acquisition. What is Elastic's view on that consolidation? How is it you guys are thinking through either increased competition or just broader market awareness of what's playing out on that front?
Yeah, I think that as you think about the consolidation between Security and Observability, that's hugely positive for us. It's very validating. I think for five plus years, Elastic has been talking about a convergence of those two and the benefit of putting them together. And the fact that the market is starting to follow suit plays really well to our strengths. Where I think that we're nicely differentiated is we have a common data platform across Security and Observability. So people can leverage the benefits of having both of those in one data platform to make them more efficient. A lot of people who are going through this consolidation motion through acquisitions to be able to bring those two solutions together, they have two different data platforms that they're sitting next to each other.
So they can go to market together, but they can't necessarily have the data in one place or benefit from the efficiencies of not needing to have duplicative databases. And that's something that we can do. And so as customers get more accustomed to a buying motion that involves both SIEM and Observability or Security and Observability together, the fact that we've brought them together on one platform makes us more compelling when they're thinking about that as a unified purchase.
Excellent. And we'll shift for a second over to the go-to-market. If I rewind the clock about a year ago, there were some changes where I think a little bit more disruptive than what had been initially anticipated. Those are increasingly, you could say, they just are in the rearview mirror at this point. But can you just remind us, what did the management team enact as far as the segmentation of the go-to-market effort? And we'll just start there.
Yeah, at the start of fiscal 2025, we made a change where we had an external consultant in, and we did a lot of work thinking through what we could be doing to improve our go-to-market motion. And one of the things that was clear to us is that we weren't segmenting our customers such that we were paying enough attention to our high propensity to buy customers. And so we realized that reps might be covering 2x the number of accounts they should in conjunction with covering some really attractive accounts. And so they couldn't build that customer intimacy and go really deep with those customers the way that we should. And so what we did is we reduced a lot of our reps.
We took away a lot of their accounts so that they could really focus on the core accounts that were going to drive the most value for us. And as part of that resegmentation of our go-to-market, where we moved around a lot of accounts, that created a natural transition where in Q1 of 2025, a lot of our reps were getting to know their customers instead of moving the sales opportunities through the pipeline. And so Q1 of 2025 was a much slower quarter than we would have hoped for, and frankly, than we anticipated because of all that time that reps were spending getting reacquainted with customers. Once we got into Q2 of 2025, and we were worried after that, we wanted to make sure that that was a one-time thing and not something that was endemic to our sales execution.
In Q2 of 2025, we had a very strong quarter. A lot of the deals that, or a lot of the resegmentation started to pay off where now we were moving deals through the pipeline. Things were much, we're showing a lot more positivity, and we've seen that continue in the five quarters since where with this new segmentation, we're paying much more attention up market to these bigger customers who have a high propensity to buy, and we've just got a lot more intensity around the coverage effort for those customers, and that's driving success in the larger accounts for us, so it's played out really well, but there was certainly a very stressful Q1 2025 as part of that.
I know it's, well, I don't want to speak on Elastic's behalf, but at least across our broader coverage, there's been this gradual melt-up of go-to-market organizations, right? Go to the higher-spend customers where the budget is more durable. You could be stickier. You can identify more value. It's easier to sell into an existing account. But it is also an iterative process. If the first go round, hey, Mike Cikos gets cut from 20 to 15 accounts, then maybe the next year it's 15 to 8 because we know we've demonstrated value and we can drive that. Where are we in that iterative cycle with Elastic as far as the evolution, account assignments at the strategic or enterprise levels at this point?
I got good news and I got bad news for you, Mike. So the good news is we're a lot further than we could be. The bad news is probably because we moved too fast in Q1 of 2025, and that's probably why we saw the disruption, is because we basically took it. We saw where we were. We saw where we wanted to be, and we went straight to where we wanted to be, and so we skipped all the interim steps of moving over. So Q1 of 2025 was pretty stressful. There were issues in that quarter, but that was six quarters ago, and now we're in the place that we want to be.
And so as we think about our go-to-market motion today, it's a machine that's running really nicely, and we think about it as being highly investable and a place that we can deploy more capital and see more returns out of. We talked about it at the Analyst Day in October, but we've seen a nice increase in productivity over the last year or so. And because of that productivity increase, because of the things that we're seeing both in our pipeline and in deals that are closing with some of these bigger accounts, we're really putting more dollars to work in terms of sales capacity.
That's great. Great to hear on the capacity. One of the things that you had mentioned as well is the productivity gains. And so I'm trying to get a sense of that from the outside. I'll recycle back to the Analyst Day since we were just talking about it. Company committed to +15% on just the core, +20% over some timeframe if I start thinking about what the GenAI tailwind to the business model could be. Within that construct, again, you guys are layering in capacity. It's probably easier to see, all right, X times Y, and you have your outcome based on capacity. Does that top-line growth assumption embed an additional assumption around sustained productivity enhancements?
It's a great question. As you think about what's driving our growth, is it productivity growth or is it capacity growth? Capacity growth is very tangible. I can tell you, hey, we're going to go from having 10 reps to having 15 reps, hire those 15, 5 reps and be really focused on it and do it, but to say each of those reps is going to do X more dollars is a little harder and a little less tangible, and so as you think about what we're underwriting to, it's going to be on the tangible things that we can control, and that's going to be more around the capacity growth versus the productivity growth.
Excellent, and in addition to the segmentation we were talking about, you guys also have an initiative relatively new in the grand scheme of things, but call it in the last year or so you started building out a specific sleeve within the go-to-market that actively pursues new logos, called the hunters, if you will.
The greenfield, yeah.
So where are we in establishing that motion? Are we continuing to layer more capacity in there, or should I think about the capacity really being towards those AEs going after the strategic sales?
I think it's in both places. I don't think it's exclusively in one or the other. The greenfield territories, which is a greenfield territory, is effectively a territory where we have no revenue today, and so there are reps who are getting territories that have no revenue. They're going to have a smaller quota because they obviously need to do all new business instead of expansion business, but that's a place that we are investing. We've seen positivity out of it, and we're going to continue to put more dollars behind it, but we're also seeing more positivity in the core business, which is this new and expansion, and so it's both that we're really investing in.
Excellent. And then the last one on the go-to-market for the time being, but you had noted that $20 million deal, new customer, chemical manufacturer. Can you feather that in? Because we're talking about that was both SIEM and XDR.
Yes.
As part of your go-to-market, you guys have also built out a Security overlay team as well, right? So where are we in establishing that? We're obviously getting the tangible proof points with that $20 million customer, but.
Yeah, I think it's not just the $20 million customer. We're seeing Security really do well for us. I think that we're at a place now where when you compare us to other SIEM vendors and even other XDR vendors, we're in the top tier, best in class in terms of our solution. What prevents us from winning isn't our product capabilities if we're in the deals. More and more we're getting into the deals. People understand that Elastic is best in class in this Security space, and that's been phenomenal for our win rates, or just for showing up. Once we show up, our win rates are strong. Having this Security overlay, I think that a lot of security companies are pure security sellers.
And so there's a language that they speak with each other, the ability to talk to a CISO, the ability to engage with a security practitioner in a way that's really compelling. And having that security overlay with those security sellers really helps us participate in that market and be a compelling option. And we've seen tremendous traction in security. And we've talked about it in the last two quarters about how the Security business has done really well from a bookings perspective in these last two quarters. And I think it's a convergence of all of those things. It's not just the security overlay. It's also the product where it's really best in class in SIEM and XDR, and it's also the awareness that the market has around our product. So all that has come together, but the Security overlay has definitely helped.
If I could come back to, again, the tangible proof that these investments are starting to show up in the financials here, I'll come back to large commitments because that's something I'd like to unpack with you. On the 2Q call, Elastic disclosed $5 million -$10 million TCV deals, including two of which were Security, both over $20 million. There were two for Observability and one was AI, right? Great complexion as far as tapping into each one of those pillars that you guys stand on. I guess the number of those large deals, how repeatable is that at this point? Again, like I'm thinking about those competitive displays which we were talking about earlier. Yes, they've been sitting in the pipe and great, they all hit, right? Versus this is something we have line of sight looking into our pipeline. Like this is something we're building towards.
It's a change in the way that we go to market. So I run deal desk at Elastic too. And what that means is when we do a big deal where there are terms that we might not have put in place before or where there's questions, there's uncertainty, there's questions about it, I get involved. And three years ago when I started, I was getting involved in deals that were very low single digit million, high, multiple close around the million dollar range. I'm not getting involved in deals that size anymore because Elastic has a repeatable and executable motion around deals that size. When I'm getting involved, it's around those $5 million -$10 million plus type deals because that's where we're moving.
Just the type of deals that I'm engaging around has completely changed because Elastic as a business has gotten much more proficient and we see many more of these larger deals. It's just a fundamental shift in terms of what we did in Q1 2025, the fact that we're getting bigger as a company, that we're maturing, that a company coming in and writing a $10 million check to Elastic doesn't feel out of the ordinary to them anymore. It's just how we've evolved. So that's been really positive and we're seeing a lot more of those big deals.
This is more just an oddball question, but I've seen some other companies potentially get tripped up. As you are graduating into $10 million deals, when you get to that scale, if I give you an incremental two points of discount on this deal, that's not necessarily going to get this deal over the finish line on December 31st, right? So what kind of guardrails are you putting in place or does it cause you to change how you are constructing guidance to make sure if this deal doesn't hit, that matters, right?
Yeah, I think it's fair. I think that for some of these larger deals, you kind of want to be a little bit more, hey, should this be a committed deal or is this like a strong upside deal in terms of how you think about them? And you probably put a little bit more of a risk around them just because, excuse me, there's less certainty around it getting done and you don't want to put too much risk around the deal getting done where it's a binary outcome. And so I think your point is spot on and that's how we've been handling things for some of these bigger deals. They're more like the cherry on top versus the core of how we think about the guidance.
That's great. I think that's just the right approach, especially like, again, not you guys, but I've seen other vendors which really need to take a fine comb and go through deals to implement tighter discipline on how they go through deals from pipe to ultimate signing. On those larger commitments that we are seeing too, is the sales team, can you just remind us what are their incentives? How are you guys driving behavior? And I guess the build onto that is, are they being incentivized to drive larger commitments based on how those incentives are?
Oh, absolutely. I mean, they've got a quota and it's a quota predominantly around N&E, but also they've got a renewal component to their quota. And the more business they drive, they get into, they have 100% of their quota attainment. Once they get beyond 100, they start to see accelerators where they get paid a meaningful uplift from their core rate. And so if they can get some of these bigger deals done, Christmas is great. Everybody's celebrating. People are going on. People are taking nice vacations. People are like, those are memorable years in their family when their W-2s have that kind of impact that doing some of these big deals can make.
Is there a push towards longer duration deals or not necessarily?
You know, we always like more duration because it means we don't have to come back to the customer and renew it. It just gives you visibility. With all that being said, I think that when people ask us questions about our RPO and they ask us to unpack that, we're not going to not do a deal for you because it's one year. Sometimes a customer, there'll be a trade-off where they'll say, hey, we'll do a three-year deal for this and a one-year deal for this.
We'll get them in the door on the one-year deal, and we're not like myopically focused on the multi-year deal. We'd love to have a multi-year deal, but a one-year deal is great too. We're really managing our business to the ACV and to the commitment level that we're seeing because we can always renew it the next year. Once you get on SIEM or once you've got a big Observability implementation, it's not something you can just rip and replace that easily.
Again, I'm sorry. I'm spending so much time on the go-to-market, but just like with the three different pillars.
I spend so much time on the go-to-market too, I promise you, so it works out well.
So what are you seeing, whether it's Security, Search? I feel like it's a little bit more, again, if you guys are the leader there, but what are you doing to ensure additional consolidation of the landed TAM within your existing customer base, right? How are you building on that success? And then the follow-on would be, how are you driving behavior if you already landed a Security use case into a potential Search case or into an Observability use case? Can you steer that?
You can, and I think that's where the benefit of having more of that customer intimacy and having a narrower scope of a narrower portfolio of customers for our reps is really benefiting us where they sell one thing, and if you've got a huge amount of customers, you sell one thing, you move on to your next customer. But if you've got a narrower base, you sell that thing and then you really double down, you invest with that customer, you're spending time with them, you're getting the appropriate people in front of them. If they're a SIEM customer, sorry, if they're an Observability customer, you get your Security specialist in front of them and talk to them about what they're doing for Security. You know they have SIEM. You know that logging and SIEM go hand in hand.
And so you go and you have that conversation with them, and it's something that we're definitely investing in. At Analyst Day, we talked about, I think it was something like 20% of our customers have multiple solutions and 80% of our ARR is coming from those 20% of our customers. I'm paraphrasing because I don't remember the exact numbers, so don't hold me on this, but that really is the way that we're operating in our go-to-market where we're trying to double down and sell more products to our customers who are using us.
Okay. And if I come back to the large commitments, again, just those five mega deals, if you will, I think one of the interesting commonalities across those deals is the fact that they were all cloud. I know you guys are focusing on sales-led subscription revenue. We'll talk to that in a second. But is there a reason for why cloud again this quarter? Was there anything behind that? Yeah, we'll just be curious.
I wish I could say yes to that, but I can't. The truth is we'll meet customers where they are, and historically, the way five years ago you'd say, okay, cloud is modern and self-managed is legacy. For us, it's different. Our self-managed business is very frequently that customers are taking a license to our software and they're deploying it in their hyper-modern cloud infrastructure to do some sort of AI use case with it, so it's not that self-managed is legacy for us.
It can be just as modern as the cloud can be, and our goal is to meet our customers where they are. If they want to buy from us through the cloud, we'll sell to them through the cloud. If they want to buy from us through Serverless, which is our next evolution of the cloud product, we'll sell to them there. If they want to buy through self-managed, we're happy to do that as well.
I know the team has also been, and this is shifting over to metrics a little bit now, but the team has been consistent in recent quarters as far as saying like, hey, sales-led subscription revenue is what you guys should buy as to that is how we incentivize and build this business, right? Can you just remind for the audience, what is the calculation behind that and why should that be our North Star when assessing the success of Elastic?
Yeah, it's effectively all of the subscription revenue, excluding the monthly cloud business. The monthly cloud is what tends to be SMB and it's self-serve business. And so the reason that we're focused on that part of the business is it's what we control. As we go through our forecast calls every week, as we think about our go-to-market motion, as we incentivize our salespeople, they're not incentivized for cloud versus self-managed. They retire quota on both of those. And when we're thinking about our forecast, we're really thinking about our forecast for our commitments on both of those bases. And so we're investing and driving our go-to-market motion to support all of the sales-led subscription and less so for the monthly cloud.
I was going to ask just another question too. There's been, just with how the AI stack continues to evolve, I remember it was very topical middle last year, there was talk about people actually repatriating data into their own private data centers or on-prem data centers for cost containment perspective, right? Is that part of the calculus here as well? Are you seeing that play out or no, that's not, again, you just meet the customer where they are, you give them that?
Yeah, I think it's that we meet the customer where they are and we've always had that and we're not seeing it as much for ourselves because we offer them that flexibility. But we've heard of other players in the market who are now saying that they need to have a self-managed option because customers, especially who are doing AI, are wanting that option. And so I think that by offering this, we've kind of given customers an opportunity to use our products however they want, which is as things have evolved, it's actually played out to our benefit.
Do you have? I'd be interested in what the percentage of your customer base is. Would it even make sense for a customer to deploy Elastic in both the self-managed and an Elastic Cloud setting?
Some customers do. It'll depend how they want to use us, but some customers do.
Interesting. Okay. I'll turn it over. Any questions? I know I got more to go on my side, but all right, we'll keep it going. One of the things that I know a lot of people were excited about, I'll give it to you from my standpoint. We went to the Analyst Day, you guys took up the guidance and then there was a ton of joy around that and then, all right, but are we going to be able to take up numbers? Then we get to next quarter and you guys took up numbers again. So congratulations on that. I'll start with that. What gives you guys the confidence? What is it you see from a demand side perspective that instills that confidence that you guys have in the business today?
Yeah, I mean, we took the, from before the Analyst Day till after Q2, we added $34 million to our top line guide, which is about two points of growth. So the reason we did that is because of the strength that we're seeing in the business, because of not just the commitments that we've got today, but the demand environment as we look at our pipeline and as we see the way that the selling motion is working. So we've just seen a lot of strength in the business. We've seen head-to-head customer wins where the product is really showing a lot of market interest and competitive differentiation relative to our peers. And so we looked at that, we looked at what we're seeing and it was pretty clear to us that it made sense to raise our guidance.
And then the other thing, it just feels like ancient history at this point, but we just had the longest government shutdown, right? So can you talk about federal exposure that you guys have, maybe feather in commentary on the CISA deal just for the sake of the audience as well?
Yeah. So I'd say that we've got a similar amount of federal exposure as other infrastructure software players like ourselves do. There are obviously some who have more than us and probably some who have less, but I'd say that having been on the other side, where I dealt with a lot of companies as an investment banker, we're not out of line with kind of where infrastructure software companies are exposed. When the federal shutdown happened in October, there were some deals that didn't get closed because of the federal shutdown. Those deals have subsequently been closed. So very happy to see that and that is going to play through in terms of how that impacts Q3 revenue.
And then, just thinking about what we see in the demand environment and how we've forecast our business based on the likelihood of more impacts that have had, I think that we've got continuing resolution through January 30th. And so when we put together our guidance, the assumption we had is that there is risk that you'd see another government shutdown. I hope it doesn't happen. I hope it doesn't become a regular part of the doing business, but we're not discounting that as a possibility. And so as you think about our guidance for the full year, that's factored in.
Sorry.
I was going to say something about CISA, but go ahead.
No, no, no, no.
You asked about CISA and I forgot.
We're already on the topic. Let's do it.
So CISA was a tremendously successful deal where we signed a $26 million cloud commitment with CISA and they've got the ability to utilize our cloud services to serve other federal agencies. It's $26 million for one year. The way it works a little bit, there's some subtleties to it where they effectively have one year to deploy the $26 million and then from the time of deployment, there's one year to use the $26 million, and then it'll be effective, but it's effectively $26 million of annual usage.
Okay. I understand the mechanics there. Remind me how that's going to be recognized from a revenue standpoint? So it needs to be deployed in the next 12 months.
Yeah, it needs to be deployed in the next 12 months. Upon deployment, the clock starts and they have 12 months to use the amount of dollars that have been deployed for them. So it's effectively like they've committed to buying $26 million worth of subscriptions and those subscriptions can start anytime in the next 12 months. And then once they start, we're going to recognize revenue based on the consumption that they have towards the cloud commitments they make.
Excellent. Okay, and then we're seeing that there's been a catch-up as far as the deals that might have gotten pushed out during that shutdown.
Those have subsequently closed, yeah.
So that's all in the rearview mirror at this point.
All in the rearview mirror.
With where we are, and I know we're talking about a CR, who knows what happens at the end of this month, but from where we sit today, how has the tempo or tone of conversations, the demand environment been from PubSec specifically?
We've seen positivity out of the public sector. We talked about it and we talked about the positivity that we're seeing when we announced earnings in November and there's been no change since then.
On the SMB side of the house, again, not part of the sales-led subscription revenue that you're guiding us to. Is there any change, like what would, is that just out of your hands, and so as a result, that's why it's less of a focus. Has there been any meaningful change?
I don't think it's out of our hands. I think there are things that we can do in the product to help make it more SMB-friendly. As you think about Serverless, that makes it easier for smaller customers to adopt and get online because they don't have to provision and manage the infrastructure that underlies the subscription. So I think that there are things that we're doing that make it easier for SMB customers to get up and running and to use our products more. But in terms of the go-to-market motion and where we're really putting big dollars behind, we're having less impact on the SMB, the self-serve motion through that. And so that's why we're more focused on the sales-led subscription.
And then last couple of points here with the time we have left. If I could just cycle back to competition for a second.
Yeah, please.
Again, announcement comes out that Palo Alto is acquiring Chronosphere. We're going to get it. I'd be willing to bet you already got it. Did you ever overlap or run into Chronosphere competitively? What is that?
We actually partnered with Chronosphere a little bit. So we didn't see them as wildly competitive. They have a strong metrics solution. That's the core of their business. They tended to work in metrics and have some big customers there. And I think they'll be more competitive with some of the more metric-centered Observability players. They weren't competing in our core business in the logging part of Observability nearly as much as they were in metrics. And we play in metrics and we compete in metrics, but logging is probably where our biggest strength and differentiation in Observability lies.
Yeah, and again, just to take it full cycle, but come back to your earlier response on the point, like you guys have been preaching this whole idea of a unified, hey, we can tie together Observability and Security. So this is just another validation of your view and at the same time, your differentiation is the fact that you guys are on one single data plane.
Exactly.
Instead of coming from two.
I couldn't say it better myself, sorry.
What you said, I'm just reiterating. No, but that's it. I think that's all we have time for, but thank you very much, Eric, and thank you to the audience.
Thank you. Thank you for joining.
Awesome. Thank you so much.