I don't know which version we used, just that it was managed and configured by Splunk.
We were only sending a small subset of our logs to it so about 200+ GB a day.
Our Linux box with spinning disks could grep the full set of logs much faster than querying Splunk, so I don't think anyone really used it.