The thing that will totally replace splunk (and elastic and snowflake and likely several other whole ecosystems) is some random thing pouring data into clickhouse.
I am nervous about how clickhouse is going to monetize, whenever they decide to turn on the revenue spigot.