urtho,
This is an interesting topic, and the following Splunk Blog maybe able to assist you on you choices...
http://blogs.splunk.com/2011/11/04/splunk-and-multitenancy/
Hope this helps answer your question.
If it does answer your question, please mark the answer as accepted to assist the community.
Regards,
MHibbin
... View more