TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    ExtraHop Performance Platform

    Score8.4 out of 10
    N/AExtraHop in Seattle, Washington offers an IT operations analytics platform via the ExtraHop Performance Platform, providing a dynamic, real-time view of all transactions in the IT environment, every team from NetOps to SecOps can spot and solve problems fast.

    $5.04

    Per Hour

    Splunk Cloud Platform

    Score7.8 out of 10
    N/ASplunk Cloud Platform is a data platform service thats help users search, analyze, visualize and act on data. The service can go live in as little as two days, and with an IT backend managed by Splunk experts.N/A
    Pricing
    ExtraHop Performance PlatformSplunk Cloud Platform
    Editions & Modules
    X- Small
    $5.04
    Per Hour
    Small
    $12.34
    Per Hour
    Medium
    $18.76
    Per Hour
    No answers on this topic
    Offerings
    Pricing Offerings
    ExtraHop Performance PlatformSplunk Cloud Platform
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    ExtraHop Performance PlatformSplunk Cloud Platform
    Considered Both Products
    ExtraHop
    No answer on this topic
    Cisco
    No answer on this topic
    Key User Insights
    Would buy again
    No answers on this topic
    100%
    Would buy again
    9 Answers
    Delivers good value for the price
    No answers on this topic
    88%
    Delivers good value for the price
    7 Answers
    Happy with the feature set
    No answers on this topic
    100%
    Happy with the feature set
    9 Answers
    Lived up to sales and marketing promises
    No answers on this topic
    88%
    Lived up to sales and marketing promises
    7 Answers
    Implementation went as expected
    No answers on this topic
    100%
    Implementation went as expected
    9 Answers
    Features
    ExtraHop Performance PlatformSplunk Cloud Platform
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of ExtraHop Performance Platform and Splunk Cloud Platform
    Feature
    ExtraHop Performance Platform
    -
    Ratings
    Splunk Cloud Platform
    9.0
    15 Ratings
    15% above category average
    Centralized event and log data collection00 Ratings9.015 Ratings
    Correlation00 Ratings9.715 Ratings
    Event and log normalization/management00 Ratings9.715 Ratings
    Deployment flexibility00 Ratings9.015 Ratings
    Integration with Identity and Access Management Tools00 Ratings9.313 Ratings
    Custom dashboards and workspaces00 Ratings9.715 Ratings
    Host and network-based intrusion detection00 Ratings8.613 Ratings
    Data integration/API management00 Ratings8.65 Ratings
    Behavioral analytics and baselining00 Ratings9.04 Ratings
    Rules-based and algorithmic detection thresholds00 Ratings8.46 Ratings
    Response orchestration and automation00 Ratings8.04 Ratings
    Reporting and compliance management00 Ratings8.76 Ratings
    Incident indexing/searching00 Ratings9.36 Ratings
    Best Alternatives
    ExtraHop Performance PlatformSplunk Cloud Platform
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    No answers on this topic
    IBM Security QRadar SIEM
    Score9 out of 10
    Enterprises
    No answers on this topic
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    ExtraHop Performance PlatformSplunk Cloud Platform
    Likelihood to Recommend
    9.0
    (7 ratings)
    9.9
    (15 ratings)
    Usability
    -
    (0 ratings)
    8.0
    (1 ratings)
    Support Rating
    9.0
    (1 ratings)
    7.2
    (4 ratings)
    User Testimonials
    ExtraHop Performance PlatformSplunk Cloud Platform
    Likelihood to Recommend
    ExtraHop
    One very big use is the ability to resolve performance issues. One example used was with the performance of sql issues. ExtraHop [Performance Platform] gave us the packet tracing ability to see the database was being queried incorrectly. A programmer has written a query that would bring the database information local and one the queries instead of allowing the sql server itself to do the work and push out the information.
    Incentivized
    Read full review
    Cisco
    Splunk is excellent when all your data is in one location. Its ability to correlate all that data is intuitive (once the hurdle of learning the query language is overcome). It is also easy to standardize the presentation of information to the company. When data is siloed/standalone, other systems can be cheaper and faster to implement.
    Incentivized
    Read full review
    Pros
    ExtraHop
    • It is very good at making it easy to find root cause for app issues.
    • It provides very good stats, graphs, and diagrams of IT utilization.
    Incentivized
    Read full review
    Cisco
    • This SIEM consolidates multiple data points and offers several features and benefits, creating custom dashboards and managing alert workflows.
    • Splunk Cloud provides a simple way to have a central monitoring and security solution. Though it does not have a huge learning curve, you should spend some time learning the basics.
    • Splunk Cloud enables me to create and schedule statistical reports on network use for Management.
    Incentivized
    Read full review
    Cons
    ExtraHop
    • Some person like me who want to see Extrahop can integrate better with other network analysis tools like Wireshark or TCPdump. The desired functionality I've been looking for is to program a kind of specific criteria to trigger the probe starts to run Wireshark or TCPdump to save the trace of a specific problematic session. Sometimes I want to see the evidence in a packet trace layer rather than just have the warning or error only presented in the dashboard.
    Incentivized
    Read full review
    Cisco
    • The SPL programming language that the queries are built in is not very intuitive.
    • There should be a better repository of pre-built queries for what I would think of as common Active Directory usage monitoring.
    • I would like to see more free training/familiarization information made available.
    Incentivized
    Read full review
    Likelihood to Renew
    ExtraHop
    No answers on this topic
    Cisco
    Ease of use and have all the features we need
    Incentivized
    Read full review
    Usability
    ExtraHop
    ExtraHop fits perfectly into the nist security framework to ensure the network is monitored and protected from anomalous behaviors.
    Incentivized
    Read full review
    Cisco
    What it does well:
    - Powerful SPL query language for advanced users
    - Excellent visualization dashboards
    - Comprehensive documentation and community support
    Where it needs work:
    - Steep learning curve for SPL syntax
    - Non-Intuitive UI for beginners
    - Complex administration and data model configuration
    - Search performance degrades with poor query optimization
    Bottom line: Enterprise-grade tool requiring dedicated training investment. Best for teams with experienced analysts.
    Incentivized
    Read full review
    Support Rating
    ExtraHop
    Documentation could be a lot better. Tech support is outstanding.
    Incentivized
    Read full review
    Cisco
    Splunk Cloud support is sorely lacking unfortunately. The portal where you submit tickets is not very good and is lacking polish. Tickets are left for days without any updates and when chased it is only sometimes you get a reply back. I get the feeling the support team are very understaffed and have far too much going on. From what I know, Splunk is aware of this and seem to be trying to remedy it.
    Incentivized
    Read full review
    Alternatives Considered
    ExtraHop
    We use ExtraHop specifically to monitor network traffic. It does many other things very well also, but it is the best network traffic analysis tool that we currently have in house. The fact that it is agentless also makes it more reliable and not dependent on agents running on devices throughout our enterprise.
    Incentivized
    Read full review
    Cisco
    Search Processing Language really is a game changer for writing easy-to-understand and maintainable queries on your data base logs. Once understood, setting up and validating a query can be done in no time- which leaves us the option to focus on more monitoring and improved services. We have no other tools that utilizes data this efficiently
    Incentivized
    Read full review
    Return on Investment
    ExtraHop
    • Accelerated root cause analysis
    • Cut out time passing the hot potato, focused time on resolution
    • It's a good tool for change management, helping to transform a reactive culture to one that is more proactive
    • Enables early warning and visibility, prompts action before a system goes down
    Incentivized
    Read full review
    Cisco
    • End-end visibility across your departmental silos
    • Strengthen the overall global monitoring posture
    • Move from Reactive to Proactive Monitoring
    • Highly secure environment at your finger-tips
    • Takes you away from managing infrastructure/administration, allows saving time & money. Reduce the overall TCO (Total Cost of Ownership)
    Incentivized
    Read full review
    ScreenShots