TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Splunk Cloud Platform

    Score7.8 out of 10
    N/ASplunk Cloud Platform is a data platform service thats help users search, analyze, visualize and act on data. The service can go live in as little as two days, and with an IT backend managed by Splunk experts.N/A

    Trellix Helix

    Score7 out of 10
    Enterprise companies (1,001+ employees)
    Trellix Helix (formerly FireEye Helix) is a SIEM solution providing a non-malware threat detection solution.

    $0

    Events per second

    Pricing
    Splunk Cloud PlatformTrellix Helix
    Editions & Modules
    No answers on this topic
    Helix Console
    $0
    Events per second
    Helix Enterprise
    $0
    Events per second
    Offerings
    Pricing Offerings
    Splunk Cloud PlatformTrellix Helix
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoYes
    Entry-level Setup FeeNo setup feeOptional
    Additional Details——
    More Pricing Information
    Community Pulse
    Splunk Cloud PlatformTrellix Helix
    Considered Both Products
    Cisco
    No answer on this topic
    Trellix (FireEye + McAfee)
    Chose Trellix Helix
    I find Helix to be super-efficient and able to cut through the noise. Previous installations of LogRhythm and Splunk resulting in an overwhelming amount of noise (out of the gate), and we had to constantly tune out false positives. Helix is different. Out of the gate, Helix …
    Incentivized
    Key User Insights
    Would buy again
    100%
    Would buy again
    9 Answers
    No answers on this topic
    Delivers good value for the price
    88%
    Delivers good value for the price
    7 Answers
    No answers on this topic
    Happy with the feature set
    100%
    Happy with the feature set
    9 Answers
    No answers on this topic
    Lived up to sales and marketing promises
    88%
    Lived up to sales and marketing promises
    7 Answers
    No answers on this topic
    Implementation went as expected
    100%
    Implementation went as expected
    9 Answers
    No answers on this topic
    Features
    Splunk Cloud PlatformTrellix Helix
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Splunk Cloud Platform and Trellix Helix
    Feature
    Splunk Cloud Platform
    9.0
    15 Ratings
    15% above category average
    Trellix Helix
    8.5
    4 Ratings
    9% above category average
    Centralized event and log data collection9.015 Ratings8.54 Ratings
    Correlation9.715 Ratings8.04 Ratings
    Event and log normalization/management9.715 Ratings8.54 Ratings
    Deployment flexibility9.015 Ratings8.44 Ratings
    Integration with Identity and Access Management Tools9.313 Ratings8.94 Ratings
    Custom dashboards and workspaces9.715 Ratings8.14 Ratings
    Host and network-based intrusion detection8.613 Ratings9.04 Ratings
    Data integration/API management8.65 Ratings00 Ratings
    Behavioral analytics and baselining9.04 Ratings00 Ratings
    Rules-based and algorithmic detection thresholds8.46 Ratings00 Ratings
    Response orchestration and automation8.04 Ratings00 Ratings
    Reporting and compliance management8.76 Ratings00 Ratings
    Incident indexing/searching9.36 Ratings00 Ratings
    Best Alternatives
    Splunk Cloud PlatformTrellix Helix
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    IBM Security QRadar SIEM
    Score9 out of 10
    IBM Security QRadar SIEM
    Score9 out of 10
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Splunk Cloud PlatformTrellix Helix
    Likelihood to Recommend
    9.9
    (15 ratings)
    9.0
    (4 ratings)
    Usability
    8.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    7.2
    (4 ratings)
    9.0
    (1 ratings)
    Ease of integration
    -
    (0 ratings)
    8.1
    (4 ratings)
    User Testimonials
    Splunk Cloud PlatformTrellix Helix
    Likelihood to Recommend
    Cisco
    Splunk is excellent when all your data is in one location. Its ability to correlate all that data is intuitive (once the hurdle of learning the query language is overcome). It is also easy to standardize the presentation of information to the company. When data is siloed/standalone, other systems can be cheaper and faster to implement.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    Great for organizations that are considering improving their operational security by utilizing their threats intelligence capabilities. It offers a great collection and analysis of security events and provides solutions to solve them. When considering a solution that is secure and can provide very extensive visualization of your environment for threats.
    Read full review
    Pros
    Cisco
    • This SIEM consolidates multiple data points and offers several features and benefits, creating custom dashboards and managing alert workflows.
    • Splunk Cloud provides a simple way to have a central monitoring and security solution. Though it does not have a huge learning curve, you should spend some time learning the basics.
    • Splunk Cloud enables me to create and schedule statistical reports on network use for Management.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    • Single location for all security event management
    • Detect advanced threats
    • Provide audit artifacts to ensure compliance
    Incentivized
    Read full review
    Cons
    Cisco
    • The SPL programming language that the queries are built in is not very intuitive.
    • There should be a better repository of pre-built queries for what I would think of as common Active Directory usage monitoring.
    • I would like to see more free training/familiarization information made available.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    • Additional integration points (API cloud integrations).
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    Ease of use and have all the features we need
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Usability
    Cisco
    What it does well:
    - Powerful SPL query language for advanced users
    - Excellent visualization dashboards
    - Comprehensive documentation and community support
    Where it needs work:
    - Steep learning curve for SPL syntax
    - Non-Intuitive UI for beginners
    - Complex administration and data model configuration
    - Search performance degrades with poor query optimization
    Bottom line: Enterprise-grade tool requiring dedicated training investment. Best for teams with experienced analysts.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Support Rating
    Cisco
    Splunk Cloud support is sorely lacking unfortunately. The portal where you submit tickets is not very good and is lacking polish. Tickets are left for days without any updates and when chased it is only sometimes you get a reply back. I get the feeling the support team are very understaffed and have far too much going on. From what I know, Splunk is aware of this and seem to be trying to remedy it.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    We've been fairly happy with FireEye Helix support overall. Most issues are resolved the same day the case is opened.
    Incentivized
    Read full review
    Alternatives Considered
    Cisco
    Search Processing Language really is a game changer for writing easy-to-understand and maintainable queries on your data base logs. Once understood, setting up and validating a query can be done in no time- which leaves us the option to focus on more monitoring and improved services. We have no other tools that utilizes data this efficiently
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    It offers extensive visibility thus easy detection of threats and easy mitigation practices. Utilization of its threats intelligence capabilities thus early detection of incidents and maximization of security investments. Offers great integration of cloud resources with existing security tools thus ensuring seamless performance and all-time security for the organizational resources.
    Read full review
    Return on Investment
    Cisco
    • End-end visibility across your departmental silos
    • Strengthen the overall global monitoring posture
    • Move from Reactive to Proactive Monitoring
    • Highly secure environment at your finger-tips
    • Takes you away from managing infrastructure/administration, allows saving time & money. Reduce the overall TCO (Total Cost of Ownership)
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    • Optimization of your security investments.
    • Operations are seamless and better with easy integrations that enhance performance.
    • Efficiency in running of incidences with enhanced case management for all its alerts.
    Read full review
    ScreenShots

    Trellix Helix Screenshots

    Screenshot of Helix Cloud IntegrationsScreenshot of Helix Asset Alert Correlation