TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Splunk Enterprise

    Score8.5 out of 10
    N/ASplunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.N/A
    Pricing
    Splunk Enterprise
    Editions & Modules
    No answers on this topic
    Offerings
    Pricing Offerings
    Splunk Enterprise
    Free Trial
    Yes
    Free/Freemium Version
    Yes
    Premium Consulting/Integration Services
    No
    Entry-level Setup FeeNo setup fee
    Additional Details—
    More Pricing Information
    Community Pulse
    Splunk Enterprise
    Considered Both Products
    Cisco
    Chose Splunk Enterprise
    Omnibus was a Linux based tool. Not very easy to sue. End user needs to know Linux commands. Splunk Enterprise is more flexible and ease to use. Splunk Enterprise can generate reports, graphs, data visualization, data validation and much more. Use friendly query language and …
    Incentivized
    Chose Splunk Enterprise
    A lot of products have natively inside their own dashboards and or their own logging repositories. And each one is difficult to learn or they're too complex or they're not verbose in the sense that they're not easy to mine the data that you're looking for. So that could be …
    Incentivized
    Chose Splunk Enterprise
    Elastic and it's a little bit more cumbersome and a little bit more time consuming. Using Splunk is much easier flow and quicker to utilize to get to the root of a problem.
    Incentivized
    Chose Splunk Enterprise
    Cost was major factor which made us choose Splunk Enterprisek.
    Splunk Enterprise is versatile tool which further helped us to make our decision.
    Apart from that Managment wish to use something robust hence Splunk Enterprise became there first choice.
    Incentivized
    Chose Splunk Enterprise
    Splunk Enterprise is honestly the first tool we used and we cant realistically switch. We have not done any in depth studies or comparisons. We know there are alternatives and we would probably switch if one of them was much more economically viable, but right now we are happy …
    Incentivized
    Chose Splunk Enterprise
    Splunk is easy to use , the User interface is quite easy and the components or functionality speak for themselves. The ease with you can search and from there fine tune your search functionality. Also the admin console is quite simple to use, you can find the functionality at …
    Incentivized
    Chose Splunk Enterprise
    We used this first but are considering moving away due to log space limitations because of cost.
    Incentivized
    Chose Splunk Enterprise
    Data remains On-Prem and doesn't need encryption as in case of Cloud
    Incentivized
    Chose Splunk Enterprise
    I have not evaluated other products
    Incentivized
    Chose Splunk Enterprise
    We had an old version of QRadar before Splunk. It was difficult to customize and difficult to pull in our data sources. It wound up being neglected and not providing value for us as an institution. We have also looked into other things like AlienVault but in general, the …
    Incentivized
    Chose Splunk Enterprise
    LogRhythm is a great SIEM Tool. But Splunk Enterprise is so much more than that. [It's] a Security Analytics Tool with no limitation. It depends on [organization's] size, budget[,] and also what exactly they are looking for.
    Incentivized
    Chose Splunk Enterprise
    We reviewed a number of different platforms and found Splunk to be the more mature product across the board. Splunk is the market leader and the rest of the industry chances them. We needed a platform from a company with the resources to continue development and meet new …
    Incentivized
    Chose Splunk Enterprise
    Splunk is a better solution for log analyzing based on the complexity of data it can collect, analyze and store. Dynatrace is just in the beginning stage of collecting logs but this tool is good for user application monitoring. So they are different products and it may not be …
    Incentivized
    Chose Splunk Enterprise
    We originally used Kiwi Syslog but this was not able to keep up with the level of logs that were being sent to it. Also Kiwi does not allow you to search through logs, create alerts, etc. or any of the other features Splunk has. It is purely just a web GUI for syslog.
    Incentivized
    Chose Splunk Enterprise
    All the logs from those security devices or systems are pumping to the Splunk Enterprise and being correlated by the Enterprise Security. However, there are some difficulties in tuning the Data Model, which results in a lot of false positive. This could occur due to the lack of …
    Incentivized
    Chose Splunk Enterprise
    The Solarwinds SIEM solutions are much more bare-bones and don't offer as many features as Splunk Enterprise. Still, they are also infinitely more affordable and provide precisely what's required for small to medium environments. Implementation is straight forward even for …
    Incentivized
    Chose Splunk Enterprise
    Splunk Light is lighter and less flexible compared to Splunk Cloud and Splunk Enterprise. However, it is also the most effective option for new or small organizations with a tight budget. Both Splunk Light and Splunk Enterprise are deployed on-premise while Splunk Cloud, as the …
    Incentivized
    Chose Splunk Enterprise
    Splunk is easier to setup compare to ELK. It has better support, well-documented information plus the Splunk database which has an addon that built by them or the other users to help to improve the experience with Splunk. However, ELK is open-source and it is free. At the end …
    Incentivized
    Chose Splunk Enterprise
    Splunk is a very useful, lightweight and simple tool to analyze logs. As a computer science student who loves coding, it is much more convenient to use. I can build custom queries for myself or a subset of the users. The language is much simpler than SQL and is much faster as …
    Incentivized
    Chose Splunk Enterprise
    N/A
    Incentivized
    Chose Splunk Enterprise
    Splunk Enterprise stores and captures more detailed customer logs. Also, we can build search including back-end information.
    Incentivized
    Chose Splunk Enterprise
    Splunk is the most intelligent tool I have ever worked on. It gives you hands-on experience on how logs actually look like. You can go through entire organization data at once using this tool. Also, by the use of data models, it's become so easy to use and work on.
    Incentivized
    Chose Splunk Enterprise
    More features and easy to manage once configured and setup correctly. Stronger correlation engine compared to other products. Easily integrates with ServiceNow for ticket creation, automation, and building workflows. Helps in AiOPS more, as compared to other tools. Provides …
    Incentivized
    Chose Splunk Enterprise
    We selected Splunk Light because people in our company had previous experience with it, the solution appeared to check all of our boxes, and the support structure gave Splunk a significant edge over open source solutions like the ELK stack.
    Incentivized
    Key User Insights
    Would buy again
    93%
    Would buy again
    25 Answers
    Delivers good value for the price
    88%
    Delivers good value for the price
    22 Answers
    Happy with the feature set
    100%
    Happy with the feature set
    27 Answers
    Lived up to sales and marketing promises
    95%
    Lived up to sales and marketing promises
    19 Answers
    Implementation went as expected
    92%
    Implementation went as expected
    22 Answers
    Features
    Splunk Enterprise
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Splunk Enterprise
    Feature
    Splunk Enterprise
    7.1
    56 Ratings
    9% below category average
    Centralized event and log data collection9.055 Ratings
    Correlation9.054 Ratings
    Event and log normalization/management9.555 Ratings
    Deployment flexibility7.050 Ratings
    Integration with Identity and Access Management Tools6.051 Ratings
    Custom dashboards and workspaces5.956 Ratings
    Host and network-based intrusion detection4.939 Ratings
    Data integration/API management8.06 Ratings
    Behavioral analytics and baselining5.96 Ratings
    Rules-based and algorithmic detection thresholds7.56 Ratings
    Response orchestration and automation7.05 Ratings
    Reporting and compliance management6.46 Ratings
    Incident indexing/searching6.57 Ratings
    Best Alternatives
    Splunk Enterprise
    Small Businesses
    No answers on this topic
    Medium-sized Companies
    IBM Security QRadar SIEM
    Score9 out of 10
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternatives
    User Ratings
    Splunk Enterprise
    Likelihood to Recommend
    7.8
    (73 ratings)
    Likelihood to Renew
    10.0
    (17 ratings)
    Usability
    8.2
    (6 ratings)
    Availability
    10.0
    (1 ratings)
    Support Rating
    8.4
    (17 ratings)
    Online Training
    8.0
    (1 ratings)
    Implementation Rating
    9.0
    (2 ratings)
    Product Scalability
    9.1
    (1 ratings)
    User Testimonials
    Splunk Enterprise
    Likelihood to Recommend
    Cisco
    It's well suited for what I do, which is network security operations. And that's for anything from troubleshooting incidents, troubleshooting performance, troubleshooting for the purpose of a compliance and auditing. It's not best suited for users who are new in terms of they're new to the product and they have expectations that probably Splunk cannot meet.
    Incentivized
    Read full review
    Pros
    Cisco
    • It is very useful in creating custom rules for analyzing system logs and display relevant information. The query language is very easy to learn.
    • We can create custom UI to visualize the output of our data. The interface is very flexible. It also allows the sharing of rules among users.
    • There is an open online community to help others. Stackoverflow also has a splunk community. These resources make it more convenient to learn.
    Incentivized
    Read full review
    Cons
    Cisco
    • Splunk light limits number of users to 5. Wish there was a flexible license, where one could add more users.
    • Splunk light does not let you add > few realtime alerts. Wish there was a flexible license, where one could add as many realtime alerts as wanted.
    • Better insight into daily ingestion values
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    We are using Splunk extensively in our projects and we have recently upgraded to Splunk version 6.0 which is quite efficient and giving expected results. We keep track of updates and new features Splunk introduces periodically and try to introduce those features in our day to day activities for improvement in our reporting system and other tasks.
    Read full review
    Usability
    Cisco
    You can literally throw in a single word into Splunk and it will pull back all instances of that word across all of your logs for the time span you select (provided you have permission to see that data). We have several users who have taken a few of the free courses from Splunk that are able to pull data out of it everyday with little help at all.
    Incentivized
    Read full review
    Reliability and Availability
    Cisco
    When properly setup and configured, Splunk is extremely reliable.
    Incentivized
    Read full review
    Support Rating
    Cisco
    Splunk maintains a well resourced support system that has been consistent since we purchased the product. They help out in a timely manner and provide expert level information as needed. We typically open cases online and communicate when possible via e-mail and are able to resolve most issues with that method.
    Incentivized
    Read full review
    Online Training
    Cisco
    The online course was simple clear and described the main capabilities of the solution. There is also an initial module that can be done for free so anyone can familiarize themselves with the functionality of this solution. On the other hand, however, there could be more free online courses. Maybe even with a certificate, this would broaden the group of people who are familiar with the platform while increasing familiarity with the solution itself.
    Read full review
    Implementation Rating
    Cisco
    Smooth without too many major issues.
    Incentivized
    Read full review
    Alternatives Considered
    Cisco
    I didn't get to fully evaluate Logstash as our corporation was already using Logstash, but both seemed like viable solutions to the problem that we were having. I wanted to evaluate Logstash some more, both did seem like they would work for the business needs that we had, we went with splunk as many teams were already using it.
    Incentivized
    Read full review
    Scalability
    Cisco
    Splunk can scale in to the petabyte per day range which of course is awesome
    Read full review
    Return on Investment
    Cisco
    • I don't have any numbers to share but Splunk has positively served as a 24/7 monitoring tool that has saved hours of work by self-detecting, saving statistics and alerting problems in the system or from external interfaces as soon as they happen.
    • Splunk dashboards does a solid job in collecting, analyzing data and creating reports that contain an entire day's activity and then automatically sent out to the business.
    • Splunk is very easy to learn and very useful to any program or business application.
    Incentivized
    Read full review
    ScreenShots