TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Splunk Enterprise

    Score8.5 out of 10
    N/ASplunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.N/A

    Trellix Helix

    Score7 out of 10
    Enterprise companies (1,001+ employees)
    Trellix Helix (formerly FireEye Helix) is a SIEM solution providing a non-malware threat detection solution.

    $0

    Events per second

    Pricing
    Splunk EnterpriseTrellix Helix
    Editions & Modules
    No answers on this topic
    Helix Console
    $0
    Events per second
    Helix Enterprise
    $0
    Events per second
    Offerings
    Pricing Offerings
    Splunk EnterpriseTrellix Helix
    Free Trial
    YesNo
    Free/Freemium Version
    YesNo
    Premium Consulting/Integration Services
    NoYes
    Entry-level Setup FeeNo setup feeOptional
    Additional Details——
    More Pricing Information
    Community Pulse
    Splunk EnterpriseTrellix Helix
    Considered Both Products
    Cisco
    No answer on this topic
    Trellix (FireEye + McAfee)
    Chose Trellix Helix
    I find Helix to be super-efficient and able to cut through the noise. Previous installations of LogRhythm and Splunk resulting in an overwhelming amount of noise (out of the gate), and we had to constantly tune out false positives. Helix is different. Out of the gate, Helix …
    Incentivized
    Key User Insights
    Would buy again
    93%
    Would buy again
    25 Answers
    No answers on this topic
    Delivers good value for the price
    88%
    Delivers good value for the price
    22 Answers
    No answers on this topic
    Happy with the feature set
    100%
    Happy with the feature set
    27 Answers
    No answers on this topic
    Lived up to sales and marketing promises
    95%
    Lived up to sales and marketing promises
    19 Answers
    No answers on this topic
    Implementation went as expected
    92%
    Implementation went as expected
    22 Answers
    No answers on this topic
    Features
    Splunk EnterpriseTrellix Helix
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Splunk Enterprise and Trellix Helix
    Feature
    Splunk Enterprise
    7.1
    56 Ratings
    9% below category average
    Trellix Helix
    8.5
    4 Ratings
    9% above category average
    Centralized event and log data collection9.055 Ratings8.54 Ratings
    Correlation9.054 Ratings8.04 Ratings
    Event and log normalization/management9.555 Ratings8.54 Ratings
    Deployment flexibility7.050 Ratings8.44 Ratings
    Integration with Identity and Access Management Tools6.051 Ratings8.94 Ratings
    Custom dashboards and workspaces5.956 Ratings8.14 Ratings
    Host and network-based intrusion detection4.939 Ratings9.04 Ratings
    Data integration/API management8.06 Ratings00 Ratings
    Behavioral analytics and baselining5.96 Ratings00 Ratings
    Rules-based and algorithmic detection thresholds7.56 Ratings00 Ratings
    Response orchestration and automation7.05 Ratings00 Ratings
    Reporting and compliance management6.46 Ratings00 Ratings
    Incident indexing/searching6.57 Ratings00 Ratings
    Best Alternatives
    Splunk EnterpriseTrellix Helix
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    IBM Security QRadar SIEM
    Score9 out of 10
    IBM Security QRadar SIEM
    Score9 out of 10
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Splunk EnterpriseTrellix Helix
    Likelihood to Recommend
    7.8
    (73 ratings)
    9.0
    (4 ratings)
    Likelihood to Renew
    10.0
    (17 ratings)
    -
    (0 ratings)
    Usability
    8.2
    (6 ratings)
    -
    (0 ratings)
    Availability
    10.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    8.4
    (17 ratings)
    9.0
    (1 ratings)
    Online Training
    8.0
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    9.0
    (2 ratings)
    -
    (0 ratings)
    Ease of integration
    -
    (0 ratings)
    8.1
    (4 ratings)
    Product Scalability
    9.1
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Splunk EnterpriseTrellix Helix
    Likelihood to Recommend
    Cisco
    It's well suited for what I do, which is network security operations. And that's for anything from troubleshooting incidents, troubleshooting performance, troubleshooting for the purpose of a compliance and auditing. It's not best suited for users who are new in terms of they're new to the product and they have expectations that probably Splunk cannot meet.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    Great for organizations that are considering improving their operational security by utilizing their threats intelligence capabilities. It offers a great collection and analysis of security events and provides solutions to solve them. When considering a solution that is secure and can provide very extensive visualization of your environment for threats.
    Read full review
    Pros
    Cisco
    • It is very useful in creating custom rules for analyzing system logs and display relevant information. The query language is very easy to learn.
    • We can create custom UI to visualize the output of our data. The interface is very flexible. It also allows the sharing of rules among users.
    • There is an open online community to help others. Stackoverflow also has a splunk community. These resources make it more convenient to learn.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    • Single location for all security event management
    • Detect advanced threats
    • Provide audit artifacts to ensure compliance
    Incentivized
    Read full review
    Cons
    Cisco
    • Splunk light limits number of users to 5. Wish there was a flexible license, where one could add more users.
    • Splunk light does not let you add > few realtime alerts. Wish there was a flexible license, where one could add as many realtime alerts as wanted.
    • Better insight into daily ingestion values
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    • Additional integration points (API cloud integrations).
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    We are using Splunk extensively in our projects and we have recently upgraded to Splunk version 6.0 which is quite efficient and giving expected results. We keep track of updates and new features Splunk introduces periodically and try to introduce those features in our day to day activities for improvement in our reporting system and other tasks.
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Usability
    Cisco
    You can literally throw in a single word into Splunk and it will pull back all instances of that word across all of your logs for the time span you select (provided you have permission to see that data). We have several users who have taken a few of the free courses from Splunk that are able to pull data out of it everyday with little help at all.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Reliability and Availability
    Cisco
    When properly setup and configured, Splunk is extremely reliable.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Support Rating
    Cisco
    Splunk maintains a well resourced support system that has been consistent since we purchased the product. They help out in a timely manner and provide expert level information as needed. We typically open cases online and communicate when possible via e-mail and are able to resolve most issues with that method.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    We've been fairly happy with FireEye Helix support overall. Most issues are resolved the same day the case is opened.
    Incentivized
    Read full review
    Online Training
    Cisco
    The online course was simple clear and described the main capabilities of the solution. There is also an initial module that can be done for free so anyone can familiarize themselves with the functionality of this solution. On the other hand, however, there could be more free online courses. Maybe even with a certificate, this would broaden the group of people who are familiar with the platform while increasing familiarity with the solution itself.
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Implementation Rating
    Cisco
    Smooth without too many major issues.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Alternatives Considered
    Cisco
    I didn't get to fully evaluate Logstash as our corporation was already using Logstash, but both seemed like viable solutions to the problem that we were having. I wanted to evaluate Logstash some more, both did seem like they would work for the business needs that we had, we went with splunk as many teams were already using it.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    It offers extensive visibility thus easy detection of threats and easy mitigation practices. Utilization of its threats intelligence capabilities thus early detection of incidents and maximization of security investments. Offers great integration of cloud resources with existing security tools thus ensuring seamless performance and all-time security for the organizational resources.
    Read full review
    Scalability
    Cisco
    Splunk can scale in to the petabyte per day range which of course is awesome
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Return on Investment
    Cisco
    • I don't have any numbers to share but Splunk has positively served as a 24/7 monitoring tool that has saved hours of work by self-detecting, saving statistics and alerting problems in the system or from external interfaces as soon as they happen.
    • Splunk dashboards does a solid job in collecting, analyzing data and creating reports that contain an entire day's activity and then automatically sent out to the business.
    • Splunk is very easy to learn and very useful to any program or business application.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    • Optimization of your security investments.
    • Operations are seamless and better with easy integrations that enhance performance.
    • Efficiency in running of incidences with enhanced case management for all its alerts.
    Read full review
    ScreenShots

    Trellix Helix Screenshots

    Screenshot of Helix Cloud IntegrationsScreenshot of Helix Asset Alert Correlation