TrustRadius: an HG Insights company

Splunk On-Call Reviews & Insights

Score6.1 out of 10

22 Reviews and Ratings

Community insights

TrustRadius Insights for Splunk On-Call are summaries of user sentiment data from TrustRadius reviews and, when necessary, third party data sources.

Pros

Automation for reducing mean time to acknowledge notifications and resolving incidents: Several users have found that the product provides automation capabilities, which have significantly reduced the time taken to acknowledge notifications and resolve incidents. This feature has streamlined the incident life cycle and centralized information workflow.

Minimal local infrastructure footprint and easy setup: Many reviewers appreciate that the product has a minimal local infrastructure footprint, making it easy to set up initially without requiring a large IT presence. Users value this flexibility as it allows them to scale up or scale out as per their organization's requirements without extended downtime.

Beneficial team tools and integration options: The team tools provided by the product are highly valued by users as they can be dedicated to various areas of focus, helping cover for unavailable team members. Additionally, users find it beneficial that the product offers seamless integration with many monitoring services, allowing for better collaboration among different systems.

Splunk On-Call Reviews

11 Reviews

A less expensive Splunk integrated solution for Incident Management

Rating: 7 out of 10
Incentivized

Use Cases and Deployment Scope

We used Splunk on Call (formerly Victor-Ops) as Incident manager in une project last year

Pros

  • it's easy to implement
  • It's integrated with Splunk

Cons

  • Sales: it's very hard to have a quotation or a demo!

Likelihood to Recommend

All the Splunk implementation require a Case Manager and Splunk On-Call is natively integrated with Splunk so it's easier to implement than other more complex and complete SOAR product as Phantom.

Resolving Incidents with Splunk On-Call

Rating: 10 out of 10
Incentivized

Use Cases and Deployment Scope

My organization currently uses Splunk On-Call in conjunction with Splunk Enterprise to manage our on-call team and incident response. Additionally, I have setup numerous integrations between Splunk On-Call and other software tools such as ServiceNow. With these integrations we can quickly and easily use Splunk On-Call to monitor our environment and deploy remediation when problems arise.

Pros

  • Easily assign work/tickets between multiple users
  • Supports a wide variety of software integrations
  • Easy to manage scheduling tool
  • As part of the Splunk toolset, provides detailed levels of data analysis at our engineers fingertips

Cons

  • Integrations dependent on updates being applied in a timely manner
  • Dependent on Splunk licensing model which can be a hurdle depending on data ingest amounts
  • Not ideal in an airgapped network environment

Likelihood to Recommend

Splunk On-Call has proved to be a great help in incident response within my organization. With the scheduling and assignment feature it is never in question which engineer is tasked with each assignment/incident. Being able to quickly and easily access all relevant logs greatly expedites incident resolution time. I would argue that the larger the environment and incident volume, the more important a tool such as this will prove to be.
Vetted Review
Splunk On-Call
1 year of experience

Splunk On-Call - Review

Rating: 8 out of 10
Incentivized

Use Cases and Deployment Scope

Splunk On-Call is the extended orchestration arm of Splunk. It is utilized to automate and centralize the flow of information during an incident. It is a great add-on if you have Splunk Enterprise Security in your environement and if you are providing services to multiple customers as it can peovide efficiency and optimize the incident life-cycle.

Pros

  • Centraliing information work-flow
  • Providing insights in to incident life cycle
  • Acting as a central platform during incidents

Cons

  • The user interface can be furthe improved
  • Licensing needs to be simplified and packaged as a bundle with other Splunk product like Enterprise Security
  • Customer outreach can be further enhanced

Likelihood to Recommend

It is very well suited for large enterprises and Managed Services Providers since there is huge event throughput and the considerable incidents created. The monitoring teams usually work in a 24/7 environment and information flow and centralization for incidents, especially during shift handover becomes crucial. Splunk On-Call does not realise its full value where the event throughput is less.

Splunk On-Call Truly Consolidates All Your On-Call Products

Rating: 7 out of 10
Incentivized

Use Cases and Deployment Scope

Splunk On-Call aggregates our various scripts and in-app on-call features to be consolidated in a centralized location to alert various teams globally to automate or manually perform set functions based on the on-call alert triggered. The relatively easy to setup services and minimal on premise requirement are attractive for any organization trying to minimize local footprint with hybrid cloud solution eventually moving towards a full cloud infrastructure.

Pros

  • minimal local infrastructure footprint
  • easy initial setup without a large IT presence
  • flexibility to scale up or scale out as required for organization
  • scaling does not require extended downtime

Cons

  • configuration UI may be vague with minimal explation
  • updates need expanded explanation on benefits and roadmap
  • cost model should be more streamlined
  • product integration with other Splunk products is disconnected

Likelihood to Recommend

It is a good product to consolidate other on-call features with applications and disfranchised legacy applications to be on a single shared platform so all IT teams can be on the same page streamlining support SLAs. We were able to collapse 8 separate products into 1 and maintenance windows are more transparent to all IT team members due to a single platform solution. This product is ideal of large enterprises with some in-house expertise on previous Splunk implementation experience to make our implementation smoother.

Improving the on-call experience!

Rating: 8 out of 10
Incentivized

Use Cases and Deployment Scope

Splunk On-Call has been a great way to integrate our teams when there are situations that require us to pull in specialists in a time of need! It helps us to call out the right people and ensures that we can respond in a timely manner.

Pros

  • Escalation
  • Audit
  • Transparency

Cons

  • Closer integration to Splunk Cloud
  • UK hosting region

Likelihood to Recommend

It works really well when there is an incident involving multiple stakeholders and where escalations may be required. It helps keep a track of the incident and can feed into other systems, as well as be fed metadata from other systems such as Splunk Enterprise
Vetted Review
Splunk On-Call
2 years of experience

Splunk -- a good tool for logging and dashboard monitoring

Rating: 9 out of 10
Incentivized

Use Cases and Deployment Scope

Splunk is primarily used within our engineering and support departments to monitor logging events in real-time in order to alert the team in case of issues or failures -- so it is part of our automated monitoring as opposed to relying on human monitoring. It also allows us to monitor SSO success/failure, API usage, beacon notifications and log volume, etc

Pros

  • Failure identification
  • Custom Dashboarding
  • Monitoring across multiple environments

Cons

  • Initial orientation
  • Search autocomplete

Likelihood to Recommend

Logging and log management. So customers make use of our application programming interface, and one of the challenges has always been to track who is using what calls, if there are failures, etc, etc. So, in this sense, it was well suited to aggregate information in custom dashboards that allowed for simplified monitoring. It was also well suited for monitoring the real-time notification in beacon.

Why its trusted - Splunk on-call.

Rating: 8 out of 10
Incentivized

Use Cases and Deployment Scope

Automate the incident responses, speed up resolutions, notify owners with an escalation matrix, and use resources like articles to help responders to resolve incidents faster. Select responders with the right expertise and provide information from similar incidents for more effective resolution. Reducing mean time to acknowledge and resolve incidents. Gain visibility into critical incidents and steps are taken to resolve them.

Pros

  • Notification
  • Reduce Mean time to acknowledge.
  • Automation.
  • Incident resolution.
  • Broader visibility on RCA.

Cons

  • Portal issues on browsers.
  • Endpoint troubleshooting.
  • Security vulnerabilities.

Likelihood to Recommend

I recommend Splunk on-call is more suited where there are high incident queues; multiple teams need to be involved in handling a P1 severity issue. Multiple levels of escalation are needed environment where automated action is required. I recommend the solution for large-scale & medium-scale business units. For small-scale business units, I see the functional value is less.

VictorOps - Great Alerting Tool For Any Software Platform

Rating: 8 out of 10
Incentivized

Use Cases and Deployment Scope

We use VictorOps as alternative to something like PagerDuty, basically to alert the "engineer on-call" of any issues that may occur throughout our platform. We run a weekly engineering on-call rotation and have alerts set up to detect problems or potential issues and have someone to address them as soon as possible.

Pros

  • Good text and call alerting.
  • Allows setting up on-call schedules for months at a time.

Cons

  • The UI is a little clunky.
  • It's a little tricky to override or shift schedules (i.e., for a particular day in a one-week rotation).

Likelihood to Recommend

VictorOps is an excellent option for platform alerting and is very cost-effective. For teams of any size, it can be the correct tool. VictorOps success is mainly dependent on the amount of logging and monitoring setup within your platform. If you have little or poor logging, then they may not be anything for VictorOps to act upon.

Full-featured alerting platform that's priced well and reliable

Rating: 10 out of 10
Incentivized

Use Cases and Deployment Scope

We use VictorOps as our tool for managing our on-call services. We have a system where everyone in Engineering shares a rotational role to be on call for our infrastructure uptime. We have used other tools but VictorOps works well for us so we've been a customer for a couple of years now.

Pros

  • Team tools that can be dedicated to various areas of focus.
  • Overriding tools to help cover those who are out.

Cons

  • The UI is fine but is a bit bland.

Likelihood to Recommend

I would recommend VictorOps because it offers the majority of tooling that other paging services offer. However, it's more affordable than some others and has a nice pricing model. Although the UI is not as clean or intuitive as some others we've tried, it works well and is satisfactory. Keep in mind, UI/UX can be subjective so I critique this cautiously knowing that to me it's not perfect but to someone else, it may be stellar. Overall though the service is great and has not let us down so I would definitely recommend it to my colleagues. Also - forgot to mention it integrates well with other services.

VictorOps - Amazing, easy on-call solution

Rating: 10 out of 10
Incentivized

Use Cases and Deployment Scope

I have used VictorOps for many years as my alerting system to let me know when systems are having any issues. It is being used for all external services and servers. It allows us to instantly know the status of our systems and let's us know when we need to address issues.

Pros

  • Easy Setup
  • Great plug-in for many monitoring services
  • Reliable

Cons

  • None

Likelihood to Recommend

VictorOps alerting is great for any company that wants to have an outsourced alerting system without having to manage it all internally. It has been, honestly, 100% reliable for me and gives me instant alerting whenever an issue comes up with my systems. It makes online alerting and rotation a breeze.