External reviews
External reviews are not included in the AWS star rating for the product.
Expert on the Splunk Enterprise
What do you like best about the product?
Integrate with all log sources , best virtualization for the searches and use-cases for the dashboards
What do you dislike about the product?
It is difficult to learn on it because it is intended for professionals
What problems is the product solving and how is that benefiting you?
It makes it easy for me to monitor everything I want and build a dashboard at any given time, based on use cases to detect vulnerabilities and viruses to alert me.
- Leave a Comment |
- Mark review as helpful
Fast, reliable and extensive solution for data analysis
What do you like best about the product?
First, Splunk is very intuitive to use. it is not complex, and the Splunk documentation and courses provide comprehensive explanations on how to best utilize the system. in addition, I like that it provides the option to seamlessly dump log files
What do you dislike about the product?
honesntly i dont see downside in Splunk. We are also using QRadar and I must say that it is way better for data analysis.
What problems is the product solving and how is that benefiting you?
we use splunk for incident responses.
log dumping is very easy to do here, as well as parsing the logs in a fast and effective way. the way Splunk is architectured allows very fast searches.
log dumping is very easy to do here, as well as parsing the logs in a fast and effective way. the way Splunk is architectured allows very fast searches.
Benefits of using Splunk enterprise
What do you like best about the product?
Splunk enterprise is an all in one tool for automation and log analysis. The ease of acquiring documentation and materials to contribute to your project is one of the main highlights!
What do you dislike about the product?
I face slowness in solunk enterprise sometimes. I have encountered a few bugs like when a saved search didn't run on time. Also it's difficult to find a root cause of the problem by using internal logs.
What problems is the product solving and how is that benefiting you?
We use splunk to monitor databases and status of the websites. We also use splunk to transform data into visualisation for data prediction and providing consice trend of the behavious. We use splunk to automate incident creation and mail alerts.
Best security and data monitoring and analytics tool
What do you like best about the product?
The dashboard of the splunk enterprise and in particular for security is very intuative. lots of knowledge base and learning available on internet.
What do you dislike about the product?
The pricing of the enterprise security app is high when compared to other SIEM solutions
What problems is the product solving and how is that benefiting you?
We are using this for log analysus and event monitoring and its great.
Experience of using Splunk
What do you like best about the product?
Splunk Enterprise is widely recognized as a powerful and versatile tool for collecting, analyzing, and visualizing large amounts of data. Some of the key features and benefits of Splunk Enterprise include its ability to handle complex and diverse data sources, perform real-time analysis and reporting, and provide a wide range of customization and integration options. Additionally, its user-friendly interface and scalability make it a popular choice among organizations of all sizes for their big data and log management needs.
What do you dislike about the product?
some common criticisms of Splunk Enterprise include its high cost, steep learning curve, and resource-intensive nature. Additionally, some users have reported performance issues and difficulties with scalability as their data volumes increase. However, these criticisms are subjective and may not apply to all users and use cases. To determine if Splunk Enterprise is the right fit for your needs, it is recommended to carefully evaluate your requirements and conduct thorough testing and evaluation.
What problems is the product solving and how is that benefiting you?
Splunk Enterprise is a tool that helps organizations to collect, store, and analyze large amounts of data generated by their systems, applications, and devices. It provides a centralized platform for managing and visualizing this data, allowing organizations to gain insights and make data-driven decisions.
By solving the problem of data management and analysis, Splunk Enterprise benefits organizations in the following ways:
Improved decision making: Splunk Enterprise provides real-time insights into complex and diverse data, allowing organizations to make informed decisions based on data-driven insights.
Increased efficiency: The centralized platform provided by Splunk Enterprise helps organizations to streamline data management and analysis, reducing the time and resources required to gain insights from their data.
Better security: Splunk Enterprise can help organizations to detect and respond to security incidents, improving their overall security posture.
Increased agility: With Splunk Enterprise, organizations can quickly respond to changes and opportunities in their data, enabling them to be more agile and competitive.
Improved compliance: Splunk Enterprise can help organizations to meet regulatory and compliance requirements by providing a centralized platform for data management and analysis.
Overall, by solving the problem of data management and analysis, Splunk Enterprise provides organizations with the tools and insights they need to make informed decisions and improve their operations.
By solving the problem of data management and analysis, Splunk Enterprise benefits organizations in the following ways:
Improved decision making: Splunk Enterprise provides real-time insights into complex and diverse data, allowing organizations to make informed decisions based on data-driven insights.
Increased efficiency: The centralized platform provided by Splunk Enterprise helps organizations to streamline data management and analysis, reducing the time and resources required to gain insights from their data.
Better security: Splunk Enterprise can help organizations to detect and respond to security incidents, improving their overall security posture.
Increased agility: With Splunk Enterprise, organizations can quickly respond to changes and opportunities in their data, enabling them to be more agile and competitive.
Improved compliance: Splunk Enterprise can help organizations to meet regulatory and compliance requirements by providing a centralized platform for data management and analysis.
Overall, by solving the problem of data management and analysis, Splunk Enterprise provides organizations with the tools and insights they need to make informed decisions and improve their operations.
The Power of Splunk Enterprise
What do you like best about the product?
One of the most powerful and versatile features of Splunk Enterprise is its advanced search capabilities. This feature allows users to perform real-time and historical searches, as well as complex queries and analysis on large datasets. This enables users to quickly and easily find the information they need and gain valuable insights from their data. Additionally, the ability to create visualizations and dashboards can help users to quickly identify patterns and trends in the data and make data-driven decisions. The machine learning and statistical modeling capabilities of Splunk can also be a powerful tool for identifying patterns and anomalies in the data, which can be particularly useful for security and IT operations use cases.
What do you dislike about the product?
I find that certain features such as the initial setup and configuration process may be complex and time-consuming, especially for those who are new to the platform. Additionally, some users may find that the cost of the enterprise version of Splunk can be high and may not be feasible for smaller organizations with limited budgets. Some users may also find that certain features such as the machine learning and statistical modeling capabilities may require a significant amount of expertise and knowledge to effectively use.
It's worth noting that the complexity in the initial setup and configuration can be mitigated with the proper planning, training and resources. And the high cost of the enterprise version can be justified by the features it provides and the value it can bring to the organization, and the expertise and knowledge required for certain features can be acquired by training or hiring experts.
It's worth noting that the complexity in the initial setup and configuration can be mitigated with the proper planning, training and resources. And the high cost of the enterprise version can be justified by the features it provides and the value it can bring to the organization, and the expertise and knowledge required for certain features can be acquired by training or hiring experts.
What problems is the product solving and how is that benefiting you?
Helping our IT Operations. We use Splunk to collect and analyze log data from servers, networks, and applications, allowing IT teams to quickly identify and troubleshoot problems. By using Splunk's advanced search capabilities, our IT team can quickly find the root cause of issues and reduce mean time to resolution (MTTR). Additionally, Splunk's alerting and reporting capabilities can be used to set up automated alerts for specific events or conditions, which can help to proactively identify and resolve problems before they impact users. This can help to improve the availability and performance of IT systems, as well as reduce the overall cost of IT operations.
One of the finest tool for server operations monitoring
What do you like best about the product?
It's reporting feature and I like the most. I have CPU and memeory utilisation based reports coming to me. This helps me to mitigate the potential performance issue on servers. As a result we have minimal outages impacting business.
What do you dislike about the product?
So far so good. Earlier we were using Netcool and had had replaced it with SPLUNK. The experience is awesome.
What problems is the product solving and how is that benefiting you?
We have CPU, Memory, Disk and mission critical process monitoring enabled for all the servers using SPLUNK. This is further integrated with ServiceNow ticketing tool. As a result we are pro-actively mitigating compute crunch on the server and hence improving server performance and availability.
Awesome SIEM Tool Small and Medium Organizations
What do you like best about the product?
Its User Friendly for beginners to maintain and come with a Built-in case management system. Also gives a response very fast for any logs which come in Splunk. It makes integration very easy for other tools and technology.
What do you dislike about the product?
The license cost of the Enterprise is prohibitive because of the budget. So the startup organization can't afford the license. It also required a very steep learning Curve. And the tricky part is Automation.
What problems is the product solving and how is that benefiting you?
The best part of the Enterprise version is that it has many features compared to the free or community versions. Which also gives a huge drop back on the security capabilities of large organizations.
Powerful SIEM
What do you like best about the product?
Splunk can do a lot many things which free to use SIEM tools do nothave. It comes with ML/AL inbuilt and can also be used with different data sources by default.
What do you dislike about the product?
The price can be a little bit costly for new start-ups. The navigation in the app also needs to be changed so that we can get to the logs/alerts faster. It is kind of resource heavy.
What problems is the product solving and how is that benefiting you?
Understanding of different logs and data sources. It also gives us trends and provides us with reports that we can use for our internal audit and monitoring of security.
Best SIEM for medium-large oragnizations
What do you like best about the product?
Easy to maintain and comes in-built case management system. Fast response for any logs which come into Splunk. Easy integration with major tools and technology.
What do you dislike about the product?
The licensing cost for the enterprise version can be costly and may not be over budget for startups. The navigation panel needs to be improve so that we can find details easily.
What problems is the product solving and how is that benefiting you?
The enterprise version has many features which the free/community version does not have. This does increase our Security capabilities in a big enterprise environment.
showing 21 - 30