External reviews
External reviews are not included in the AWS star rating for the product.
I really love working on slunk enterprise as it is user friendly.
What do you like best about the product?
It's GUI very gives all the features the same as the backend as well. Also, love the case management feature as well.
What do you dislike about the product?
It is pretty costly. That's the only backdrop I see.
What problems is the product solving and how is that benefiting you?
I use Splunk for SIEM and case management as well for monitoring purposes.
- Leave a Comment |
- Mark review as helpful
Splunk is very good product such a great experience while using Splunk.
What do you like best about the product?
Splunk provides excellent service because we need to cover all the tools logs and give all the expected values also while analyzing records, it provides such an excellent service.
What do you dislike about the product?
Most probably not muck dislike, but sometimes it's taking much time for the given output of queries, but the whole scenario, it's a great product. Not another aversion from my end.
What problems is the product solving and how is that benefiting you?
One Time i was an issue while catching the cloud logs from the tool console. So I used the Splunk tool, which provided me with complete records for all the required time.
A must have tool to know your environment better and troubleshoot issues
What do you like best about the product?
I use Splunk every day to troubleshoot network-related issues and identify the root cause of the problems. Splunk is a great tool to correlate the event logs from multiple sources and get a deeper understanding of what is happening in your environment. Splunk is a powerful tool to visualize the events logs and highly customizable queries, get metrics and monitor any abnormality in your environment.
What do you dislike about the product?
Due to the scale of our environment, I have observed performance issues sometimes, queries are queued, and it takes time to return the query result.
What problems is the product solving and how is that benefiting you?
Cyber threat management, even correlation, Log management, and efficient incident management.
Making Tenable.io talk to Splunk
What do you like best about the product?
Integrating Tenable.io with Splunk was far easier than I initially thought. All thanks to a nifty Plugin that does all the hard work for you.
Enter your details in the plugin for both sides of communication, and there you go. It can't get easier than that.
Enter your details in the plugin for both sides of communication, and there you go. It can't get easier than that.
What do you dislike about the product?
The plugin only worked on version 4, which gave some issues in the beginning, but after upgrading, all went well.
Only other potential issue i foresee is that newbies might get a little overwhelmed with the cheer amount of data that can be imported.
Only other potential issue i foresee is that newbies might get a little overwhelmed with the cheer amount of data that can be imported.
What problems is the product solving and how is that benefiting you?
Importing any telemetry data into Splunk makes monitoring much easier as I don't nessacarily need to log into Tenable,io and Splunk Interface. Splunk can feed me all the info I need and want
Very powerful software for data analysis
What do you like best about the product?
Easy to create quick report and custom logs
What do you dislike about the product?
The dashboard could be more streamlined and intuitive
What problems is the product solving and how is that benefiting you?
Manage, store and analyze large amount of data
Integration with Zscaler
What do you like best about the product?
GUI is very easy to understand and configure.
It will not take more than 5mins to integrate with zscaler.
We can export the logs in pdf format which is very easy to read.
It will not take more than 5mins to integrate with zscaler.
We can export the logs in pdf format which is very easy to read.
What do you dislike about the product?
Applying filters to search the logs because it is very difficult to apply the correct filter. Need some document for filters.
What problems is the product solving and how is that benefiting you?
In zscaler we can not check live logs without SIEM. So we integrated Splunk with Zscaler and that resolved our issue.
Splunk is the tool to make sense of data
What do you like best about the product?
Versatility and flexibility, a vast range of add-ons, great community and support, various options for different budgets, good integration options with various tools and vendors.
What do you dislike about the product?
Splunk is not easy to start up with and it requires good Linux and Systems skills. A very steep learning curve should be anticipated. Deployment automation can be hard or not possible at all.
What problems is the product solving and how is that benefiting you?
We use Splunk for multiple purposes: data aggregation from variuos log and stream sources, correlation and analysis, reporting and alerting. Splunk's strongest suit is to ingest unstructured data and convert it to structured, thus providing us the sense of data.
Splunk
What do you like best about the product?
Splunk is the most effective but expensive tool for cybersecurity analysis
What do you dislike about the product?
The one factor that I dislike in splunk is the pricing for the licence
What problems is the product solving and how is that benefiting you?
It helps to identify the real time threats in the current world and alerts so that we could mitigate the issue quickly
Splunk Enterprise Security provides simplified threat management
What do you like best about the product?
Splunk Enterprise Security provides simplified threat management that facilitates quick threat detection and response and minimizes risk.
What do you dislike about the product?
Pricing gets a bit higher for large data volumes. The optimization of searches is more of an art than just science. Dashboard is a bit harsh as compared to tableau. It is continuously making attempts to replace it with open source alternatives.
What problems is the product solving and how is that benefiting you?
Splunk Enterprise Security is an analytic-driven SIEM solution that can combat threats with actionable intelligence and advanced analytics at scale. With the goal of perfecting your security operations and reducing risks, Splunk is the security platform that enables you to detect, investigate, and respond in real-time.
just imagine, you can do it with splunk!
What do you like best about the product?
SPL is one and only, whatever you can imagine, you can do it with SPL
What do you dislike about the product?
Data pipeline and conf files are still hard to understand if you have no enough knowledge.
What problems is the product solving and how is that benefiting you?
- Splunk gives you advanced visibility and correlation options with different data sources
- Statistical and ML approaches can be done so easily and with no coding.
- advanced dashboarding within a minute
- Splunk has the ability to do advanced threat hunting for security
- Statistical and ML approaches can be done so easily and with no coding.
- advanced dashboarding within a minute
- Splunk has the ability to do advanced threat hunting for security
Recommendations to others considering the product:
haven't started statistics and ML, and you don't know python as well. this is the best place to start.
game changer for log management system.
game changer for log management system.
showing 31 - 40