Quickk and easy set up and useful for simple testing
I read one review that said that THP was not supported on the instance, but I checked on mine and it was properly configured. I did have a couple of errors that showed that there may have been some files that were not verified as being Splunk installed and that the instance fell below the suggested minimums for running Splunk, but I was just using a Free EC2 instance to try things out.
The web interface came up quickly and with out problems and I was able to install apps quickly and easily. I added some data and had things working well quite quickly. I would like to try a larger AMI instance, but for the testing I did. It was quite usable.
Splunk is just couple of clicks away!
I've been using Splunk Enterprise on premises for few years.
And it is hands down the best product I've come across in 15+ sysadmin years.
No, really, I've seen some really nice pieces of software but none of them comes even close. And the Splunk AMI just makes the starting the use of all Splunk Enterprise features so much faster that it is a no-brainer. New or old Splunk user: Grab it. Throw some data, any data, to it and start Splunkin' !
Trying Splunk AMI for the first time
I use Splunk Enterprise Security at work.
Currently studying for my architect certification. I know Splunk AMI on AWS will be the perfect platform for my lab.
Consolidated Management
What do you like best about the product?
Splunk is simply awesome. You can integrate it with almost all vendors.
What do you dislike about the product?
Norhing to dislike so far so good . But can get better !
What problems is the product solving and how is that benefiting you?
Incident Analysis
Great tool for watching for threats on your network
What do you like best about the product?
The dashboards that Splunk uses (that are able to be customized to your needs) are second to none.
What do you dislike about the product?
Splunk has a pricing model where the cost of their software has to do with the amount of data that it ingests. I would rather see something that was done on a node basis rather than total amount of data.
What problems is the product solving and how is that benefiting you?
Splunk helps my company better monitor the network for suspicious activity.
Recommendations to others considering the product:
Splunk takes a bit to get running. I would suggest that anyone looking into implementing Splunk send any team member planning to use this software to the vendor training courses.
Reviewing Splunk
What do you like best about the product?
Reports and queries are fast ready when mangemen makes a request.
What do you dislike about the product?
Queries need to be individually customized to specific reports.
What problems is the product solving and how is that benefiting you?
Search and researching for enterprise errors and reports from a consolidated location
Powerful Product With An Intuitive User Interface
What do you like best about the product?
Great for visualizing any application data that is required and the custom dashboard feature makes it easy to have related reports and queries all in one place.It's easy to understand the interface, graphs are good and can be easily exported. The keywords on the left side are very helpful.
What do you dislike about the product?
I would say query building which might be a steep for non technical user. Also licensing the Splunk software would be little expensive so the best thing would be to start with a small amount of data and see it if works for you or not.
What problems is the product solving and how is that benefiting you?
I have used Splunk for the capacity planning which covered setting up the forwarder in the source system and creating multiple dashboards as per the requirements. Also try Splunk dashboards & perform automation through a script using the Splunk API.
Recommendations to others considering the product:
Test it out in an enterprise environment, that's where all the bells and whistles shine out.
Splunk
What do you like best about the product?
Splunk has thorough logging and makes it very easy to sort and filter based on a specific timeframe.
What do you dislike about the product?
There is a bit of a learning curve to Splunks query language.
What problems is the product solving and how is that benefiting you?
We are using Splunk for capturing the logs of our XML Firewall. The logs are much more granular than using what is offered in the Firewall application.
Splunk is great for mining data and reporting on that data
What do you like best about the product?
Its easy to define the search parameters and to change them on the fly, you can also build graphs to view the progression of the trend. If you use the data often, build a dashboard and consume the data when you need it.
What do you dislike about the product?
you have to remember all the names of the field in the database for a successful query
What problems is the product solving and how is that benefiting you?
We are improving on view server logs and the resulting errors. This allows us to fix issues that we have now and spot trends that may come later.
Recommendations to others considering the product:
If you have server logs to be consumed by anyone this program is a must.
Great tools for searching, organizing and visualizing logs
What do you like best about the product?
Easy to use UI and operation to organize data and visualize it. Also great to use the stored template or report to quickly checkout the reports needed.
What do you dislike about the product?
Sometimes when the data size is large, the response time is slow.
What problems is the product solving and how is that benefiting you?
We have logged tons of application & system logs to Splunk. It helps us to quick monitor some realtime issues and address the system problem to protect the business.
