Sign in
Categories
Your Saved List Become a Channel Partner Sell in AWS Marketplace Amazon Web Services Home Help

Splunk SOAR

Splunk | 6.2.2

Linux/Unix, CentOS 7 - 64-bit Amazon Machine Image (AMI)

Reviews from AWS Marketplace

1 AWS reviews
  • 5 star
    0
  • 4 star
    0
  • 1
  • 2 star
    0
  • 1 star
    0

External reviews

403 reviews
from G2

External reviews are not included in the AWS star rating for the product.


    Dayana P.

With splunk enterprise we quickly detect the drawbacks

  • July 26, 2022
  • Review provided by G2

What do you like best about the product?
It has an alert system that warns us in real time of any vulnerability in the system, any funnel or any error and in this way we can solve it quickly. It also allows the easy creation of custom work panels and customize the platform interface to work and have at hand, the tools we use the most.
What do you dislike about the product?
It can have a high learning curve, even for educated employees, so time is required for training. I wish that some basic functions could work without the need for internet access, no doubt my work would be faster. From the installation of the software to its use, it is a long process, because to configure it is confusing and sometimes we need the help of technical staff.
What problems is the product solving and how is that benefiting you?
This is one of the best programs we have used for monitoring data from our computers and applications, getting to know in real time the problems that may arise and thanks to its alerts and notifications, to solve the problem. I love that we can easily monitor application data, as well as know the performance of each one. It is simply a great tool.


    Computer Software

Sophos Integration with Splunk

  • July 18, 2022
  • Review provided by G2

What do you like best about the product?
Splunk is easy to integrate with all other applications through agent and heavy forwarder.
What do you dislike about the product?
Need to build so many use cases for building so alerts.
What problems is the product solving and how is that benefiting you?
Monitor the environment from soc end and mail notification with alerts. It solved our manual monitoring.


    Computer Software

Splunk Enterprise integration for SOPHOS

  • July 18, 2022
  • Review provided by G2

What do you like best about the product?
it is easy to integrate between splunk and Sophos threat Management system.
What do you dislike about the product?
Some queries for test cases should be there to help the implementation team.
What problems is the product solving and how is that benefiting you?
We are getting all the events in our splunk and we are able to take necessary action in SOC.


    Computer & Network Security

Best Application for monitoring and analysis.

  • July 15, 2022
  • Review provided by G2

What do you like best about the product?
It's been quite some time since I started using Splunk and I must say it's really easy and convenient to use and clearly does its job. My company uses Splunk for log analysis and as per my experience, it's easy to get knowledge on most of the features. No hard training is required. Creating a dashboard requires some deep knowledge but once created it will be easier to understand logs. It is a really helpful tool for security analysis.
What do you dislike about the product?
Nothing much but yes, it is costly and it requires high memory uses from the system it's running on. Just because of this it is not preferred in small organizations.
What problems is the product solving and how is that benefiting you?
A clear understanding of Raw logs which are unreadable and then the major use is for security analysis based on alerts created. Monitoring and analysis are quite easy based on search strings in logs.


    Security and Investigations

just imagine, you can do it with splunk!

  • July 11, 2022
  • Review provided by G2

What do you like best about the product?
SPL is one and only, whatever you can imagine, you can do it with SPL
What do you dislike about the product?
Data pipeline and conf files are still hard to understand if you have no enough knowledge.
What problems is the product solving and how is that benefiting you?
- Splunk gives you advanced visibility and correlation options with different data sources
- Statistical and ML approaches can be done so easily and with no coding.
- advanced dashboarding within a minute
- Splunk has the ability to do advanced threat hunting for security
Recommendations to others considering the product:
haven't started statistics and ML, and you don't know python as well. this is the best place to start.
game changer for log management system.


    Financial Services

Very complete and usable log and search system

  • July 05, 2022
  • Review provided by G2

What do you like best about the product?
Splunk Enterprise it is very versatile and could be integrated with a number of systems. We have used Splunk Connector in Kubernetes environment with great success. It would collect and forward all logs with ease.
What do you dislike about the product?
You need to learn what structure of data Splunk expects and modify your ingest data to that model. You also need to learn about to your environment so you know to which index you will load your data.
What problems is the product solving and how is that benefiting you?
All the logs from the environment are at your fingertips. With microservices, it could be hard to collect all the logs and present them in one place. You get nice dashboards and great search capabilities of logs.
Recommendations to others considering the product:
Great tool for log analysis. Probably the best.


    Banking

Finally could replace splunk

  • June 30, 2022
  • Review provided by G2

What do you like best about the product?
Analytics engine, functionality and Dashboards.
What do you dislike about the product?
Price increase move to cloud, support flexibility.
What problems is the product solving and how is that benefiting you?
Log collection and management for a different need, security, Monitoring, and analysis i.e. Error forensic etc.
Recommendations to others considering the product:
Fix the prices, read the contracts carefully, and keep an eye on the volume. Use Splunk selectively plan and monitor the data volume


    Saranyan Sankrith S.

Splunk Tool

  • June 26, 2022
  • Review provided by G2

What do you like best about the product?
Splunk helps us manage our services better, Querying in Splunk is very powerful and it is very much useful while handling many Applications within the organization,
What do you dislike about the product?
The Learning curve is kind of steep, you can understand the true power of Splunk features only in a long run as it is designed to handle hundreds of applications of an organization
What problems is the product solving and how is that benefiting you?
For a very big organization that is functioning from different geographical locations, Splunk helps in maintaining the sanity of all the applications and its change outages.


    Manzar A.

Splunk Review

  • May 13, 2022
  • Review provided by G2

What do you like best about the product?
Splunk is the most capable SIEM tool out there. Its query language SPL is very efficient and it returns the result very fast.
It takes less time than any other SIEM tool I have used, to return the result of the query.
Also, its capability to use and define a statistical model in rule is another feature that I like most.
What do you dislike about the product?
Its UI is not as rich as it should be due to which it takes time to onboard new Analysts into Splunk as they need more time to get familiar with SPL query language.
Also its little bit expensive and small organizations might not afford it.
What problems is the product solving and how is that benefiting you?
Real-time threat detection, alert generation, analysis, and investigation.
Log management and retention.
Historical co-relation of security events.
Data Analysis and visulation.


    Tarang N.

An amazing tool for searching important data from a large data

  • April 30, 2022
  • Review provided by G2

What do you like best about the product?
Splunk is an amazing tool where we can monitor and get logs of every activity done in the system. The best thing about splunk is its visualization and reporting ability. We can create customized dashboards for monitoring. Overall it's an amazing tool.
What do you dislike about the product?
There isn't anything that i don't like about Splunk but the only and major drawback is it's cost. It is bery expensive tool and the other major drawback of splunk is it's less interactive user interface. Otherwise it's an amazing tool for monitoring.
What problems is the product solving and how is that benefiting you?
In my organization, we use splunk for monitoring and analysing the system issues as whenever we get error in our system we can get it done. Splunk also helps in creating system reports and enhancing system performance.