Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Splunk Review
What do you like best about the product?
Splunk is the most capable SIEM tool out there. Its query language SPL is very efficient and it returns the result very fast.
It takes less time than any other SIEM tool I have used, to return the result of the query.
Also, its capability to use and define a statistical model in rule is another feature that I like most.
It takes less time than any other SIEM tool I have used, to return the result of the query.
Also, its capability to use and define a statistical model in rule is another feature that I like most.
What do you dislike about the product?
Its UI is not as rich as it should be due to which it takes time to onboard new Analysts into Splunk as they need more time to get familiar with SPL query language.
Also its little bit expensive and small organizations might not afford it.
Also its little bit expensive and small organizations might not afford it.
What problems is the product solving and how is that benefiting you?
Real-time threat detection, alert generation, analysis, and investigation.
Log management and retention.
Historical co-relation of security events.
Data Analysis and visulation.
Log management and retention.
Historical co-relation of security events.
Data Analysis and visulation.
- Leave a Comment |
- Mark review as helpful
An amazing tool for searching important data from a large data
What do you like best about the product?
Splunk is an amazing tool where we can monitor and get logs of every activity done in the system. The best thing about splunk is its visualization and reporting ability. We can create customized dashboards for monitoring. Overall it's an amazing tool.
What do you dislike about the product?
There isn't anything that i don't like about Splunk but the only and major drawback is it's cost. It is bery expensive tool and the other major drawback of splunk is it's less interactive user interface. Otherwise it's an amazing tool for monitoring.
What problems is the product solving and how is that benefiting you?
In my organization, we use splunk for monitoring and analysing the system issues as whenever we get error in our system we can get it done. Splunk also helps in creating system reports and enhancing system performance.
SPLUNK Enterprise
What do you like best about the product?
SPLUNK was a nice data analytic tool till the advanced SOAR function tools emerged in the market.
What do you dislike about the product?
Lacks advanced SOAR function. Not pocket friendly as other SAS products are eg Sentinel.
What problems is the product solving and how is that benefiting you?
I was using Splunk for Threat Hunting and Incident investigation. Now I have switched to Microsoft Sentinel as it offers SOAR function and better data analytics at a competitive price.
Splunk a capible sytem that needs regular maintance.
What do you like best about the product?
he multiple plugins from vendors that are available for Splunk. The Security Essentials module is really all we needed for our SOC
What do you dislike about the product?
The constant need to update and configure our cloud instance. Updates require a lot of manual intervention.
What problems is the product solving and how is that benefiting you?
We use it for our SIEM and Splunk's Phantom for our SOAR. Our SOC would not have time to handle all alerts without SOAR. Splunk's Security Essentials really covers all our Monitoring and Alerting needs out of the box and with little setup. The prebuilt compliance reporting is also nice in that we can in just a few clicks get tailored reports for all the different states that we do business in.
Amazing tool for searching and monitoring and examining large amount of data.
What do you like best about the product?
Great tool for searching and monitoring data like system logs and other big data. Also unable alerting and reporting. We can create customize dashboards for monitoring. And setup alerts to notify anomalies in the system. Overall a great tool. Does it's job efficiently and effectively.
What do you dislike about the product?
Overall a great tool but cost can be reduced for large volumes of data. Dashboards are effective but could be more interactive. Search can be complex at times but it does it's job. Overall I like the tool.
What problems is the product solving and how is that benefiting you?
In my company, we are using Splunk for monitoring and analyzing system issues and system performance. We also use dashboards for validation and time of production releases.
It is also used for creating reports and analyzing system performance.
It is also used for creating reports and analyzing system performance.
Splunk review with trend Micro Vision One(XDR)
What do you like best about the product?
Very in-depth and informative. dashboards are easy to read and understand
What do you dislike about the product?
No dislikes so far. it has been everything we were looking for in log aggregation
What problems is the product solving and how is that benefiting you?
Which machines may have been compromised or any changes been made
Splunk architect 10 years of experience
What do you like best about the product?
Flexible SPL
Data onboarding from any source
Splunk apps
Data analytics
High availability
Data onboarding from any source
Splunk apps
Data analytics
High availability
What do you dislike about the product?
High splunk license costs
High resources requirements
High resources requirements
What problems is the product solving and how is that benefiting you?
Splunk data help us resolving major outage, troubleshooting, root cause analysis, correlation etc
Splunk Enterprise
What do you like best about the product?
Leading industry monitoring tool for performance,data analysis,data integration , Application sensors, custom application.
Virtual machines , hyper version and for cloud services.
Virtual machines , hyper version and for cloud services.
What do you dislike about the product?
Worth using it and everything is upto the expectations.
Good to have product for IT industry
Need little UI improvements and on-time patches.
Apart from these no Dislikes.
Good to have product for IT industry
Need little UI improvements and on-time patches.
Apart from these no Dislikes.
What problems is the product solving and how is that benefiting you?
Application monitoring, Security logs, daily logs and weekly logs.
Data Virtulization and analysis.
Servers ,VMs and data center security logs.
It can be used for multiple vendor platform.
Data Virtulization and analysis.
Servers ,VMs and data center security logs.
It can be used for multiple vendor platform.
Nastel Autopilot integrations with splunk.
What do you like best about the product?
reporting based upon Autopilot generated events.
What do you dislike about the product?
The inability to easily share splunk data with other tools.
What problems is the product solving and how is that benefiting you?
Aggregate event data into ITSI as an alert console and provide data for troubleshooting and Root Cause Analysis/problem mitigation.
Recommendations to others considering the product:
While expensive to index large amounts of data, the ability to capture log data and review it where you might not have access to the physical server is crucial for troubleshooting.
Best Analytics Software
What do you like best about the product?
The possibility of creating fast parsing rules on custom logs and start analyze the data as soon as possible in a friendly and easy-to-use graphic user interface.
What do you dislike about the product?
Even if Splunk is a very powerful tool, it comes at a pretty bitter cost. If there is not enough budget, this is not a platform that you'll look after. There are a few open source solutions that can accommodate simple use-cases using less money.
What problems is the product solving and how is that benefiting you?
You can search and monitor almost any type of data you need.
From OS-specific logs to any custom logs required to be ingested, you can get a full visibility in no time.
From OS-specific logs to any custom logs required to be ingested, you can get a full visibility in no time.
showing 91 - 100