
What I like best about Splunk Enterprise Security is its powerful threat detection and investigation capabilities. It provides a centralized view of security events from multiple sources, making it easier to monitor and analyze security incidents. The correlation searches, customizable dashboards, and threat intelligence integrations help reduce investigation time and improve overall security visibility. I also appreciate its scalability and flexibility, which allow it to adapt to different organizational requirements and large volumes of security data. Review collected by and hosted on G2.com.
One aspect I dislike about Splunk Enterprise Security is that it can have a steep learning curve, especially for new users who are not familiar with Splunk's search language and advanced configurations. The platform is highly capable, but setting up and tuning correlation rules can take time and expertise. Additionally, managing large data volumes can become expensive, and some dashboards or searches may require optimization to maintain performance in larger environments. However, once properly configured, the platform delivers strong security monitoring and investigation capabilities. Review collected by and hosted on G2.com.






