Splunk Enterprise Security Reviews & Product Details

It's great because it uses smart technology to spot unusual behavior from users that might signal security issues. It helps find potential threats early and reduce false alarms, making it easier for security teams to focus on real problems. Review collected by and hosted on G2.com.

it can be complex and require a lot of setup. Review collected by and hosted on G2.com.

Once the application is setup, using the application is relatively easy with a low learning curve. Review collected by and hosted on G2.com.

Licensing for splunk can be very expensive Review collected by and hosted on G2.com.

Versatility of Splunk Intelligence Management in handling various types of data and providing insights across different domains Review collected by and hosted on G2.com.

Learning Curve is a steep. Take a bit of time to undersant everything Review collected by and hosted on G2.com.

Configuration design: Thoughtful and mature documentation and design of the application regarding enterprise-class scaling on network storage.

-POWERFUL tools: The user interface lends itself to learning more about your organization from the logs you collect, through metrics of trends of the logs being gathered. There are also specific modules/add-ons for popular applications to provide more value and event-based monitoring, all without having to develop in-house dashboards and intelligence of those logs.

- Customization: You can create your own queries of logs, and event-based alerts. Review collected by and hosted on G2.com.

Price: This product is not free for more than the minimal use. Pricing can be very expensive, relative to open source offerings. That is the trade-off you pay for not having in-house development of open source offerings. As this product is priced based on gigabytes of indexed logs, it is important to understand the scope of licensing necessary for your environment to determine if it is a good fit for your organization. Review collected by and hosted on G2.com.

- Free to use for small 500MB or less daily ingress, quite nice for small use cases and learning

- No development work required to deploy and provide value.

- Deployment flexibility: client agents are available to use, or clientless configurations for multiple OS platforms. It's also very easy to deploy, not just flexible. its a very simple affair. Review collected by and hosted on G2.com.

PRICE. The software is so powerful, and they seem to leverage this in the pricing of the licenses. Review collected by and hosted on G2.com.

I love that pretty much ANY logs from other applications can be ingested into Splunk. The ability to search and find data during a forensic investigation is critical and can help find a root cause. Review collected by and hosted on G2.com.

The cost. $10K per 10GB of log data ingestion. The more you ingest the greater the value, and you want to add more, but the cost keeps going up and up. Review collected by and hosted on G2.com.

Alerts and error logs that receives via emails Review collected by and hosted on G2.com.

Searching in splunk through queries is kind of difficult Review collected by and hosted on G2.com.

Splunk makes it easy to put data in and get data out - exactly what you would hope for from this kind of product. Dashboards are easy to create and share. Data is easy and fast to query because of the Splunk indexing engine. Review collected by and hosted on G2.com.

Splunk uses its own proprietary query language to its one extra thing to learn before you can begin to get value out of the system. Also, while there are several types of dashboards you can make, they are not super flexible to customize out of the box so you have to rely on third party extensions. Review collected by and hosted on G2.com.

Event monitoring and Error analysis through logs Review collected by and hosted on G2.com.

Interface is not very intuitive. Commands used for queries are not straightforward. Review collected by and hosted on G2.com.

Ease of indexer support on Splunk Cloud. Review collected by and hosted on G2.com.

Very hard to make use of Splunk Enterprise, way too much build, index mapping to useful correlation rules for ES to be functional. Review collected by and hosted on G2.com.