Splunk Enterprise Security Reviews & Product Details

I love how diverse this software is. It's easy to create simple dashboards and searches or you can create very complicated searches and filter through specific data. Dashboards can be created so that other members of the team that aren't so technical can easily look at the visuals and see what is going on. We use it in security for a bunch of different areas of the company. Review collected by and hosted on G2.com.

Somewhat of a learning curve to get set up and going. Review collected by and hosted on G2.com.

a crisp view of different logs and analytics Review collected by and hosted on G2.com.

ease of use and installation process can be improved Review collected by and hosted on G2.com.

Splunk is a very great tool for logging our SFDC events and it's 6 months and one year option for having logs of our log headers and log details is a killer feature Review collected by and hosted on G2.com.

The UI can be more interactive and they can also be little competitive with pricing as the one year option will cost you a fortune as an organization and small startup also need to afford this tool Review collected by and hosted on G2.com.

I like the possibility to perform specific research about cybersecurity Review collected by and hosted on G2.com.

Nothing in particular, maybe Splunk does not identify the threat in real time Review collected by and hosted on G2.com.

Splunk gives you huge access to each end-point and everything on your environment. Especially, it allows you to make your own apps inside the Splunk which makes it more fruitful. Because it can be customized according to your needs. As a cyber security team member, I was happy to use Splunk which made my event management like shelling peas. Review collected by and hosted on G2.com.

I can say nothing. Maybe the price is a bit much for developing countries. However, Splunk still deserves it. Review collected by and hosted on G2.com.

The best thing is you can set it up as your company wants. Moreover, it's a great software as a service for security. To sell all the error logs in our development server, we use Splunk in our company. Review collected by and hosted on G2.com.

The search is very slow, sometimes to search a particular log message it takes about 5 minutes. Moreover, the error message doesn't come completely. Review collected by and hosted on G2.com.

Enterprise Security Adaptive Response feature is very good where you can directly take action from the one console. Previously, Splunk is used for monitoring only and now it is used as a post mechanism also. For example, If some malicious event comes from the endpoint and you want to isolate that endpoint. You can create a new action and use that to isolate endpoint. Review collected by and hosted on G2.com.

Splunk Enterprise is an add-on on Splunk so it is not isolated from other addon. We might face some security issue if other addons are conflicting with ES. It should come as a product incorporated on top of Splunk. I disliked the slowness of the App when it is installed on the lower configuration VM and it is very heavily built addon with so many javascript and python scripts. Review collected by and hosted on G2.com.

The UI is so simple and interactive that you provide a simple search string and this powerful tool looks at your terabytes sized logs and show you result in an index form and that too in seconds. It also helps our OPS team to perform a log forensics. Review collected by and hosted on G2.com.

This tool becomes very expensive if you have huge logs and if the logs keep on increasing so will the price to use this tool. The support from SPLUNK team is not that great. Review collected by and hosted on G2.com.

Configuration design: Thoughtful and mature documentation and design of the application regarding enterprise-class scaling on network storage.

-POWERFUL tools: The user interface lends itself to learning more about your organization from the logs you collect, through metrics of trends of the logs being gathered. There are also specific modules/add-ons for popular applications to provide more value and event-based monitoring, all without having to develop in-house dashboards and intelligence of those logs.

- Customization: You can create your own queries of logs, and event-based alerts. Review collected by and hosted on G2.com.

Price: This product is not free for more than the minimal use. Pricing can be very expensive, relative to open source offerings. That is the trade-off you pay for not having in-house development of open source offerings. As this product is priced based on gigabytes of indexed logs, it is important to understand the scope of licensing necessary for your environment to determine if it is a good fit for your organization. Review collected by and hosted on G2.com.

Its abilities to list tremendous amounts of information into events within seconds, the various applications and add-ons, and its visualizations. It encourages continuous analysis and can index any kind of data, also the hardware requirements of Splunk are minimal. Splunk does not require any database to store its recorded events. A great deal of support and help is available in the community. It's extremely easy to set up and can take data input from various sources like remote hosts, logs, scripts, files, network, etc. Moreover, there is a free version that allows indexing 500 MB of data per day. In conclusion, its UI is very user-friendly. The fact that we can aggregate and correlate any events we want is a powerful tool in identifying and stopping malicious activity on or against our network. Review collected by and hosted on G2.com.

I truly hated the fact that we need to restart Splunk whenever configuration files are changed, but I understand the reason behind it; still, the restart takes quite a bit of time. Also, learning the search processing language takes some time, as it has a lot of commands. The Splunk learning curve is steep and can take over a month to learn thoroughly. Normalizing data is challenging in Splunk. Moreover, many add-ons are Common Information Model (CIM) compatible in Splunk. Review collected by and hosted on G2.com.