Splunk Enterprise Security Pros and Cons: Top 5 Advantages and Disadvantages

Quick AI Summary Based on G2 Reviews

Generated from real user reviews

Users value the ease of use of Splunk Enterprise Security, enhancing their monitoring and log management experience. (15 mentions)

Users appreciate the easy integrations of Splunk Enterprise Security, enabling seamless connection with various platforms and systems. (13 mentions)

Users highlight the impressive threat detection capabilities of Splunk Enterprise Security, enhancing security focus and reducing false alarms. (13 mentions)

Users value the effective features of Splunk Enterprise Security, enhancing security analysis with comprehensive logs and insights. (12 mentions)

Users appreciate the user-friendly interface of Splunk Enterprise Security, enabling efficient monitoring and attractive dashboards. (11 mentions)

Users note that the high cost of Splunk Enterprise Security is a major drawback for smaller organizations. (17 mentions)

Users find the initial implementation complex, needing expert resources and time to onboard Splunk Enterprise Security effectively. (8 mentions)

Users find the complex implementation of Splunk Enterprise Security challenging, requiring extensive expertise and resources. (6 mentions)

Users find the complexity and extensive setup of Splunk Enterprise Security to be time-consuming and challenging. (6 mentions)

Users find the difficult learning curve of Splunk Enterprise Security a challenge for beginners and costly to set up. (6 mentions)

5 Pros or Advantages of Splunk Enterprise Security

1. Ease of Use

Users value the ease of use of Splunk Enterprise Security, enhancing their monitoring and log management experience.

See 15 mentions

See Related User Reviews

Jordan M.

Enterprise (> 1000 emp.)

4.0/5

"Splunk in a security environment"

What do you like about Splunk Enterprise Security?

Splunk is easy to use/configure and to find what i need. plus, the splunk employees with whom we work are very talented and skilled

Ernesto M.

Mid-Market (51-1000 emp.)

5.0/5

"Easy to integrate, understand the workflows and to manage."

What do you like about Splunk Enterprise Security?

Splunk ES is easy to manage and understard even if you are new with SIEMs. The workflows are easy to follow and the language the splunk uses is easy t

2. Easy Integrations

Users appreciate the easy integrations of Splunk Enterprise Security, enabling seamless connection with various platforms and systems.

See 13 mentions

See Related User Reviews

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Robust SIEM Solution with Strong Ecosystem Support"

What do you like about Splunk Enterprise Security?

✅ Powerful Search and Correlation Capabilities Splunk Enterprise Security excels at log aggregation, correlation, and threat detection. The Search Pr

Ernesto M.

Mid-Market (51-1000 emp.)

5.0/5

"Easy to integrate, understand the workflows and to manage."

What do you like about Splunk Enterprise Security?

Splunk ES is easy to manage and understard even if you are new with SIEMs. The workflows are easy to follow and the language the splunk uses is easy t

3. Threat Detection

Users highlight the impressive threat detection capabilities of Splunk Enterprise Security, enhancing security focus and reducing false alarms.

See 13 mentions

See Related User Reviews

Naushad T.

Enterprise (> 1000 emp.)

4.5/5

"Splunk ES- Scalable SIEM for Large Enterprise"

What do you like about Splunk Enterprise Security?

The best thing about Splunk is the deep visibility it provides across the environment, along with its strong ability to correlate large volumes of sec

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Splunk user behavior"

What do you like about Splunk Enterprise Security?

It's great because it uses smart technology to spot unusual behavior from users that might signal security issues. It helps find potential threats ea

4. Features

Users value the effective features of Splunk Enterprise Security, enhancing security analysis with comprehensive logs and insights.

See 12 mentions

See Related User Reviews

Muhammad R.

Enterprise (> 1000 emp.)

5.0/5

"Unmatched Visibility and Customization for Security Operations"

What do you like about Splunk Enterprise Security?

What I like most about Splunk Enterprise Security is its ability to give clear and comprehensive visibility across the entire environment. The correla

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Robust SIEM Solution with Strong Ecosystem Support"

What do you like about Splunk Enterprise Security?

✅ Powerful Search and Correlation Capabilities Splunk Enterprise Security excels at log aggregation, correlation, and threat detection. The Search Pr

5. User Interface

Users appreciate the user-friendly interface of Splunk Enterprise Security, enabling efficient monitoring and attractive dashboards.

See 11 mentions

See Related User Reviews

Muhammad R.

Enterprise (> 1000 emp.)

5.0/5

"Unmatched Visibility and Customization for Security Operations"

What do you like about Splunk Enterprise Security?

What I like most about Splunk Enterprise Security is its ability to give clear and comprehensive visibility across the entire environment. The correla

RUDRA P.

Enterprise (> 1000 emp.)

5.0/5

"Splunk User Behavior Analytics Review"

What do you like about Splunk Enterprise Security?

Splunk User Behavior Analytics establishes baseline behaviors for users, devices, and applications using unsupervised machine learning algorithms. It

5 Cons or Disadvantages of Splunk Enterprise Security

1. Expensive

Users note that the high cost of Splunk Enterprise Security is a major drawback for smaller organizations.

See 17 mentions

See Related User Reviews

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Robust SIEM Solution with Strong Ecosystem Support"

What do you dislike about Splunk Enterprise Security?

❌ Learning Curve The flexibility of SPL is a double-edged sword. New analysts often struggle with query writing and alert customization unless they h

Ernesto M.

Mid-Market (51-1000 emp.)

5.0/5

"Easy to integrate, understand the workflows and to manage."

What do you dislike about Splunk Enterprise Security?

Might be very expensinve depend of how much data you are ingesting.

2. Complex Setup

Users find the initial implementation complex, needing expert resources and time to onboard Splunk Enterprise Security effectively.

See 8 mentions

See Related User Reviews

Naushad T.

Enterprise (> 1000 emp.)

4.5/5

"Splunk ES- Scalable SIEM for Large Enterprise"

What do you dislike about Splunk Enterprise Security?

The initial implementation is complicated and requires significant expertise, time, and resources. In our case, we had to extend the contract to a thi

Muhammad R.

Enterprise (> 1000 emp.)

5.0/5

"Unmatched Visibility and Customization for Security Operations"

What do you dislike about Splunk Enterprise Security?

What I dislike about Splunk Enterprise Security is that some of its features can be quite resource intensive. The platform is powerful, but it sometim

3. Complex Implementation

Users find the complex implementation of Splunk Enterprise Security challenging, requiring extensive expertise and resources.

See 6 mentions

See Related User Reviews

Naushad T.

Enterprise (> 1000 emp.)

4.5/5

"Splunk ES- Scalable SIEM for Large Enterprise"

What do you dislike about Splunk Enterprise Security?

The initial implementation is complicated and requires significant expertise, time, and resources. In our case, we had to extend the contract to a thi

Sanket S.

Mid-Market (51-1000 emp.)

5.0/5

"Navigating insider threats using Splunk"

What do you dislike about Splunk Enterprise Security?

Setting up and configuring this solution can be complex and time consuming. It may generates false positives, especially in the early stages of deplo

4. Complexity

Users find the complexity and extensive setup of Splunk Enterprise Security to be time-consuming and challenging.

See 6 mentions

See Related User Reviews

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Splunk user behavior"

What do you dislike about Splunk Enterprise Security?

it can be complex and require a lot of setup.

Sanket S.

Mid-Market (51-1000 emp.)

5.0/5

"Navigating insider threats using Splunk"

What do you dislike about Splunk Enterprise Security?

Setting up and configuring this solution can be complex and time consuming. It may generates false positives, especially in the early stages of deplo

5. Difficult Learning

Users find the difficult learning curve of Splunk Enterprise Security a challenge for beginners and costly to set up.

See 6 mentions

See Related User Reviews

Alexandra V.

Mid-Market (51-1000 emp.)

4.5/5

"Splunk Enterprise Security is the master log data collection and threat detection"

What do you dislike about Splunk Enterprise Security?

Advanced security settings not easy especially when new with the system. The support team deseves merit for being helpful and always available when in

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Neutral Experience"

What do you dislike about Splunk Enterprise Security?

Learning Curve is a steep. Take a bit of time to undersant everything

Top-Rated Alternatives

View All Alternatives

G2 reviews are authentic and verified.

Here's how.

Ashok V.

Senior Manager, Business Applications

Enterprise (> 1000 emp.)

7/31/2019

"Great logging and event monitoring tool that makes our debugging life easy"

4/5

What do you like best about Splunk Enterprise Security?

Splunk is a very great tool for logging our SFDC events and it's 6 months and one year option for having logs of our log headers and log details is a killer feature Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

The UI can be more interactive and they can also be little competitive with pricing as the one year option will cost you a fortune as an organization and small startup also need to afford this tool Review collected by and hosted on G2.com.

Verified User in Aviation & Aerospace

Small-Business (50 or fewer emp.)

3/18/2020

"Splunk security"

4/5

What do you like best about Splunk Enterprise Security?

I like the possibility do performan specific research about cybersecurity Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Nothing of particular,

Maybe splunk not Identity the threat in Real time Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

10/23/2019

"Best for security and network teams"

5/5

What do you like best about Splunk Enterprise Security?

Splunk gives you huge access to each end-point and everything on your environment. Especially, it allows you to make your own apps insdie the Splunk which makes it more fruitful. Because it can be customized according to your needs. As a cyber security team member, I was happy to use Splunk which made my event management like shelling peas. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

I can say nothing. May be price is a bit much for developing countries. However, Splunk still deserves it. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

Buy it, do not think too much. It is the best. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

We integrated our whole environment from softwares to devices. Log analysis for the company become easier via Splunk. Especially, user-defined alarms and reports are so useful. Review collected by and hosted on G2.com.

Riya S.

Full Stack Engineer Intern

Enterprise (> 1000 emp.)

7/26/2019

"Nice platform to see the error reports and logs"

5/5

What do you like best about Splunk Enterprise Security?

The best thing is you can setup it as your company wants. Moreover its a great software as a service for security. TO sell all the error logs in our development server we use Splunk in our company. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

The search is very slow, sometimes to search a particular log message it takes about 5 minutes. Moreover the error message doesn't come completely. Review collected by and hosted on G2.com.

Verified User in Security and Investigations

Mid-Market (51-1000 emp.)

7/23/2019

"Adaptive Response Feature"

5/5

What do you like best about Splunk Enterprise Security?

Enterprise Security Adaptive Response feature is very good where you can directly take action from the one console. Previously, Splunk is used for monitoring only and now it is used as a post mechanism also. For example, If some malicious event comes from the endpoint and you want to isolate that endpoint. You can create a new action and use that to isolate endpoint. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Splunk Enterprise is an add-on on Splunk so it is not isolated from other addon. We might face some security issue if other addons are conflicting with ES. It should come as a product incorporated on top of Splunk. I disliked the slowness of the App when it is installed on the lower configuration VM and it is very heavily built addon with so many javascript and python scripts. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

If you are looking for a security tool I would recommend to go with Splunk Enterprise Security. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

We are monitoring endpoint details of our customer and using adaptive response, will block the endpoint if any malicious activity happens on endpoint. This will help us to boost endpoint security. We are also using the correlation search feature to populate incident review page with the malicious events. Review collected by and hosted on G2.com.

Rmn C.

Ram chhura

Enterprise (> 1000 emp.)

4/16/2019

"Amazing tool to analyze huge logs accurately"

4.5/5

What do you like best about Splunk Enterprise Security?

The UI is so simple and interactive that you provide a simple search string and this powerful tool looks at your terabytes sized logs and show you result in an index form and that too in seconds. It also helps our OPS team to perform a log forensics. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

This tool becomes very expensive if you have huge logs and if the logs keep on increasing so will the price to use this tool. The support from SPLUNK team is not that great. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

Better response from the SPLUNK support team. May be change the price model a bit so that you can have more customers. I believe most the companies don't use this tool because it is so expensive. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

It helps us identify problems in our production environment. The alerts help us identify malicious activity since we have alerts set for certain events. Review collected by and hosted on G2.com.

Verified User in Telecommunications

Small-Business (50 or fewer emp.)

3/28/2019

"A powerful log aggregation solution with immensely useful tools built-in for popular applications."

3/5

What do you like best about Splunk Enterprise Security?

Configuration design: Thoughtful and mature documentation and design of the application regarding enterprise-class scaling on network storage.

-POWERFUL tools: The user interface lends itself to learning more about your organization from the logs you collect, through metrics of trends of the logs being gathered. There are also specific modules/add-ons for popular applications to provide more value and event-based monitoring, all without having to develop in-house dashboards and intelligence of those logs.

- Customization: You can create your own queries of logs, and event-based alerts. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Price: This product is not free for more than the minimal use. Pricing can be very expensive, relative to open source offerings. That is the trade-off you pay for not having in-house development of open source offerings. As this product is priced based on gigabytes of indexed logs, it is important to understand the scope of licensing necessary for your environment to determine if it is a good fit for your organization. Review collected by and hosted on G2.com.

Andrew Y.

Software Engineer

Computer Software

Mid-Market (51-1000 emp.)

2/26/2019

""Powerful and overhwelming SIEM""

5/5

What do you like best about Splunk Enterprise Security?

Its abilities to list tremendous measure of information into occasions inside seconds, the different applications and extra, and its representations. It encourages continuous examination and can list any sort of information, likewise the equipment necessities of splunk are less. Splunk does not require any database to store its recorded occasions. A great deal of help and help is accessible in the network. Its extremely exceptionally simple to set up and can take information contribution from different sources like remote hosts, logs, contents, records, organize and so forth. In addition there is a free form also which permits to list 500 MB of information for each day. In conclusion, its UI is very client friendly.The truth that we can total and relate any occasions that we need is an integral asset in distinguishing and ceasing malignant movement on or against our system Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

I truly hated the way that we need to restart splunk at whatever point arrangement documents are changed, however I comprehend the explanation for, regardless it, restart takes a considerable amount of time. Likewise look handling language sets aside some opportunity to learn, it has a great deal of directions. The splunk expectation to absorb information is enormous and can take over a month to learn splunk thouroughly. Normalizing information is trying in splunk. What's more, numerous addons are Common Information display (CIM) good in splunk. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

Get Splunk Enterprise for nothing to experiment with your utilization case, as a rule your confirmation of idea could undoubtedly be utilized as last examination application that you need at your Enterprise. The documentation is exhaustive for each theme from establishment, organization, look, advancement, and so on. In this way, you can give it a try.But still, recall this is a generally new administration and they are chipping away at including highlights while keeping the security of the Cloud. In the event that you are a genuine Splunk administrator, maybe complete a Self-Service Cloud alternative so you can complete things quicker. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

We are utilizing splunk to log all our web and application logs. Utilizing this log we are having an extraordinary straightforwardness at the season of posthumous an issue to investigate the example and investigate as needs be. Our splunk condition is utilized to help investigate issues, screen for security occurrences, and has even helped our police division situate in trouble individual's speedy enough to give mediation. Review collected by and hosted on G2.com.

paul R.

Software Engineer

Computer Software

Mid-Market (51-1000 emp.)

2/26/2019

"An incredible device which fills some needs.""

5/5

What do you like best about Splunk Enterprise Security?

It has exceptionally educational dashboard which enables us to see information about servers in our condition. It gives visuals to the client when we select graphical portrayal, enabling us to change signs into visual outlines for example pie outlines, diagrams, tables, and so on. It is anything but difficult to scale with extensive informational collections. It underpins different sorts of information with ongoing analyzing.Splunk is extremely simple to introduce and they give bundle to both linux and windows based opertaing framework. establishment is simple simply unfasten the bundle and set the way and you are prepared to utilize Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

It tends to be CPU serious if not cautious. Early discharges were a great deal carriage, yet remediation's were brisk and brief. The heap on our quests, a few inquiries take for eternity. In some cases we have incredible trouble with motivating different items to parse logs accurately into splunk.pretty costly Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

Get Splunk Enterprise for nothing to experiment with your utilization case, much of the time your evidence of idea could undoubtedly be utilized as last investigation application that you need at your Enterprise. The documentation is careful for each theme from establishment, organization, look, improvement, and so forth. Along these lines, you can give it a try.It merits the exertion and speculation to ensure your frameworks and information impression. There are different instruments that are accessible in the market that won't break your bank, anyway you get what you pay for. This apparatus gets you a total 360 degree perspective on the information impression. Anyway there will be an expectation to absorb information to get and you will probably find that you are immediately overpowered by the measure of things you can do. Particularly when you begin getting data from different sources and wish to associate that data into dashboards and applications Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Totaling, and completing an example coordinating of occasions that can fill us in as to whether any vindictive action is occurring. It gives us a total view into our general security pose with fitting drill downs into explicit information to perceive what's going on in the association. Gathering and breaking down information with Splunk is simple. Be that as it may, there are different items out there - Graylog, the ELK stack - which are free and do a similar thing - just with more work. Be that as it may, when you manufacture your dashboard, you are a great idea to go - toss as much information at it as you need. Review collected by and hosted on G2.com.

Usman S.

Senior Analyst, Technical

Enterprise (> 1000 emp.)

3/22/2019

"A powerful log aggregation solution "

3/5

What do you like best about Splunk Enterprise Security?

- Free to use for small 500MB or less daily ingress, quite nice for small use cases and learning

- No development work required to deploy and provide value.

- Deployment flexibility: client agents are available to use, or clientless configurations for multiple OS platforms. It's also very easy to deploy, not just flexible. its a very simple affair. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

PRICE. The software is so powerful, and they seem to leverage this in the pricing of the licenses. Review collected by and hosted on G2.com.

Categories on G2

Security Information and Event Management (SIEM)Incident Response AI SOC Agents

Explore More

What are the highest rated academic advising software platforms for reducing coordination errors in student placement workflows?What is the best theater management software for venue operations and capacity optimization?Top tools for managing employee records and payroll

Which cloud edge security providers give the strongest threat detection and response for companies with geographically distributed sites that need consistent enforcement everywhere?Top-rated digital marketing tools for small businesses Pros and Cons Details

Show MoreShow Less

4.3 out of 5 stars

Splunk Enterprise Security Pros and Cons: Top 5 Advantages and Disadvantages

Quick AI Summary Based on G2 Reviews

5 Pros or Advantages of Splunk Enterprise Security

1. Ease of Use

2. Easy Integrations

3. Threat Detection

4. Features

5. User Interface

5 Cons or Disadvantages of Splunk Enterprise Security

1. Expensive

2. Complex Setup

3. Complex Implementation

4. Complexity

5. Difficult Learning

Top-Rated Alternatives

Splunk Enterprise Security Reviews (248)

Splunk Enterprise Security Reviews (248)

Filter Reviews

Categories on G2

Explore More