Splunk Enterprise Security Reviews & Product Details

a crisp view of different logs and analytics Review collected by and hosted on G2.com.

ease of use and installation process can be improved Review collected by and hosted on G2.com.

Splunk is a very great tool for logging our SFDC events and it's 6 months and one year option for having logs of our log headers and log details is a killer feature Review collected by and hosted on G2.com.

The UI can be more interactive and they can also be little competitive with pricing as the one year option will cost you a fortune as an organization and small startup also need to afford this tool Review collected by and hosted on G2.com.

I like the possibility to perform specific research about cybersecurity Review collected by and hosted on G2.com.

Nothing in particular, maybe Splunk does not identify the threat in real time Review collected by and hosted on G2.com.

Splunk gives you huge access to each end-point and everything on your environment. Especially, it allows you to make your own apps inside the Splunk which makes it more fruitful. Because it can be customized according to your needs. As a cyber security team member, I was happy to use Splunk which made my event management like shelling peas. Review collected by and hosted on G2.com.

I can say nothing. Maybe the price is a bit much for developing countries. However, Splunk still deserves it. Review collected by and hosted on G2.com.

The best thing is you can set it up as your company wants. Moreover, it's a great software as a service for security. To sell all the error logs in our development server, we use Splunk in our company. Review collected by and hosted on G2.com.

The search is very slow, sometimes to search a particular log message it takes about 5 minutes. Moreover, the error message doesn't come completely. Review collected by and hosted on G2.com.

Enterprise Security Adaptive Response feature is very good where you can directly take action from the one console. Previously, Splunk is used for monitoring only and now it is used as a post mechanism also. For example, If some malicious event comes from the endpoint and you want to isolate that endpoint. You can create a new action and use that to isolate endpoint. Review collected by and hosted on G2.com.

Splunk Enterprise is an add-on on Splunk so it is not isolated from other addon. We might face some security issue if other addons are conflicting with ES. It should come as a product incorporated on top of Splunk. I disliked the slowness of the App when it is installed on the lower configuration VM and it is very heavily built addon with so many javascript and python scripts. Review collected by and hosted on G2.com.

The UI is so simple and interactive that you provide a simple search string and this powerful tool looks at your terabytes sized logs and show you result in an index form and that too in seconds. It also helps our OPS team to perform a log forensics. Review collected by and hosted on G2.com.

This tool becomes very expensive if you have huge logs and if the logs keep on increasing so will the price to use this tool. The support from SPLUNK team is not that great. Review collected by and hosted on G2.com.

Configuration design: Thoughtful and mature documentation and design of the application regarding enterprise-class scaling on network storage.

-POWERFUL tools: The user interface lends itself to learning more about your organization from the logs you collect, through metrics of trends of the logs being gathered. There are also specific modules/add-ons for popular applications to provide more value and event-based monitoring, all without having to develop in-house dashboards and intelligence of those logs.

- Customization: You can create your own queries of logs, and event-based alerts. Review collected by and hosted on G2.com.

Price: This product is not free for more than the minimal use. Pricing can be very expensive, relative to open source offerings. That is the trade-off you pay for not having in-house development of open source offerings. As this product is priced based on gigabytes of indexed logs, it is important to understand the scope of licensing necessary for your environment to determine if it is a good fit for your organization. Review collected by and hosted on G2.com.

Its abilities to list tremendous amounts of information into events within seconds, the various applications and add-ons, and its visualizations. It encourages continuous analysis and can index any kind of data, also the hardware requirements of Splunk are minimal. Splunk does not require any database to store its recorded events. A great deal of support and help is available in the community. It's extremely easy to set up and can take data input from various sources like remote hosts, logs, scripts, files, network, etc. Moreover, there is a free version that allows indexing 500 MB of data per day. In conclusion, its UI is very user-friendly. The fact that we can aggregate and correlate any events we want is a powerful tool in identifying and stopping malicious activity on or against our network. Review collected by and hosted on G2.com.

I truly hated the fact that we need to restart Splunk whenever configuration files are changed, but I understand the reason behind it; still, the restart takes quite a bit of time. Also, learning the search processing language takes some time, as it has a lot of commands. The Splunk learning curve is steep and can take over a month to learn thoroughly. Normalizing data is challenging in Splunk. Moreover, many add-ons are Common Information Model (CIM) compatible in Splunk. Review collected by and hosted on G2.com.

It has an exceptionally educational dashboard which enables us to see information about servers in our condition. It gives visuals to the client when we select graphical representation, enabling us to change signs into visual outlines for example pie charts, diagrams, tables, and so on. It is easy to scale with large data sets. It supports different types of data with real-time analyzing. Splunk is extremely easy to install and they provide packages for both Linux and Windows-based operating systems. Installation is easy, just unzip the package and set the path and you are ready to use. Review collected by and hosted on G2.com.

It can be CPU intensive if not careful. Early releases were quite buggy, but remediations were quick and prompt. The load on our searches, some queries take forever. Sometimes we have great difficulty with getting different products to parse logs correctly into Splunk. Pretty expensive. Review collected by and hosted on G2.com.