Splunk Enterprise Security

By Cisco

4.3/5(250)
4.3 out of 5 stars
3 star
0%
2 star
0%
1 star
0%

How would you rate your experience with Splunk?

Splunk Enterprise Security Reviews & Product Details

Profile Status

This profile is currently managed by Splunk Enterprise Security but has limited features.

Are you part of the Splunk Enterprise Security team? Upgrade your plan to enhance your branding and engage with visitors to your profile!

Value at a Glance

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

User Insights

Average based on 250 real user reviews.

Implementation Time

3 months

Perceived Cost

$$$$$

Typical contract price

$0k - $0k

Sign in to view

Per Year

Splunk Enterprise Security Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is Splunk Enterprise Security, and what problem is it built to solve?

Splunk Enterprise Security is used as a SIEM to bring security logs and events together so teams can monitor activity, correlate signals, and investigate potential threats from a centralized view.

What languages does Splunk Enterprise Security support?

Splunk Enterprise Security supports 8 languages: Chinese (Simplified), Chinese (Traditional), English, French, German, Italian, Japanese, and Korean.

What company sizes and industries is Splunk Enterprise Security the best fit for?

Splunk Enterprise Security has a strong fit among positive reviewers from large organizations, with mid-market teams also represented. The industries with the clearest presence include:
  • Enterprise organizations: Companies with more than 1,000 employees are the most represented size segment.
  • Mid-market organizations: Companies with 51–1,000 employees are also well represented.
  • Information technology and computer/network security: These are prominent areas of use.
  • Financial services and banking: These sectors also feature among the represented industries.
  • Telecommunications: This industry appears regularly among positive reviewers.

How long does it take to implement Splunk Enterprise Security across a team?

Implementation timelines vary with the amount of data normalization and configuration required, but 1–3 months is the most commonly reported range. Teams also report shorter and longer rollouts.

What customer support options does Splunk Enterprise Security provide, and how do users find the overall support experience?

Splunk Enterprise Security offers support through email/help desk, phone, and chat, with 24/7 live-rep support. The support experience is mixed: users describe helpful, knowledgeable assistance, while others report slow or inconsistent responses and room to improve support resources.

What features or capabilities could make Splunk Enterprise Security even more useful?

A smoother setup and tuning experience would help teams get value sooner, especially where data normalization and detection configuration take significant effort. Recurring improvement areas include:
  • Simpler onboarding and data normalization: Make it easier to configure data sources and maintain Common Information Model mappings.
  • More approachable search authoring: Improve query guidance, syntax help, and error messages for users learning SPL.
  • More flexible dashboards and incident views: Expand options for tailoring dashboards, alert presentation, and analyst workflows.
  • Faster searches and interface response: Improve performance when working with large volumes of data.

Is Splunk Enterprise Security considered safe and secure for handling data?

Splunk Enterprise Security is used to centralize security data and help teams monitor activity, correlate events, and investigate potential threats, which can give them a clearer view of their environment. That confidence depends on sound configuration and data handling; users also raise concerns about maintaining visibility when managing ingestion costs and about potential conflicts with other add-ons.

Splunk Enterprise Security Reviews (250)

View 2 Video Reviews
Reviews

Splunk Enterprise Security Reviews (250)

View 2 Video Reviews
4.3
250 reviews

What do users say?

Generated using AI from real user reviews

Pros & Cons

Generated from real user reviews
View All Pros and Cons
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
JM
Jordan M.
security engineer
Enterprise (> 1000 emp.)
"Splunk in a security environment"
4/5
What do you like best about Splunk Enterprise Security?

Splunk is easy to use/configure and to find what I need. Plus, the Splunk employees with whom we work are very talented and skilled. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

They got bought by Cisco and we are waiting for integrations to get better. Review collected by and hosted on G2.com.

Anugrah Pratap S.
AS
Anugrah Pratap S.
Technical Lead
Enterprise (> 1000 emp.)
"Unmatched data mining, analysis, and Security monitoring by Splunk ES"
4.5/5
What do you like best about Splunk Enterprise Security?

Splunk ES is very helpful in seamless integration and automation, Data analytics, Investigation, Log source onboarding, dashboard, SPL, ease of search, use-case modification/fine-tuning, you name it. Every task and job in Splunk ES is perfect. Its vendor support is very responsive. Splunk ES has ease of implementation and integration. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Apart from cost, no one dislikes Splunk ES. Due to its costly services, most organizations use other cloud-native security solutions. Recently, one of our clients also proposed another security solution over Splunk ES. so that's cost is the main disadvantage of Splunk ES in my opinion. Review collected by and hosted on G2.com.

EM
Ernesto M.
IT Security Engineer
Mid-Market (51-1000 emp.)
"Easy to integrate, understand the workflows and to manage."
5/5
What do you like best about Splunk Enterprise Security?

Splunk ES is easy to manage and understand even if you are new with SIEMs. The workflows are easy to follow and the language Splunk uses is easy to learn. Also, it has integration with anything so you can ingest logs from pretty much everything you can think of. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Might be very expensive depending on how much data you are ingesting. Review collected by and hosted on G2.com.

RP
RUDRA P.
Security Professional
Information Technology and Services
Enterprise (> 1000 emp.)
"Splunk User Behavior Analytics Review"
5/5
What do you like best about Splunk Enterprise Security?

Splunk User Behavior Analytics establishes baseline behaviors for users, devices, and applications using unsupervised machine learning algorithms. It then looks for deviations to identify insider risks and unknown threats. This can be easily integrated with other tools and is easy to use. Has good customer support. Can be implemented on cloud and can be used from anywhere in current hybrid work environment. We have been using it since last 3 years. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

There is nothing which is least helpful in this tool hence i do not have any dislike for Splunk User Behavior Analytics. Review collected by and hosted on G2.com.

Manish D.
MD
Manish D.
Staff Security Engineer - SecOps
Enterprise (> 1000 emp.)
"One of the leading & innovative SIEM solution"
4.5/5
What do you like best about Splunk Enterprise Security?

The simplified UX is what makes Splunk/Splunk Enterprise Security (ES) separate from all other competitors. The vast range of data connectors in Splunkbase, simplified architecture, granular level of customization options, out of the box data models and complete coverage of MITRE Att&ck are some of the prime features and services offered by Splunk ES. The data model acceleration, notable events, dashboards and wide range of apps & addons makes searching and data transformation tasks really easy. The customer support is great for any type of issues you might be facing. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

The licensing model and cost is bit difficult to understand and manage. Review collected by and hosted on G2.com.

SS
Sanket S.
Technical Specialist
Mid-Market (51-1000 emp.)
"Navigating insider threats using Splunk"
5/5
What do you like best about Splunk Enterprise Security?

It uses machine learning to identify abnormal user and entity behaviour. It effectively identifies threat by analyzing patterns of behavior that are not matching with normal patterns. It integrates well with broader splunk ecosystem, allowing users to leverage their existing splunk investment and data. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Setting up and configuring this solution can be complex and time consuming. It may generates false positives, especially in the early stages of deployment. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
UI
Verified User in Information Technology and Services
Enterprise (> 1000 emp.)
"My experience with Splunk Enterprise Security"
5/5
What do you like best about Splunk Enterprise Security?

The ease of integration, visualization, and alert creation. Data handling and customization. Minimalistic maintenance. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

There is nothing much to dislike here. But I can say search speed will be a bit of an issue for me when it is overloaded unless we are using optimal queries. Review collected by and hosted on G2.com.

Alexandra V.
AV
Alexandra V.
Senior Software Engineer
Mid-Market (51-1000 emp.)
"Splunk Enterprise Security is the master log data collection and threat detection"
4.5/5
What do you like best about Splunk Enterprise Security?

It is easy to use and quick to collect multiple event and data log with best intrusion detection capability. Easy to integrate and quick to customize dashboard and the initial implementation process is also very easy. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Advanced security settings not easy especially when new with the system. The support team deserves merit for being helpful and always available when in need. Review collected by and hosted on G2.com.

Bhavin P.
BP
Bhavin P.
Experience Manager
Enterprise (> 1000 emp.)
"Great product to monitor community spams"
5/5
What do you like best about Splunk Enterprise Security?

It helps us monitor spam posts in our support community. Very reliable and easy to use product. It helps our community stay clean and meets all our customer support needs. Very easy to implement as well. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Analytics could be improved. Overall excellent product for all B2B industries. Review collected by and hosted on G2.com.

Santosh V.
SV
Santosh V.
Senior Engineer
Construction
Mid-Market (51-1000 emp.)
"A Game-Changing Security Platform Revolutionizing Cybersecurity."
5/5
What do you like best about Splunk Enterprise Security?

One thing I really love about Splunk ES is a very robust and intuitive security platform that has been a game-changer platform when it comes to revolutionizing Cybersecurity. I like it offers advanced threat detection with ability to detect sophisticated threats by correlating data from multiple sources. Real-time monitoring and alerting which alerts us during critical security events such as suspicious network traffic or any issues occurring without us knowing. It also offers real-time threat response which helps us to swiftly detecting and responding to security threats on time before they affect our business processes or systems or apps. Monitoring log activity for potential security incidents. Amazing and proactive customer support team. Intuitive UI for investigation which is pretty easy to use. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

I have experienced that sometimes the events tab doesn't show logs. Slow interface incase of high data volume. Review collected by and hosted on G2.com.

Questions about Splunk Enterprise Security? Ask real users or explore answers from the community

Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights.

GU
Guest User
•
Last activity about 4 years ago

What is the difference between Splunk Enterprise and Splunk Enterprise Security?

GU
Guest User

What is Splunk User Behavior Analytics used for?

Pricing Insights

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

Average Discount

22%

Perceived Cost

$$$$$
Splunk Enterprise Security Comparisons
Splunk Enterprise Security Features
Activity Monitoring
Asset Management
Log Management
Event Management
Automated Response
Incident Reporting
Threat Intelligence
Vulnerability Assessment
Behavioral Analytics
Product Avatar Image
Splunk
4.3/5(250)