Splunk Enterprise Security Pros and Cons: Top 5 Advantages and Disadvantages

Quick AI Summary Based on G2 Reviews

Generated from real user reviews

Users value the ease of use of Splunk Enterprise Security, enhancing their monitoring and log management experience. (15 mentions)

Users appreciate the easy integrations of Splunk Enterprise Security, enabling seamless connection with various platforms and systems. (13 mentions)

Users highlight the impressive threat detection capabilities of Splunk Enterprise Security, enhancing security focus and reducing false alarms. (13 mentions)

Users value the effective features of Splunk Enterprise Security, enhancing security analysis with comprehensive logs and insights. (12 mentions)

Users appreciate the user-friendly interface of Splunk Enterprise Security, enabling efficient monitoring and attractive dashboards. (11 mentions)

Users note that the high cost of Splunk Enterprise Security is a major drawback for smaller organizations. (17 mentions)

Users find the initial implementation complex, needing expert resources and time to onboard Splunk Enterprise Security effectively. (8 mentions)

Users find the complex implementation of Splunk Enterprise Security challenging, requiring extensive expertise and resources. (6 mentions)

Users find the complexity and extensive setup of Splunk Enterprise Security to be time-consuming and challenging. (6 mentions)

Users find the difficult learning curve of Splunk Enterprise Security a challenge for beginners and costly to set up. (6 mentions)

5 Pros or Advantages of Splunk Enterprise Security

1. Ease of Use

Users value the ease of use of Splunk Enterprise Security, enhancing their monitoring and log management experience.

See 15 mentions

See Related User Reviews

Jordan M.

Enterprise (> 1000 emp.)

4.0/5

"Splunk in a security environment"

What do you like about Splunk Enterprise Security?

Splunk is easy to use/configure and to find what i need. plus, the splunk employees with whom we work are very talented and skilled

Ernesto M.

Mid-Market (51-1000 emp.)

5.0/5

"Easy to integrate, understand the workflows and to manage."

What do you like about Splunk Enterprise Security?

Splunk ES is easy to manage and understard even if you are new with SIEMs. The workflows are easy to follow and the language the splunk uses is easy t

2. Easy Integrations

Users appreciate the easy integrations of Splunk Enterprise Security, enabling seamless connection with various platforms and systems.

See 13 mentions

See Related User Reviews

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Robust SIEM Solution with Strong Ecosystem Support"

What do you like about Splunk Enterprise Security?

✅ Powerful Search and Correlation Capabilities Splunk Enterprise Security excels at log aggregation, correlation, and threat detection. The Search Pr

Ernesto M.

Mid-Market (51-1000 emp.)

5.0/5

"Easy to integrate, understand the workflows and to manage."

What do you like about Splunk Enterprise Security?

Splunk ES is easy to manage and understard even if you are new with SIEMs. The workflows are easy to follow and the language the splunk uses is easy t

3. Threat Detection

Users highlight the impressive threat detection capabilities of Splunk Enterprise Security, enhancing security focus and reducing false alarms.

See 13 mentions

See Related User Reviews

Naushad T.

Enterprise (> 1000 emp.)

4.5/5

"Splunk ES- Scalable SIEM for Large Enterprise"

What do you like about Splunk Enterprise Security?

The best thing about Splunk is the deep visibility it provides across the environment, along with its strong ability to correlate large volumes of sec

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Splunk user behavior"

What do you like about Splunk Enterprise Security?

It's great because it uses smart technology to spot unusual behavior from users that might signal security issues. It helps find potential threats ea

4. Features

Users value the effective features of Splunk Enterprise Security, enhancing security analysis with comprehensive logs and insights.

See 12 mentions

See Related User Reviews

Muhammad R.

Enterprise (> 1000 emp.)

5.0/5

"Unmatched Visibility and Customization for Security Operations"

What do you like about Splunk Enterprise Security?

What I like most about Splunk Enterprise Security is its ability to give clear and comprehensive visibility across the entire environment. The correla

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Robust SIEM Solution with Strong Ecosystem Support"

What do you like about Splunk Enterprise Security?

✅ Powerful Search and Correlation Capabilities Splunk Enterprise Security excels at log aggregation, correlation, and threat detection. The Search Pr

5. User Interface

Users appreciate the user-friendly interface of Splunk Enterprise Security, enabling efficient monitoring and attractive dashboards.

See 11 mentions

See Related User Reviews

Muhammad R.

Enterprise (> 1000 emp.)

5.0/5

"Unmatched Visibility and Customization for Security Operations"

What do you like about Splunk Enterprise Security?

What I like most about Splunk Enterprise Security is its ability to give clear and comprehensive visibility across the entire environment. The correla

RUDRA P.

Enterprise (> 1000 emp.)

5.0/5

"Splunk User Behavior Analytics Review"

What do you like about Splunk Enterprise Security?

Splunk User Behavior Analytics establishes baseline behaviors for users, devices, and applications using unsupervised machine learning algorithms. It

5 Cons or Disadvantages of Splunk Enterprise Security

1. Expensive

Users note that the high cost of Splunk Enterprise Security is a major drawback for smaller organizations.

See 17 mentions

See Related User Reviews

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Robust SIEM Solution with Strong Ecosystem Support"

What do you dislike about Splunk Enterprise Security?

❌ Learning Curve The flexibility of SPL is a double-edged sword. New analysts often struggle with query writing and alert customization unless they h

Ernesto M.

Mid-Market (51-1000 emp.)

5.0/5

"Easy to integrate, understand the workflows and to manage."

What do you dislike about Splunk Enterprise Security?

Might be very expensinve depend of how much data you are ingesting.

2. Complex Setup

Users find the initial implementation complex, needing expert resources and time to onboard Splunk Enterprise Security effectively.

See 8 mentions

See Related User Reviews

Naushad T.

Enterprise (> 1000 emp.)

4.5/5

"Splunk ES- Scalable SIEM for Large Enterprise"

What do you dislike about Splunk Enterprise Security?

The initial implementation is complicated and requires significant expertise, time, and resources. In our case, we had to extend the contract to a thi

Muhammad R.

Enterprise (> 1000 emp.)

5.0/5

"Unmatched Visibility and Customization for Security Operations"

What do you dislike about Splunk Enterprise Security?

What I dislike about Splunk Enterprise Security is that some of its features can be quite resource intensive. The platform is powerful, but it sometim

3. Complex Implementation

Users find the complex implementation of Splunk Enterprise Security challenging, requiring extensive expertise and resources.

See 6 mentions

See Related User Reviews

Naushad T.

Enterprise (> 1000 emp.)

4.5/5

"Splunk ES- Scalable SIEM for Large Enterprise"

What do you dislike about Splunk Enterprise Security?

The initial implementation is complicated and requires significant expertise, time, and resources. In our case, we had to extend the contract to a thi

Sanket S.

Mid-Market (51-1000 emp.)

5.0/5

"Navigating insider threats using Splunk"

What do you dislike about Splunk Enterprise Security?

Setting up and configuring this solution can be complex and time consuming. It may generates false positives, especially in the early stages of deplo

4. Complexity

Users find the complexity and extensive setup of Splunk Enterprise Security to be time-consuming and challenging.

See 6 mentions

See Related User Reviews

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Splunk user behavior"

What do you dislike about Splunk Enterprise Security?

it can be complex and require a lot of setup.

Sanket S.

Mid-Market (51-1000 emp.)

5.0/5

"Navigating insider threats using Splunk"

What do you dislike about Splunk Enterprise Security?

Setting up and configuring this solution can be complex and time consuming. It may generates false positives, especially in the early stages of deplo

5. Difficult Learning

Users find the difficult learning curve of Splunk Enterprise Security a challenge for beginners and costly to set up.

See 6 mentions

See Related User Reviews

Alexandra V.

Mid-Market (51-1000 emp.)

4.5/5

"Splunk Enterprise Security is the master log data collection and threat detection"

What do you dislike about Splunk Enterprise Security?

Advanced security settings not easy especially when new with the system. The support team deseves merit for being helpful and always available when in

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Neutral Experience"

What do you dislike about Splunk Enterprise Security?

Learning Curve is a steep. Take a bit of time to undersant everything

Top-Rated Alternatives

View All Alternatives

G2 reviews are authentic and verified.

Here's how.

Ernesto M.

IT Security Engineer

Mid-Market (51-1000 emp.)

12/17/2024

"Easy to integrate, understand the workflows and to manage."

5/5

What do you like best about Splunk Enterprise Security?

Splunk ES is easy to manage and understard even if you are new with SIEMs. The workflows are easy to follow and the language the splunk uses is easy to learn. Also, it has integration with anything so you can ingest logs from pretty much everything you can think of. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Might be very expensinve depend of how much data you are ingesting. Review collected by and hosted on G2.com.

RUDRA P.

Security Professional

Information Technology and Services

Enterprise (> 1000 emp.)

7/30/2024

"Splunk User Behavior Analytics Review"

5/5

What do you like best about Splunk Enterprise Security?

Splunk User Behavior Analytics establishes baseline behaviors for users, devices, and applications using unsupervised machine learning algorithms. It then looks for deviations to identify insider risks and unknown threats. This can be easily integrated with other tools and is easy to use. Has good customer support. Can be implemented on cloud and can be used from anywhere in current hybrid work environment. We have been using it since last 3 years. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

There is nothing which is least helpful in this tool hence i do not have any dislike for Splunk User Behavior Analytics. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Instead of taking hours, can carry out tasks using IT and security tools in seconds. Many playbooks are included with Splunk to assist you in addressing the most important use cases. Splunk makes it easier to divide up, assign, and document tasks, which promotes a well-organized and cooperative investigation process. Review collected by and hosted on G2.com.

Manish D.

Staff Security Engineer - SecOps

Enterprise (> 1000 emp.)

4/12/2024

"One of the leading & innovative SIEM solution"

4.5/5

What do you like best about Splunk Enterprise Security?

The simplified UX is what makes Splunk/Splunk Enterprise Security (ES) seperate from all other competitors. The vast range of data connectors in Splunkbase, simplified architecture, granular level of customization options, out of the box data models and complete coverage of MITRE Att&ck are some of the prime features and services offered by Splunk ES. The data model acceleration, notable events, dashboards and wide range of apps & addons makes searching and data transformation tasks really easy. The customer support is great for any type of issues you might be facing. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

The licensing model and cost is bit difficult to understand and manage. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Collecting audit logs from wide range of data sources within your hybrid infrastructure is a daunting task. Splunk helps you a lot in managing and enhancing your audit log coverage for your infra. The wide range of apps/addons helps you to ingest audit events from any type of log source and you rarely need to bother about parsing. The out of the box content management and visualization dashboards/data models helps you get quick insights into your infra data. Basically having an efficient SIEM solution is a must for any SecOps team to effectively manage the security posture and reduce the cyber dwell time. Review collected by and hosted on G2.com.

Sanket S.

Technical Specialist

Mid-Market (51-1000 emp.)

8/8/2024

"Navigating insider threats using Splunk"

5/5

What do you like best about Splunk Enterprise Security?

It uses machine learning to identify abnormal user and entity behaviour. It effectively identifies threat by analyzing patterns of behavior that are not matching with normal patterns.

It integrates well with broader splunk ecosystem, allowing users to leverage their existing splunk investment and data. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Setting up and configuring this solution can be complex and time consuming.

It may generates false positives, especially in the early stages of deployment. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

7/21/2024

"My experience with splunk enterprise security"

5/5

What do you like best about Splunk Enterprise Security?

The ease of integration, visualisation and alert creation. Data handling and customisation. Minimalistic maintenance Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

There are nothing much to dislike here. But I can say search speed will be a bit of issue for me when it is overloaded unless we are using optimal queries Review collected by and hosted on G2.com.

Alexandra V.

Senior Software Engineer

Mid-Market (51-1000 emp.)

7/16/2024

"Splunk Enterprise Security is the master log data collection and threat detection"

4.5/5

What do you like best about Splunk Enterprise Security?

It is easy to use and quick to collect multiple event and data log with best intrusion dection capability. Easy to integrate and quick to customize dashboard and the initial implementation process is also very easy. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Advanced security settings not easy especially when new with the system. The support team deseves merit for being helpful and always available when in need. Review collected by and hosted on G2.com.

Bhavin P.

Experience Manager

Enterprise (> 1000 emp.)

7/31/2024

"Great product to monitor community spams"

5/5

What do you like best about Splunk Enterprise Security?

It helps us montior spam post in our support community. Very realible and easy to use product. It helps our community clean and meets all our customer support needs. Very easy to implement as well Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Analytic could be improved. Overall excellent product for all B2B industires Review collected by and hosted on G2.com.

Santosh V.

Senior Engineer

Construction

Mid-Market (51-1000 emp.)

2/4/2024

"A Game-Changing Security Platform Revolutionizing Cybersecurity."

5/5

What do you like best about Splunk Enterprise Security?

One thing I really love about Splunk ES is a very robust and intuitive security platform that has been a game-changer platform when it comes to revolutionizing Cybersecurity. I like it offers advanced threat detection with ability to detect sophisticated threats by correlating data from multiple sources.

Real-time monitoring and alerting which alerts us during critical security events such as suspicious network traffic or any issues occurring without us knowing.

It also offers real-time threat response which helps us to swiftly detecting and responding to security threats on time before they affect our business processes or systems or apps.

Monitoring log activity for potential security incidents.

Amazing and proactive customer support team.

Intuitive UI for investigation which is pretty easy to use. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

I have experienced that sometimes the events tab doesn't show logs.

Slow interface incase of high data volume. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

We use Splunk ES to monitor security-relavant events, which improves our organisation security and security hygiene. Also use it creating real-time alerts to monitor Log issues by customers. It helps us a lot when it comes to security prospective and to chase threats and vulnerability detection, critical traffic detection firewall device based risks and more.

Overall this is a great SIEM tool for data monitoring, threat detection and remediation. Review collected by and hosted on G2.com.

Alaa E.

Cybersecurity Consultant

Mid-Market (51-1000 emp.)

11/21/2023

"Splunk ES : Empowering Security Operations"

4.5/5

What do you like best about Splunk Enterprise Security?

One notable aspect of Splunk ES that I find particularly commendable is its extensive array of integration options with various platforms. Furthermore, the inclusion of the adaptive response feature significantly enhances the efficiency and effectiveness of SOC analysts, streamlining their workflows and contributing to a more seamless experience. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

One drawback of Splunk ES lies in its implementation complexity, which appears to be comparatively higher when juxtaposed with other SIEM solutions. Additionally, the associated cost is positioned at a premium level in comparison to the majority of SIEM offerings. This may pose a challenge for organizations seeking a more straightforward deployment process and a cost-effective SIEM solution. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Splunk ES addresses cybersecurity challenges by providing real-time threat detection, centralized incident investigation, automated compliance reporting, enhanced visibility through analytics, and streamlined threat intelligence integration. These features collectively enable quicker response times, proactive monitoring, and efficient utilization of security resources. Review collected by and hosted on G2.com.

Marcial L.

IT Manager

Mid-Market (51-1000 emp.)

7/30/2024

"Excelent tool for planning a log term migration of platform to monitor the architecture closely"

5/5

What do you like best about Splunk Enterprise Security?

We could customize the models based on our specific processes, policies, and user roles. This flexibility enhances the accuracy and relevance of threat detection Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

If your company has limited IT resources then running Splunk UBA can be resource-intensive, requiring substantial computational power and storage. Review collected by and hosted on G2.com.

Categories on G2

Security Information and Event Management (SIEM)Incident Response AI SOC Agents

Explore More

What are the highest rated academic advising software platforms for reducing coordination errors in student placement workflows?What is the best theater management software for venue operations and capacity optimization?Top tools for managing employee records and payroll

Which cloud edge security providers give the strongest threat detection and response for companies with geographically distributed sites that need consistent enforcement everywhere?Top-rated digital marketing tools for small businesses Pros and Cons Details

Show MoreShow Less

4.3 out of 5 stars

Splunk Enterprise Security Pros and Cons: Top 5 Advantages and Disadvantages

Quick AI Summary Based on G2 Reviews

5 Pros or Advantages of Splunk Enterprise Security

1. Ease of Use

2. Easy Integrations

3. Threat Detection

4. Features

5. User Interface

5 Cons or Disadvantages of Splunk Enterprise Security

1. Expensive

2. Complex Setup

3. Complex Implementation

4. Complexity

5. Difficult Learning

Top-Rated Alternatives

Splunk Enterprise Security Reviews (248)

Splunk Enterprise Security Reviews (248)

Filter Reviews

Categories on G2

Explore More