Splunk Enterprise Security

By Cisco

4.3/5(250)
4.3 out of 5 stars
3 star
0%
2 star
0%
1 star
0%

How would you rate your experience with Splunk?

Splunk Enterprise Security Reviews & Product Details

Profile Status

This profile is currently managed by Splunk Enterprise Security but has limited features.

Are you part of the Splunk Enterprise Security team? Upgrade your plan to enhance your branding and engage with visitors to your profile!

Value at a Glance

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

User Insights

Average based on 250 real user reviews.

Implementation Time

3 months

Perceived Cost

$$$$$

Typical contract price

$0k - $0k

Sign in to view

Per Year

Splunk Enterprise Security Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is Splunk Enterprise Security, and what problem is it built to solve?

Splunk Enterprise Security is used as a SIEM to bring security logs and events together so teams can monitor activity, correlate signals, and investigate potential threats from a centralized view.

What languages does Splunk Enterprise Security support?

Splunk Enterprise Security supports 8 languages: Chinese (Simplified), Chinese (Traditional), English, French, German, Italian, Japanese, and Korean.

What company sizes and industries is Splunk Enterprise Security the best fit for?

Splunk Enterprise Security has a strong fit among positive reviewers from large organizations, with mid-market teams also represented. The industries with the clearest presence include:
  • Enterprise organizations: Companies with more than 1,000 employees are the most represented size segment.
  • Mid-market organizations: Companies with 51–1,000 employees are also well represented.
  • Information technology and computer/network security: These are prominent areas of use.
  • Financial services and banking: These sectors also feature among the represented industries.
  • Telecommunications: This industry appears regularly among positive reviewers.

How long does it take to implement Splunk Enterprise Security across a team?

Implementation timelines vary with the amount of data normalization and configuration required, but 1–3 months is the most commonly reported range. Teams also report shorter and longer rollouts.

What customer support options does Splunk Enterprise Security provide, and how do users find the overall support experience?

Splunk Enterprise Security offers support through email/help desk, phone, and chat, with 24/7 live-rep support. The support experience is mixed: users describe helpful, knowledgeable assistance, while others report slow or inconsistent responses and room to improve support resources.

What features or capabilities could make Splunk Enterprise Security even more useful?

A smoother setup and tuning experience would help teams get value sooner, especially where data normalization and detection configuration take significant effort. Recurring improvement areas include:
  • Simpler onboarding and data normalization: Make it easier to configure data sources and maintain Common Information Model mappings.
  • More approachable search authoring: Improve query guidance, syntax help, and error messages for users learning SPL.
  • More flexible dashboards and incident views: Expand options for tailoring dashboards, alert presentation, and analyst workflows.
  • Faster searches and interface response: Improve performance when working with large volumes of data.

Is Splunk Enterprise Security considered safe and secure for handling data?

Splunk Enterprise Security is used to centralize security data and help teams monitor activity, correlate events, and investigate potential threats, which can give them a clearer view of their environment. That confidence depends on sound configuration and data handling; users also raise concerns about maintaining visibility when managing ingestion costs and about potential conflicts with other add-ons.

Splunk Enterprise Security Reviews (250)

View 2 Video Reviews
Reviews

Splunk Enterprise Security Reviews (250)

View 2 Video Reviews
4.3
250 reviews

What do users say?

Generated using AI from real user reviews

Pros & Cons

Generated from real user reviews
View All Pros and Cons
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
Alaa E.
AE
Alaa E.
Cybersecurity Consultant
Mid-Market (51-1000 emp.)
"Splunk ES : Empowering Security Operations"
4.5/5
What do you like best about Splunk Enterprise Security?

One notable aspect of Splunk ES that I find particularly commendable is its extensive array of integration options with various platforms. Furthermore, the inclusion of the adaptive response feature significantly enhances the efficiency and effectiveness of SOC analysts, streamlining their workflows and contributing to a more seamless experience. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

One drawback of Splunk ES lies in its implementation complexity, which appears to be comparatively higher when juxtaposed with other SIEM solutions. Additionally, the associated cost is positioned at a premium level in comparison to the majority of SIEM offerings. This may pose a challenge for organizations seeking a more straightforward deployment process and a cost-effective SIEM solution. Review collected by and hosted on G2.com.

Marcial L.
ML
Marcial L.
IT Manager
Mid-Market (51-1000 emp.)
"Excelent tool for planning a log term migration of platform to monitor the architecture closely"
5/5
What do you like best about Splunk Enterprise Security?

We could customize the models based on our specific processes, policies, and user roles. This flexibility enhances the accuracy and relevance of threat detection Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

If your company has limited IT resources then running Splunk UBA can be resource-intensive, requiring substantial computational power and storage. Review collected by and hosted on G2.com.

Sabih K.
SK
Sabih K.
Data Analyst
Small-Business (50 or fewer emp.)
"Best SIEM tool"
5/5
What do you like best about Splunk Enterprise Security?

Spluck Intelligence Management tool is a great, It's provide security and daily logs which makes security analyst or engineer which make's easier to analyse . I love it's query search and report generate feature, which provides a great in the form of statistics report. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

I can't se anay bad features in this tools but sometimes we gets confused that there are so many logs, and lot to see more. Review collected by and hosted on G2.com.

Sayantica G.
SG
Sayantica G.
Junior Security Analyst
Mid-Market (51-1000 emp.)
"Splunk Enterprise Security"
3.5/5
What do you like best about Splunk Enterprise Security?

Splunk has every aspect of security integration like plugins and also some development software from third party. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Costly and for EPS also takes charges a little bit high rather than its competitive product. For 500 workstation integration it's good but less than that it suggests using their data monitoring and analysis tool. Review collected by and hosted on G2.com.

Verified User in Computer & Network Security
UC
Verified User in Computer & Network Security
Mid-Market (51-1000 emp.)
"Splunk User Behavior Analytics next solution to cybersecurity"
4.5/5
What do you like best about Splunk Enterprise Security?

Uses unsupervised machine learning to identify abnormal behaviors that may indicate insider threats or external attacks. Identifies suspicious activities from employees, contractors, or partners that could pose risks to the organization. Seamlessly integrates with Splunk Enterprise and other security tools, enhancing existing security operations with advanced analytics. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Organizations should be prepared for the complexities of implementation and the resource requirements associated with deploying such an advanced system Review collected by and hosted on G2.com.

Verified User in Telecommunications
UT
Verified User in Telecommunications
Enterprise (> 1000 emp.)
Originally submitted 7/30/2024
"Splunk user behavior"
3/5
What do you like best about Splunk Enterprise Security?

It's great because it uses smart technology to spot unusual behavior from users that might signal security issues. It helps find potential threats early and reduce false alarms, making it easier for security teams to focus on real problems. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

it can be complex and require a lot of setup. Review collected by and hosted on G2.com.

Jaikishan R.
JR
Jaikishan R.
Senior Technology Specialist
Information Services
Mid-Market (51-1000 emp.)
"It is the best SIEM product"
5/5
What do you like best about Splunk Enterprise Security?

The best thing is, we can integrate this with other tools as well and it provide proper and nice view of logs with correct time stamp really enjoy working on and it's really helpful for me in finding trades and troubleshooting for part as well. Thanks for helping me out in all expects of cyber security as a part of cyber security team we are on very critical tools so we need to work on it. Thank you all. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Overall, it's a very nice product provide a very granular view of a log or alert but it sometime it lacks for graphical presentation and export export of logs in proper way Review collected by and hosted on G2.com.

Vishal G.
VG
Vishal G.
Senior System Engineer
Enterprise (> 1000 emp.)
"Its better for capturing realtime incidents"
4.5/5
What do you like best about Splunk Enterprise Security?

In Splunk Enterprise Security, we save some searches and creating attractive dashboard which give impulsive graphical view of realtime events Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

In incident secirity tab if we change status of any notable then whole page was refresh. Review collected by and hosted on G2.com.

Dharvind K.
DK
Dharvind K.
Support Advisor
Small-Business (50 or fewer emp.)
"Quick and efficient in founding the bounce in EMAIL"
5/5
What do you like best about Splunk Enterprise Security?

Best tool ever used to check the bounce or see if an email is delivered or not Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

The new update, it took so much time to understand how it works Review collected by and hosted on G2.com.

SK
Sagar K.
Lead
Insurance
Enterprise (> 1000 emp.)
"Splunk Intelligence Management provides Threat led visibility to the business"
4/5
What do you like best about Splunk Enterprise Security?

Splunk Intelligence Management provides insights to the threat detections and assists analysts by providing relevant intelligence to understand the threat and take timely actions. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Cost of Splunk services is eye watering and as a result only organisations with deep pockets can leverage it. Review collected by and hosted on G2.com.

Questions about Splunk Enterprise Security? Ask real users or explore answers from the community

Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights.

GU
Guest User
•
Last activity about 4 years ago

What is the difference between Splunk Enterprise and Splunk Enterprise Security?

GU
Guest User

What is Splunk User Behavior Analytics used for?

Pricing Insights

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

Average Discount

22%

Perceived Cost

$$$$$
Splunk Enterprise Security Comparisons
Splunk Enterprise Security Features
Activity Monitoring
Asset Management
Log Management
Event Management
Automated Response
Incident Reporting
Threat Intelligence
Vulnerability Assessment
Behavioral Analytics
Product Avatar Image
Splunk
4.3/5(250)