Splunk Enterprise Security Reviews & Product Details

Splunk Enterprise Security (ES) is a data-centric, modern security information and event management (SIEM) solution that delivers data-driven insights for full breadth visibility into your security posture so you can protect your business and mitigate risk at scale. With unparalleled search and reporting, advanced analytics, integrated intelligence, and prepackaged security content, Splunk ES accelerates threat detection and investigation, letting you determine the scope of high-priority threats to your environment so you can quickly take action. Built on an open and scalable data platform, you can stay agile in the face of evolving threats and business needs. Our extensive ecosystem of Splunk, partner, and community-built integrations as well as flexible deployment options ensure your technology investments are working in tandem with Splunk ES whilst meeting you wherever you are on your cloud, multi-cloud, or hybrid journey.

Seller

Cisco

Discussions

Splunk Enterprise Security Community

Languages Supported

German, English, French, Italian, Japanese, Korean, Chinese (Simplified), Chinese (Traditional)

Solution Type

All-in-One

Overview by

Mike Tomita

Value at a Glance

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

View More Pricing Information

Top-Rated Alternatives

View All Alternatives

User Insights

Average based on 248 real user reviews.

Implementation Time

3 months

Perceived Cost

$$$$$

Typical contract price

$0k - $0k

Per Year

Splunk Enterprise Security Integrations

(15)

Integration information sourced from real user reviews.

AWS CloudTrail

AWS Transfer Family

Azure Active Directory...

Cisco Duo

CrowdStrike Falcon Endpoint...

CyberArk Privileged Access...

FortiGate SD-WAN

Microsoft Defender XDR

Palo Alto Networks...

Show More Integrations

G2 reviews are authentic and verified.

Here's how.

Jeffrey G.

Multi Func Info Sys Anlst

Information Technology and Services

Enterprise (> 1000 emp.)

12/13/2023

"Detail-oriented data mining and more."

3.5/5

What do you like best about Splunk Enterprise Security?

The Adaptive Learning can be tailored to your specific needs and requirements. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Keep in mind that Splunk isn't a solution that you can just walk up to and use. there is a bit of training involved if you have no experience in data mining and metrics analysis. Review collected by and hosted on G2.com.

Rajat s.

SOC Specialist (SIEM SME)

Small-Business (50 or fewer emp.)

9/20/2023

"Splunk Enterprise security overview"

4.5/5

What do you like best about Splunk Enterprise Security?

It provides ability to integrate the log sources from different security devices, provides flexibility to add any third-party intel tool to integrate and get dynamic reputations through that, has a great GUI to analyze the alerts and escalate them further for deep investigation. It can be easily implemented in any organization, whether small or large. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Cost price seems high so small enterprises have problems with their cost-cutting. Proper videos and materials are needed to understand its platform; otherwise, nearly everything is okay and covers almost all kinds of security devices. Customer support is also a concern; instant support is needed on any subject matter so that organizations with less experience or technical personnel can understand and work on this platform without hesitation. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

It covers entire security devices and is able to understand the logs so that integration is quite easy and has a good GUI so that a technical user can easily understand. Report generation and creation is quite easy as well. It supports all kinds of logs, so nearly no parser is needed to parse the parameters over the console. It has proper guidance on device support and troubleshooting issues and also supports the cloud environment to fetch logs for enterprises that have more dependency on the cloud. Review collected by and hosted on G2.com.

Mohammad Riyaz S.

Mid-Market (51-1000 emp.)

9/16/2023

"Splunk Enterprise Security: Enhancing Threat Visibility"

4.5/5

What do you like best about Splunk Enterprise Security?

Splunk ES gives us the great visibility over the Infrastructure. By using ES we can detect every small details which are rolling over the network. The Threat Detection is very Impressive, by default ES comes with 2000+ correlation rules so that Incident detection can become easer. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

In Splunk ES the datamodeling part is very hardest thing. Once we map everything some correlation rules might not work as Expected so we need to change that too. Review collected by and hosted on G2.com.

sooraj s.

Specialist - Cloud Engineer

Small-Business (50 or fewer emp.)

11/2/2023

"Splunk ES can help you achieve continuous monitoring, support your security operations center (SOC)."

5/5

What do you like best about Splunk Enterprise Security?

It allows us to search through terabytes of data easily. From my three years of experience, it is the most effective cybersecurity tool to identify potential threats to systems. Splunk Enterprise Security is a must! Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Splunk Enterprise lacks automated data quality and validation features which can provide confidence in the accuracy and reliability of the insights derived from it. It lacks built-in energy-specific app which can meet the specific needs of an energy industry. In as much as Splunk Enterprise offers excellent visualization Review collected by and hosted on G2.com.

Monica S.

Marketing Manager

Small-Business (50 or fewer emp.)

1/30/2024

"Good product but tricky licensing"

3/5

What do you like best about Splunk Enterprise Security?

Once the application is setup, using the application is relatively easy with a low learning curve. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Licensing for splunk can be very expensive Review collected by and hosted on G2.com.

Yogendra V.

Senior Consultant

Enterprise (> 1000 emp.)

1/4/2024

"Empowering Insights: A Deep Dive into Splunk Intelligence Management"

3.5/5

What do you like best about Splunk Enterprise Security?

Splunk Intelligence Management excels in its ability to seamlessly aggregate, analyze, and derive actionable insights from diverse data sources, providing unparalleled visibility and decision-making capabilities for organizations. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

steep learning curve, resource-intensive setup, and the potential for high costs in larger deployments. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

It addresses issues such as data silos, inefficient threat detection, and manual analysis by providing a centralized platform for data aggregation, correlation, and streamlined intelligence workflows. This results in improved threat visibility, quicker response times, and enhanced overall cybersecurity posture. Review collected by and hosted on G2.com.

Omkar G.

Lead l Software testing

Enterprise (> 1000 emp.)

12/12/2023

"Splunk enterprise security good analytical tool"

4/5

What do you like best about Splunk Enterprise Security?

This tool has full visibility of all servers which helps to do efficient investigation. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Sometimes lots of unwanted data on a single screen required full attention while monitoring. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

It provides details of each server's health, monitors it all the time, and sends alerts if anything is done in the system. It also helps to get phishing alerts and restrict unauthorized users from accessing system details. It gives a good analytical view of the system's health and helps to investigate to find the root cause of the failure. Review collected by and hosted on G2.com.

Naveen K.

Security Analyst | SOC

Mid-Market (51-1000 emp.)

11/13/2023

"Splunk Enterprise Security: Great tool to work with Big Data"

4.5/5

What do you like best about Splunk Enterprise Security?

I like the features in the Splunk Enterprise Security such as Threat Intelligence, Incident Review and its investigations with the related logs. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

My only dislike that Splunk integrations are bit harder as compared to other tools. Review collected by and hosted on G2.com.

Hardik D.

Sr. DevSecOps Engineer

Enterprise (> 1000 emp.)

11/20/2023

"Splunk Enterprise Security - SIEM"

4/5

What do you like best about Splunk Enterprise Security?

Splunk is the industry leader in SIEM solution for a reason. From Log Collection to Correlation & enrichment. Their quality of support is also good. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Cost is bit high as compared to other solutions and the ease of setting up or deploying any Splunk architecture components requires much more technical knowledge. Review collected by and hosted on G2.com.