Splunk Enterprise Security Reviews & Product Details

Splunk Enterprise Security (ES) is a data-centric, modern security information and event management (SIEM) solution that delivers data-driven insights for full breadth visibility into your security posture so you can protect your business and mitigate risk at scale. With unparalleled search and reporting, advanced analytics, integrated intelligence, and prepackaged security content, Splunk ES accelerates threat detection and investigation, letting you determine the scope of high-priority threats to your environment so you can quickly take action. Built on an open and scalable data platform, you can stay agile in the face of evolving threats and business needs. Our extensive ecosystem of Splunk, partner, and community-built integrations as well as flexible deployment options ensure your technology investments are working in tandem with Splunk ES whilst meeting you wherever you are on your cloud, multi-cloud, or hybrid journey.

Seller

Cisco

Discussions

Splunk Enterprise Security Community

Languages Supported

German, English, French, Italian, Japanese, Korean, Chinese (Simplified), Chinese (Traditional)

Solution Type

All-in-One

Overview by

Mike Tomita

Value at a Glance

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

View More Pricing Information

Top-Rated Alternatives

View All Alternatives

User Insights

Average based on 250 real user reviews.

Implementation Time

3 months

Perceived Cost

$$$$$

Typical contract price

$0k - $0k

Per Year

Splunk Enterprise Security Integrations

(19)

Integration information sourced from real user reviews.

AWS CloudTrail

AWS Transfer Family

Azure Active Directory...

Azure Firewall

Cisco Duo

Cortex XDR

CrowdStrike Falcon Endpoint...

FortiGate SD-WAN

FortiGate-VM NGFW

Show More Integrations

Splunk Enterprise Security Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is Splunk Enterprise Security, and what problem is it built to solve?

Splunk Enterprise Security is used as a SIEM to bring security logs and events together so teams can monitor activity, correlate signals, and investigate potential threats from a centralized view.

What languages does Splunk Enterprise Security support?

Splunk Enterprise Security supports 8 languages: Chinese (Simplified), Chinese (Traditional), English, French, German, Italian, Japanese, and Korean.

What company sizes and industries is Splunk Enterprise Security the best fit for?

Splunk Enterprise Security has a strong fit among positive reviewers from large organizations, with mid-market teams also represented. The industries with the clearest presence include:

Enterprise organizations: Companies with more than 1,000 employees are the most represented size segment.
Mid-market organizations: Companies with 51–1,000 employees are also well represented.
Information technology and computer/network security: These are prominent areas of use.
Financial services and banking: These sectors also feature among the represented industries.
Telecommunications: This industry appears regularly among positive reviewers.

How long does it take to implement Splunk Enterprise Security across a team?

Implementation timelines vary with the amount of data normalization and configuration required, but 1–3 months is the most commonly reported range. Teams also report shorter and longer rollouts.

What customer support options does Splunk Enterprise Security provide, and how do users find the overall support experience?

Splunk Enterprise Security offers support through email/help desk, phone, and chat, with 24/7 live-rep support. The support experience is mixed: users describe helpful, knowledgeable assistance, while others report slow or inconsistent responses and room to improve support resources.

What features or capabilities could make Splunk Enterprise Security even more useful?

A smoother setup and tuning experience would help teams get value sooner, especially where data normalization and detection configuration take significant effort. Recurring improvement areas include:

Simpler onboarding and data normalization: Make it easier to configure data sources and maintain Common Information Model mappings.
More approachable search authoring: Improve query guidance, syntax help, and error messages for users learning SPL.
More flexible dashboards and incident views: Expand options for tailoring dashboards, alert presentation, and analyst workflows.
Faster searches and interface response: Improve performance when working with large volumes of data.

Is Splunk Enterprise Security considered safe and secure for handling data?

Splunk Enterprise Security is used to centralize security data and help teams monitor activity, correlate events, and investigate potential threats, which can give them a clearer view of their environment. That confidence depends on sound configuration and data handling; users also raise concerns about maintaining visibility when managing ingestion costs and about potential conflicts with other add-ons.

G2 reviews are authentic and verified.

Here's how.

Hardik D.

Sr. DevSecOps Engineer

Enterprise (> 1000 emp.)

11/20/2023

"Splunk Enterprise Security - SIEM"

4/5

What do you like best about Splunk Enterprise Security?

Splunk is the industry leader in SIEM solution for a reason. From Log Collection to Correlation & enrichment. Their quality of support is also good. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Cost is bit high as compared to other solutions and the ease of setting up or deploying any Splunk architecture components requires much more technical knowledge. Review collected by and hosted on G2.com.

Verified User in Automotive

Enterprise (> 1000 emp.)

Originally submitted 4/26/2024

"Simple and powerful tool"

4.5/5

What do you like best about Splunk Enterprise Security?

its powerful tool in simple words and Splunk is giving the best outputs Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

there is nothing to say disadvantages about splunk Review collected by and hosted on G2.com.

Tejas B.

Senior Cloud Information Security Engineer

Mid-Market (51-1000 emp.)

10/9/2023

"Best platform for threat analysis"

5/5

What do you like best about Splunk Enterprise Security?

Threat intel feeds, all threat related dashboards to investigate security incident. Asset and identity dashboard helps to prioritise the incident from incident review dashboard. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Threat intel feed should be divided in different category. For example, bad IPs, bad domains, bad URLs instead of clubbing them together. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Dynamic asset and identity dashboard helps us to keep updated information about people at our organization which in turn helps us to prioritise the incident or alert of respective machine or people. Threat analysis using threat intelligence dashboard. All investigation is from one place that is the main advantage of this tool. Review collected by and hosted on G2.com.

Shreyansh G.

Security Associate Engineer

Small-Business (50 or fewer emp.)

11/29/2023

"Monitoring and SIEM for Stock market and financial brokers."

4.5/5

What do you like best about Splunk Enterprise Security?

The powerful searching and customization in Splunk are awesome. Also the scalability is superb which makes it easy for continuity of work even with changes in the infrastructure. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

The complexity in the setup and high costs are a bit of dislikes for Splunk that I have. Review collected by and hosted on G2.com.

Camilo A.

Staff Support Engineer

Enterprise (> 1000 emp.)

11/27/2023

"Invaluable tool to analyze large amounts of data"

4/5

What do you like best about Splunk Enterprise Security?

It helps to make well-informed decisions based on data in order to monitor data in real time. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

There is a lot of configuration required to get value Review collected by and hosted on G2.com.

Snigdha D.

IT Analyst

Enterprise (> 1000 emp.)

12/12/2023

"Splunk monitoring features"

5/5

What do you like best about Splunk Enterprise Security?

I like the monitoring features in Splunk, and most of all, it's very user-friendly. It allows checking the device logs for a very long period in very little time. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Commands should be easy enough to learn for a beginner level engineer Review collected by and hosted on G2.com.

Vijay Kumar T.

Deputy Manager

Information Technology and Services

Enterprise (> 1000 emp.)

10/26/2023

"Great tool for security analysis"

4.5/5

What do you like best about Splunk Enterprise Security?

can be integrated with almost any security software, easy to build queries, reporting feature is great, very much of a scalable solution. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

I can say the cost is high and also few of the times the customer support was not as expected so it could be better, otherwise a very powerful tool to have in the organization. Review collected by and hosted on G2.com.

Esat C.

Mid-Market (51-1000 emp.)

11/19/2023

"Effective SIEM Solution"

5/5

What do you like best about Splunk Enterprise Security?

Easy to use

Easy to integrate other systems

Splunk makes a difference in the meaning and correlation of logs with its powerful log analytics infrastructure.

Splunk has a good community and customer support Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Splunk Enterprise Security does not have negative feature except of Price Review collected by and hosted on G2.com.

Verified User in Security and Investigations

Enterprise (> 1000 emp.)

3/2/2024

"Neutral Experience"

3/5

What do you like best about Splunk Enterprise Security?

Versatility of Splunk Intelligence Management in handling various types of data and providing insights across different domains Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Learning Curve is a steep. Take a bit of time to undersant everything Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

12/20/2023

"Splunk Enterprise Security provide features for SIEM and Incident response capabilities."

5/5

What do you like best about Splunk Enterprise Security?

Splunk Enterprise Security offers great features of centralized platform to collect, analyze and correlate security data from all over the networks. Also it offers Security automation and orchestration capabilities. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

We are happy with Splunk Enterprise Security because of its resiliency and its features. Review collected by and hosted on G2.com.

Questions about Splunk Enterprise Security? Ask real users or explore answers from the community

Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights.

Guest User

•

Last activity about 4 years ago

What is the difference between Splunk Enterprise and Splunk Enterprise Security?

0 Upvotes

Join the conversation

Guest User

What is Splunk User Behavior Analytics used for?

0 Upvotes

Join the conversation

View all Discussions

Pricing Insights

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

Average Discount

22%

Perceived Cost

$$$$$

View More Pricing Information

Splunk Enterprise Security Comparisons

Microsoft Sentinel

4.4/5(299)

Compare Now

IBM QRadar SIEM

4.4/5(341)

Compare Now

LogRhythm SIEM

4.2/5(152)

Compare Now

Splunk Enterprise Security Features

Network Management

Activity Monitoring

Asset Management

Log Management

Incident Management

Event Management

Automated Response

Incident Reporting

Security Intelligence

Threat Intelligence

Vulnerability Assessment

Behavioral Analytics

View More Features

Categories on G2

Security Information and Event Management (SIEM)Incident Response AI SOC Agents

Explore More

Which lead-to-account matching and routing platforms are most trusted by revenue operations managers based on user reviews?What's the best AI software for small and mid-sized teams running their first AI rollout?Which secure data room providers offer seamless integration with financial tools?

Which Meeting Management software is adopted by consultants and CEOs for streamlined board meeting organization and accountability?Otter PR vs WebiMax: which reputation management services platform delivers better measurable ROI for marketing managers?Pros and Cons Details

Show MoreShow Less

4.3 out of 5 stars

Splunk Enterprise Security Reviews & Product Details

Profile Status

Value at a Glance

Time to Implement

Return on Investment

Top-Rated Alternatives

User Insights

Splunk Enterprise Security Integrations

Splunk Enterprise Security Reviews FAQs

What is Splunk Enterprise Security, and what problem is it built to solve?

What languages does Splunk Enterprise Security support?

What company sizes and industries is Splunk Enterprise Security the best fit for?

How long does it take to implement Splunk Enterprise Security across a team?

What customer support options does Splunk Enterprise Security provide, and how do users find the overall support experience?

What features or capabilities could make Splunk Enterprise Security even more useful?

Is Splunk Enterprise Security considered safe and secure for handling data?

Splunk Enterprise Security Reviews (250)

Splunk Enterprise Security Reviews (250)

What do users say?

Pros & Cons

Filter Reviews

Questions about Splunk Enterprise Security? Ask real users or explore answers from the community

Pricing Insights

Time to Implement

Return on Investment

Average Discount

Perceived Cost

Splunk Enterprise Security Features

Categories on G2

Explore More