Splunk Enterprise Security Pros and Cons: Top 5 Advantages and Disadvantages

Quick AI Summary Based on G2 Reviews

Generated from real user reviews

Users value the ease of use of Splunk Enterprise Security, enhancing their monitoring and log management experience. (15 mentions)
Users appreciate the easy integrations of Splunk Enterprise Security, enabling seamless connection with various platforms and systems. (13 mentions)
Users highlight the impressive threat detection capabilities of Splunk Enterprise Security, enhancing security focus and reducing false alarms. (13 mentions)
Users value the effective features of Splunk Enterprise Security, enhancing security analysis with comprehensive logs and insights. (12 mentions)
Users appreciate the user-friendly interface of Splunk Enterprise Security, enabling efficient monitoring and attractive dashboards. (11 mentions)
Users note that the high cost of Splunk Enterprise Security is a major drawback for smaller organizations. (17 mentions)
Users find the initial implementation complex, needing expert resources and time to onboard Splunk Enterprise Security effectively. (8 mentions)
Users find the complex implementation of Splunk Enterprise Security challenging, requiring extensive expertise and resources. (6 mentions)
Users find the complexity and extensive setup of Splunk Enterprise Security to be time-consuming and challenging. (6 mentions)
Users find the difficult learning curve of Splunk Enterprise Security a challenge for beginners and costly to set up. (6 mentions)

5 Pros or Advantages of Splunk Enterprise Security

1. Ease of Use
Users value the ease of use of Splunk Enterprise Security, enhancing their monitoring and log management experience.
See 15 mentions

See Related User Reviews

JM

Jordan M.

Enterprise (> 1000 emp.)

4.0/5

"Splunk in a security environment"

What do you like about Splunk Enterprise Security?

Splunk is easy to use/configure and to find what i need. plus, the splunk employees with whom we work are very talented and skilled

EM

Ernesto M.

Mid-Market (51-1000 emp.)

5.0/5

"Easy to integrate, understand the workflows and to manage."

What do you like about Splunk Enterprise Security?

Splunk ES is easy to manage and understard even if you are new with SIEMs. The workflows are easy to follow and the language the splunk uses is easy t

2. Easy Integrations
Users appreciate the easy integrations of Splunk Enterprise Security, enabling seamless connection with various platforms and systems.
See 13 mentions

See Related User Reviews

Verified User
A

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Robust SIEM Solution with Strong Ecosystem Support"

What do you like about Splunk Enterprise Security?

✅ Powerful Search and Correlation Capabilities Splunk Enterprise Security excels at log aggregation, correlation, and threat detection. The Search Pr

EM

Ernesto M.

Mid-Market (51-1000 emp.)

5.0/5

"Easy to integrate, understand the workflows and to manage."

What do you like about Splunk Enterprise Security?

Splunk ES is easy to manage and understard even if you are new with SIEMs. The workflows are easy to follow and the language the splunk uses is easy t

3. Threat Detection
Users highlight the impressive threat detection capabilities of Splunk Enterprise Security, enhancing security focus and reducing false alarms.
See 13 mentions

See Related User Reviews

NT

Naushad T.

Enterprise (> 1000 emp.)

4.5/5

"Splunk ES- Scalable SIEM for Large Enterprise"

What do you like about Splunk Enterprise Security?

The best thing about Splunk is the deep visibility it provides across the environment, along with its strong ability to correlate large volumes of sec

Verified User
U

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Splunk user behavior"

What do you like about Splunk Enterprise Security?

It's great because it uses smart technology to spot unusual behavior from users that might signal security issues. It helps find potential threats ea

4. Features
Users value the effective features of Splunk Enterprise Security, enhancing security analysis with comprehensive logs and insights.
See 12 mentions

See Related User Reviews

Muhammad R.
MR

Muhammad R.

Enterprise (> 1000 emp.)

5.0/5

"Unmatched Visibility and Customization for Security Operations"

What do you like about Splunk Enterprise Security?

What I like most about Splunk Enterprise Security is its ability to give clear and comprehensive visibility across the entire environment. The correla

Verified User
A

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Robust SIEM Solution with Strong Ecosystem Support"

What do you like about Splunk Enterprise Security?

✅ Powerful Search and Correlation Capabilities Splunk Enterprise Security excels at log aggregation, correlation, and threat detection. The Search Pr

5. User Interface
Users appreciate the user-friendly interface of Splunk Enterprise Security, enabling efficient monitoring and attractive dashboards.
See 11 mentions

See Related User Reviews

Muhammad R.
MR

Muhammad R.

Enterprise (> 1000 emp.)

5.0/5

"Unmatched Visibility and Customization for Security Operations"

What do you like about Splunk Enterprise Security?

What I like most about Splunk Enterprise Security is its ability to give clear and comprehensive visibility across the entire environment. The correla

RP

RUDRA P.

Enterprise (> 1000 emp.)

5.0/5

"Splunk User Behavior Analytics Review"

What do you like about Splunk Enterprise Security?

Splunk User Behavior Analytics establishes baseline behaviors for users, devices, and applications using unsupervised machine learning algorithms. It

5 Cons or Disadvantages of Splunk Enterprise Security

1. Expensive
Users note that the high cost of Splunk Enterprise Security is a major drawback for smaller organizations.
See 17 mentions

See Related User Reviews

Verified User
A

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Robust SIEM Solution with Strong Ecosystem Support"

What do you dislike about Splunk Enterprise Security?

❌ Learning Curve The flexibility of SPL is a double-edged sword. New analysts often struggle with query writing and alert customization unless they h

EM

Ernesto M.

Mid-Market (51-1000 emp.)

5.0/5

"Easy to integrate, understand the workflows and to manage."

What do you dislike about Splunk Enterprise Security?

Might be very expensinve depend of how much data you are ingesting.

2. Complex Setup
Users find the initial implementation complex, needing expert resources and time to onboard Splunk Enterprise Security effectively.
See 8 mentions

See Related User Reviews

NT

Naushad T.

Enterprise (> 1000 emp.)

4.5/5

"Splunk ES- Scalable SIEM for Large Enterprise"

What do you dislike about Splunk Enterprise Security?

The initial implementation is complicated and requires significant expertise, time, and resources. In our case, we had to extend the contract to a thi

Muhammad R.
MR

Muhammad R.

Enterprise (> 1000 emp.)

5.0/5

"Unmatched Visibility and Customization for Security Operations"

What do you dislike about Splunk Enterprise Security?

What I dislike about Splunk Enterprise Security is that some of its features can be quite resource intensive. The platform is powerful, but it sometim

3. Complex Implementation
Users find the complex implementation of Splunk Enterprise Security challenging, requiring extensive expertise and resources.
See 6 mentions

See Related User Reviews

NT

Naushad T.

Enterprise (> 1000 emp.)

4.5/5

"Splunk ES- Scalable SIEM for Large Enterprise"

What do you dislike about Splunk Enterprise Security?

The initial implementation is complicated and requires significant expertise, time, and resources. In our case, we had to extend the contract to a thi

SS

Sanket S.

Mid-Market (51-1000 emp.)

5.0/5

"Navigating insider threats using Splunk"

What do you dislike about Splunk Enterprise Security?

Setting up and configuring this solution can be complex and time consuming. It may generates false positives, especially in the early stages of deplo

4. Complexity
Users find the complexity and extensive setup of Splunk Enterprise Security to be time-consuming and challenging.
See 6 mentions

See Related User Reviews

Verified User
U

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Splunk user behavior"

What do you dislike about Splunk Enterprise Security?

it can be complex and require a lot of setup.

SS

Sanket S.

Mid-Market (51-1000 emp.)

5.0/5

"Navigating insider threats using Splunk"

What do you dislike about Splunk Enterprise Security?

Setting up and configuring this solution can be complex and time consuming. It may generates false positives, especially in the early stages of deplo

5. Difficult Learning
Users find the difficult learning curve of Splunk Enterprise Security a challenge for beginners and costly to set up.
See 6 mentions

See Related User Reviews

Alexandra V.
AV

Alexandra V.

Mid-Market (51-1000 emp.)

4.5/5

"Splunk Enterprise Security is the master log data collection and threat detection"

What do you dislike about Splunk Enterprise Security?

Advanced security settings not easy especially when new with the system. The support team deseves merit for being helpful and always available when in

Verified User
U

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Neutral Experience"

What do you dislike about Splunk Enterprise Security?

Learning Curve is a steep. Take a bit of time to undersant everything

Splunk Enterprise Security Reviews (248)

View 2 Video Reviews
Reviews

Splunk Enterprise Security Reviews (248)

View 2 Video Reviews
4.3
248 reviews
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
Here's how.
Tejas B.
TB
Tejas B.
Senior Cloud Information Security Engineer
Mid-Market (51-1000 emp.)
More Options
"Best platform for threat analysis"
5/5
What do you like best about Splunk Enterprise Security?

Threat intel feeds, all threat related dashboards to investigate security incident. Asset and identity dashboard helps to prioritise the incident from incident review dashboard. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Threat intel feed should be divided in different category. For example, bad IPs, bad domains, bad URLs instead of clubbing them together. Review collected by and hosted on G2.com.

Shreyansh G.
SG
Shreyansh G.
Security Associate Engineer
Small-Business (50 or fewer emp.)
More Options
"Monitoring and SIEM for Stock market and financial brokers."
4.5/5
What do you like best about Splunk Enterprise Security?

The powerful searching and customization in splunk are awesome. Also the scalability is superb which maked it easy for continuity of work even with changes in the infrastructure. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

The complexity in the setup and high costs are a bit of dislikes for Splunk that I have. Review collected by and hosted on G2.com.

Camilo A.
CA
Camilo A.
Staff Support Engineer
Enterprise (> 1000 emp.)
More Options
"Invaluable tool to analyze large amounts of data"
4/5
What do you like best about Splunk Enterprise Security?

It helps to make well-informed decisions based on data in order to monitor data in real time. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

There is a lot of configuration required to get value Review collected by and hosted on G2.com.

Snigdha D.
SD
Snigdha D.
IT Analyst
Enterprise (> 1000 emp.)
More Options
"Splunk monitoring features"
5/5
What do you like best about Splunk Enterprise Security?

I like the monitoring features in Splunk, and most of all, it's very user-friendly. It allows checking the device logs for a very long period in very little time. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Commands should be easy enough to learn for a beginner level engineer Review collected by and hosted on G2.com.

Vijay Kumar T.
VT
Vijay Kumar T.
Deputy Manager
Information Technology and Services
Enterprise (> 1000 emp.)
More Options
"Great tool for security analysis"
4.5/5
What do you like best about Splunk Enterprise Security?

can be integrated with almost any securty software, easy to build queries, reporting feature is great, very much of a scalable solution. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

I can say the cost is high and also few of the times the customer support was not as expected so it could be better, otherwise a very powerful tool to have in the organization. Review collected by and hosted on G2.com.

EC
Esat C.
Mid-Market (51-1000 emp.)
More Options
"Effective SIEM Solution"
5/5
What do you like best about Splunk Enterprise Security?

Easy to use

Easy to integrate other systems

Splunk makes a difference in the meaning and correlation of logs with its powerful log analytics infrastructure.

Splunk has a good community and customer support Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Splunk Enterprise Security does not have negative feature except of Price Review collected by and hosted on G2.com.

Verified User in Security and Investigations
US
Verified User in Security and Investigations
Enterprise (> 1000 emp.)
More Options
"Neutral Experience"
3/5
What do you like best about Splunk Enterprise Security?

Versatility of Splunk Intelligence Management in handling various types of data and providing insights across different domains Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Learning Curve is a steep. Take a bit of time to undersant everything Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
CI
Verified User in Information Technology and Services
Enterprise (> 1000 emp.)
More Options
"Splunk Enterprise Security provide features for SIEM and Incident response capabilities."
5/5
What do you like best about Splunk Enterprise Security?

Splunk Enterprise Security offers great features of centralized platform to collect, analyze and correlate security data from all over the networks. Also it offers Security automation and orchestration capabilities. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

We are happy with splunk Enterprise Security because of its resiliency snd its features. Review collected by and hosted on G2.com.

nagaraju S.
NS
nagaraju S.
IT Lead
Financial Services
Mid-Market (51-1000 emp.)
More Options
"Spunk review"
3.5/5
What do you like best about Splunk Enterprise Security?

It assists security workers in analyzing noteworthy events and prioritizing threats and taking appropriate action. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Splunk Intelligence Management does not have anything to dislike as such Review collected by and hosted on G2.com.

Verified User in Computer & Network Security
UC
Verified User in Computer & Network Security
Mid-Market (51-1000 emp.)
More Options
"Splunk - A Versatile Data Analytics and Monitoring Platform"
4/5
What do you like best about Splunk Enterprise Security?

Splunk is an incredibly powerful data analytics and monitoring platform that has become an integral part of our IT infrastructure. As an IT professional, I have been using Splunk extensively for the past few years, and it has consistently proven its worth in managing and extracting valuable insights from our data. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

While the functionality Splunk offers is impressive, the cost of licensing can be prohibitive for small to mid-sized organizations. Careful planning and resource allocation are required to make the most of the investment. Review collected by and hosted on G2.com.

Categories on G2
Explore More
Product Avatar Image
Splunk
4.3/5(248)