Splunk Enterprise Security

By Cisco

4.3/5(250)
4.3 out of 5 stars
3 star
0%
2 star
0%
1 star
0%

How would you rate your experience with Splunk?

Splunk Enterprise Security Reviews & Product Details

Profile Status

This profile is currently managed by Splunk Enterprise Security but has limited features.

Are you part of the Splunk Enterprise Security team? Upgrade your plan to enhance your branding and engage with visitors to your profile!

Value at a Glance

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

User Insights

Average based on 250 real user reviews.

Implementation Time

3 months

Perceived Cost

$$$$$

Typical contract price

$0k - $0k

Sign in to view

Per Year

Splunk Enterprise Security Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is Splunk Enterprise Security, and what problem is it built to solve?

Splunk Enterprise Security is used as a SIEM to bring security logs and events together so teams can monitor activity, correlate signals, and investigate potential threats from a centralized view.

What languages does Splunk Enterprise Security support?

Splunk Enterprise Security supports 8 languages: Chinese (Simplified), Chinese (Traditional), English, French, German, Italian, Japanese, and Korean.

What company sizes and industries is Splunk Enterprise Security the best fit for?

Splunk Enterprise Security has a strong fit among positive reviewers from large organizations, with mid-market teams also represented. The industries with the clearest presence include:
  • Enterprise organizations: Companies with more than 1,000 employees are the most represented size segment.
  • Mid-market organizations: Companies with 51–1,000 employees are also well represented.
  • Information technology and computer/network security: These are prominent areas of use.
  • Financial services and banking: These sectors also feature among the represented industries.
  • Telecommunications: This industry appears regularly among positive reviewers.

How long does it take to implement Splunk Enterprise Security across a team?

Implementation timelines vary with the amount of data normalization and configuration required, but 1–3 months is the most commonly reported range. Teams also report shorter and longer rollouts.

What customer support options does Splunk Enterprise Security provide, and how do users find the overall support experience?

Splunk Enterprise Security offers support through email/help desk, phone, and chat, with 24/7 live-rep support. The support experience is mixed: users describe helpful, knowledgeable assistance, while others report slow or inconsistent responses and room to improve support resources.

What features or capabilities could make Splunk Enterprise Security even more useful?

A smoother setup and tuning experience would help teams get value sooner, especially where data normalization and detection configuration take significant effort. Recurring improvement areas include:
  • Simpler onboarding and data normalization: Make it easier to configure data sources and maintain Common Information Model mappings.
  • More approachable search authoring: Improve query guidance, syntax help, and error messages for users learning SPL.
  • More flexible dashboards and incident views: Expand options for tailoring dashboards, alert presentation, and analyst workflows.
  • Faster searches and interface response: Improve performance when working with large volumes of data.

Is Splunk Enterprise Security considered safe and secure for handling data?

Splunk Enterprise Security is used to centralize security data and help teams monitor activity, correlate events, and investigate potential threats, which can give them a clearer view of their environment. That confidence depends on sound configuration and data handling; users also raise concerns about maintaining visibility when managing ingestion costs and about potential conflicts with other add-ons.

Splunk Enterprise Security Reviews (250)

View 2 Video Reviews
Reviews

Splunk Enterprise Security Reviews (250)

View 2 Video Reviews
4.3
250 reviews

What do users say?

Generated using AI from real user reviews

Pros & Cons

Generated from real user reviews
View All Pros and Cons
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
Verified User in Consulting
CC
Verified User in Consulting
Enterprise (> 1000 emp.)
"Splunk an effective SIEM tool"
4.5/5
What do you like best about Splunk Enterprise Security?

Very robust SIEM tool. Effective in Security information and event management Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Could be cumbersome without adequate training Review collected by and hosted on G2.com.

Sushil B.
SB
Sushil B.
administrator
Mid-Market (51-1000 emp.)
"Splunk"
4.5/5
What do you like best about Splunk Enterprise Security?

its use cases, and accuracy which help to easy analysis Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

it's a little bit costly and requires some more attention for implementation Review collected by and hosted on G2.com.

EC
Esat Yasar C.
Mid-Market (51-1000 emp.)
"Best solution for SIEM"
5/5
What do you like best about Splunk Enterprise Security?

Splunk collects logs from all of the company's systems and applications. Splunk Enterprise Security products provide us with predefined rules and integrate all of products Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Price is also big problem for Splunk Enterprise Security. Review collected by and hosted on G2.com.

MK
Mohammed K.
Senior Engineer -Cyber Security
Enterprise (> 1000 emp.)
"User Friendly Security Monitoring and Response Tool"
5/5
What do you like best about Splunk Enterprise Security?

Searching, Apps for each type of devices, Incident Review and Response, Asset Center are few of the excellent features in Enterprise Security. All these features are very user friendly and provide the easy incident investigation interface. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Correlation of Packet data and End Point Detection and Response data with event logs are not the feature in Enterprise security. Hence lag the complete security analytics of organization data of each layer. Review collected by and hosted on G2.com.

SK
Sherry K.
Network Administrator
Mid-Market (51-1000 emp.)
"Prevents threats and minimizes system failure cases"
4.5/5
What do you like best about Splunk Enterprise Security?

I like Splunk ES because it continuously monitors our system for potential threats and alerts us in real time so that we are able to prevent the threats before they mess up our system. I like its access anomalies dashboard which allows us to identify any breach and suspicious activity from users, this makes it easy for us to prevent any unauthorized and suspicious access and helps us protect our IT infrastructure and keep our sensitive data safe. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

I don't like that I can only monitor the privileged accounts for suspicious activity or access breach. It would be very helpful if I could monitor all accounts; this would help see which accounts have anomalies and may pose a threat to our system. Review collected by and hosted on G2.com.

Verified User in Banking
CB
Verified User in Banking
Enterprise (> 1000 emp.)
Originally submitted 6/30/2022
"Urged to filter Security data to manage the costs can be dangerous or fatal"
1.5/5
What do you like best about Splunk Enterprise Security?

very nice visualization and Analytics Engine with easy to create Dashboards, many 3rd party integrations and a vast and active community to support in case spluk support did not answer. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Lack of out-of-the-box features, another Toolbox additional to all other Splunk "tools" rather than an integrated Product. Integration, maintenance and customization effort needed are very high. The subscription fee is exploding, and we need to filter now the ingested logs dramatically ... which adds a new vulnerability. Splunk products have too many product vulnerabilities themself for a Security Product. Review collected by and hosted on G2.com.

Kartik S.
KS
Kartik S.
Information Security Engineer
Enterprise (> 1000 emp.)
"One of the Best SIEM in industry"
5/5
What do you like best about Splunk Enterprise Security?

It's easy to deploy, the agent /forwarder is very lightweight, and it can parse almost all log sources, which makes it the best in the industry. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Customer service needs improvement and the tool is a bit expensive, apart from that there are no issues with this product. Review collected by and hosted on G2.com.

Mubeen A.
MA
Mubeen A.
SOC - Security Engineering Lead
Mid-Market (51-1000 emp.)
"Splunk Enterprise Security Review"
5/5
What do you like best about Splunk Enterprise Security?

Great product for security monitoring and reporting. Blazing fast searches, superb user interface and excellent visualization options. Also, reporting and other features are great as well. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Scalability is an issue and licensing costs are very high which makes this great tool hard to procure for SMEs. Also, support can improve to enhance the overall experience. Review collected by and hosted on G2.com.

SD
Seereeram D.
Information Technology Security Specialist
Enterprise (> 1000 emp.)
Originally submitted 12/7/2021
"Enterprise Security a Security Team Must Have"
5/5
What do you like best about Splunk Enterprise Security?

Enterprise Security has a built-in Risk Analysis Dashboard. This allows an executive-level overview of what is going on in an understandable format which can be viewed by non-technical personnel. It incorporates MITRE, NIST as well as CIS identifiers for threat activity, allowing high-level classification of assets, identity, and communication behavior. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

If you are deploying this product for yourself, it is quite a challenge. Enterprise Security offers the single pane of glass for your investigation and monitoring needs, but to get everything onboarded can be daunting. The identity and assets enrichment was not straightforward and required a lot of manual work. For it to be optimized for full benefit, there is a layer of complexity along the journey Review collected by and hosted on G2.com.

BM
B M.
Senior IT Security Engineer
Enterprise (> 1000 emp.)
"Wow!! Wonderful experience!! Everything you need at the tip of your fingers."
5/5
What do you like best about Splunk Enterprise Security?

All the features were great. From the correlation rules to all the details in the reporting were actually great. Indeed a useful product when it comes to granular security. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Nothing to be disliked of. However it could have been great if they had a handy dashboard template for different enterprises. Review collected by and hosted on G2.com.

Questions about Splunk Enterprise Security? Ask real users or explore answers from the community

Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights.

GU
Guest User
•
Last activity about 4 years ago

What is the difference between Splunk Enterprise and Splunk Enterprise Security?

GU
Guest User

What is Splunk User Behavior Analytics used for?

Pricing Insights

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

Average Discount

22%

Perceived Cost

$$$$$
Splunk Enterprise Security Comparisons
Splunk Enterprise Security Features
Activity Monitoring
Asset Management
Log Management
Event Management
Automated Response
Incident Reporting
Threat Intelligence
Vulnerability Assessment
Behavioral Analytics
Product Avatar Image
Splunk
4.3/5(250)