Splunk Enterprise Security Reviews & Product Details

Splunk Enterprise Security (ES) is a data-centric, modern security information and event management (SIEM) solution that delivers data-driven insights for full breadth visibility into your security posture so you can protect your business and mitigate risk at scale. With unparalleled search and reporting, advanced analytics, integrated intelligence, and prepackaged security content, Splunk ES accelerates threat detection and investigation, letting you determine the scope of high-priority threats to your environment so you can quickly take action. Built on an open and scalable data platform, you can stay agile in the face of evolving threats and business needs. Our extensive ecosystem of Splunk, partner, and community-built integrations as well as flexible deployment options ensure your technology investments are working in tandem with Splunk ES whilst meeting you wherever you are on your cloud, multi-cloud, or hybrid journey.

Seller

Cisco

Discussions

Splunk Enterprise Security Community

Solution Type

All-in-One

Overview by

Mike Tomita

Value at a Glance

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

View More Pricing Information

Top-Rated Alternatives

View All Alternatives

Splunk Enterprise Security Integrations

(14)

Integration information sourced from real user reviews.

G2 reviews are authentic and verified.

Here's how.

Mohammed K.

Senior Engineer -Cyber Security

Enterprise (> 1000 emp.)

10/1/2022

"User Friendly Security Monitoring and Response Tool"

5/5

What do you like best about Splunk Enterprise Security?

Searching, Apps for each type of devices, Incident Review and Response, Asset Center are few of the excellent features in Enterprise Security.

All these features are very user friendly and provide the easy incident investigation interface. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Correlation of Packet data and End Point Detection and Response data with event logs are not the feature in Enterprise security. Hence lag the complete security analytics of organization data of each layer. Review collected by and hosted on G2.com.

Sherry K.

Network Administrator

Mid-Market (51-1000 emp.)

8/13/2022

"Prevents threats and minimizes system failure cases"

4.5/5

What do you like best about Splunk Enterprise Security?

I like splunk ES because it continuously monitors our system for potential threats and alerts us in real time so that we are able to prevent the threats before they ness up our system. I like its access anomalies dashboard which allows us to identify any breach and suspicious activity from users, this makes it easy for us to prevent any unauthorized and suspicious access and helps us protect our IT infrastructure and keep our sensitive data safe. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

I don't like that i can only monitor the privileged accounts for suspicious activity or access breach it would be very helpful if i can monitor all accounts thisbwould hwlp see which account have anomalies and may pose a threat to our system. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

We jave deployed Splunk Enterprise Security to monitor our IT infrastructure which consists of servers, networks and web applications. It help us to see monitor the system 24/7 and identify all threats and anomalies sobthat ee are able to fix them before they affect our system. Splunk ES allows us also to monitor access logs and suspicious access and breaches that would compromise our sensitive Company information and data Review collected by and hosted on G2.com.

Verified User in Banking

Enterprise (> 1000 emp.)

6/30/2022

"Urged to filter Security data to manage the costs can be dangerous or fatal"

1.5/5

What do you like best about Splunk Enterprise Security?

very nice visualization and Analytics Engine with easy to create Dashboards, many 3rd party integrations and a vast and active community to support in case spluk support did not answer. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Lack of out-of-the-box features, another Toolbox additional to all other Splunk "tools" rather than an integrated Product. Integration, maintenance and customization effort needed are very high. The subscription fee is exploding, and we need to filter now the ingested logs dramatically ... which adds a new vulnerability. Splunk products have too many product vulnerabilities themself for a Security Product. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

Check needs carefully does it come with SES (supported) or download community (no support) Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Detect security treads and hacker attacks, movements in the system, mainly based on MITRE ATT&CK and vulnerabilities found i.e. log4j by ingested and filtered logs. Review collected by and hosted on G2.com.

Kartik S.

Information Security Engineer

Enterprise (> 1000 emp.)

9/2/2022

"One of the Best SIEM in industry"

5/5

What do you like best about Splunk Enterprise Security?

It's easy to deploy, the agent /forwarder is very lightweight, and it can parse almost all log sources, which makes it the best in the industry. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Customer service needs improvement and the tool is a bit expensive, apart from that there are no issues with this product. Review collected by and hosted on G2.com.

Mubeen A.

SOC - Security Engineering Lead

Mid-Market (51-1000 emp.)

4/30/2022

"Splunk Enterprise Security Review"

5/5

What do you like best about Splunk Enterprise Security?

Great product for security monitoring and reporting. Blazing fast searches, superb user interface and excellent visualization options. Also, reporting and other features are great as well. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Scalability is an issue and licensing costs are very high which makes this great tool hard to procure for SMEs. Also, support can improve to enhance the overall experience. Review collected by and hosted on G2.com.

Seereeram D.

Information Technology Security Specialist

Enterprise (> 1000 emp.)

12/7/2021

"Enterprise Security a Security Team Must Have"

5/5

What do you like best about Splunk Enterprise Security?

Enterprise Security has a built-in Risk Analysis Dashboard. This allows an executive-level overview of what is going on in an understandable format which can be viewed by non-technical personnel. It incorporates MITRE, NIST as well as CIS identifiers for threat activity, allowing high-level classification of assets, identity, and communication behavior. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

If you are deploying this product for yourself, it is quite a challenge. Enterprise Security offers the single pane of glass for your investigation and monitoring needs, but to get everything onboarded can be daunting. The identity and assets enrichment was not straightforward and required a lot of manual work. For it to be optimized for full benefit, there is a layer of complexity along the journey Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Splunk Enterprise Security allows us the ability to classify activity in our networks, mapping it to NIST, CIS and Mitre attack categories. This visibility provides easy identification of possible threat activity and the ability to drill down into this to perform investigation and analytics. Once collecting the necessary information this provides excellent coverage into activity. Review collected by and hosted on G2.com.

B M.

Senior IT Security Engineer

Enterprise (> 1000 emp.)

8/4/2022

"Wow!! Wonderful experience!! Everything you need at the tip of your fingers."

5/5

What do you like best about Splunk Enterprise Security?

All the features were great. From the correlation rules to all the details in the reporting were actually great. Indeed a useful product when it comes to granular security. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Nothing to be disliked of. However it could have been great if they had a handy dashboard template for different enterprises. Review collected by and hosted on G2.com.

Seereeram D.

IT Security Specialist

Enterprise (> 1000 emp.)

11/23/2021

"World Class Threat Intelligience, Analytics and Risk Monitoring"

5/5

What do you like best about Splunk Enterprise Security?

Splunk Enterprise Security allows us to actively perform threat intelligence and analysis while providing results in an easy-to-understand manner. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

As with Splunk in general proper configuration and deployment requires a steep learning curve. In general, this is my only issue with Splunk, the complexity of configuration and deployment. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

Ensure teams are appropriately trained before implementation Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Splunk Enterprise Security has provided us with deeper insight into our network. It has addressed a gap in security intelligence by offering links to multiple intelligence feeds while performing active threat analytics and risk-based reporting. Splunk Enterprise Security has allowed us to identify possible incidents on our networks while allowing a deep level of investigation into occurrences. Review collected by and hosted on G2.com.

Rohit S.

Senior Technical Account Manager

Mid-Market (51-1000 emp.)

1/17/2018

Business partner of the seller or seller's competitor, not included in G2 scores.

"Splunk - Looking for troubles :)"

5/5

What do you like best about Splunk Enterprise Security?

Splunk is a great SIEM solution and its integration with almost any network and security device makes it a unique player in market. Its apps and super fast search options are best in class Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

No problems with splunk so far. Its been working very good Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

great tool for SIEM Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

we are integrating our network security devices to corelate logs and making case studies for any security violations. its one of the best part of our SOC Review collected by and hosted on G2.com.

Nikhil P.

Engineer trainee

Enterprise (> 1000 emp.)

11/5/2021

"Smart, efficient and powerful tool to gather and organize raw logs from multiple sources."

4.5/5

What do you like best about Splunk Enterprise Security?

The best feature would be the user interface which is easy to navigate and understand. A little training on how to use the Splunk query language, and you are good to go! Easy to download or share the logs across various platforms and has a very insightful pictorial representation of data in graphs, tables, and various other forms. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

It has an overwhelming amount of features that may go unused in some cases. It would be better if Splunk could be altered according to a user's needs. Splunk doesn't use MFA as far as I know, so it would be better if it is included. If queries aren't precise, your job (output) will be running for a long time. Review collected by and hosted on G2.com.