
its use cases, and accuracy which help to easy analysis Review collected by and hosted on G2.com.
it's a little bit costly and requires some more attention for implementation Review collected by and hosted on G2.com.

its use cases, and accuracy which help to easy analysis Review collected by and hosted on G2.com.
it's a little bit costly and requires some more attention for implementation Review collected by and hosted on G2.com.
Splunk collects logs from all of the company's systems and applications. Splunk Enterprise Security products provide us with predefined rules and integrate all of products Review collected by and hosted on G2.com.
Price is also big problem for Splunk Enterprise Security. Review collected by and hosted on G2.com.
Searching, Apps for each type of devices, Incident Review and Response, Asset Center are few of the excellent features in Enterprise Security. All these features are very user friendly and provide the easy incident investigation interface. Review collected by and hosted on G2.com.
Correlation of Packet data and End Point Detection and Response data with event logs are not the feature in Enterprise security. Hence lag the complete security analytics of organization data of each layer. Review collected by and hosted on G2.com.
I like Splunk ES because it continuously monitors our system for potential threats and alerts us in real time so that we are able to prevent the threats before they mess up our system. I like its access anomalies dashboard which allows us to identify any breach and suspicious activity from users, this makes it easy for us to prevent any unauthorized and suspicious access and helps us protect our IT infrastructure and keep our sensitive data safe. Review collected by and hosted on G2.com.
I don't like that I can only monitor the privileged accounts for suspicious activity or access breach. It would be very helpful if I could monitor all accounts; this would help see which accounts have anomalies and may pose a threat to our system. Review collected by and hosted on G2.com.
very nice visualization and Analytics Engine with easy to create Dashboards, many 3rd party integrations and a vast and active community to support in case spluk support did not answer. Review collected by and hosted on G2.com.
Lack of out-of-the-box features, another Toolbox additional to all other Splunk "tools" rather than an integrated Product. Integration, maintenance and customization effort needed are very high. The subscription fee is exploding, and we need to filter now the ingested logs dramatically ... which adds a new vulnerability. Splunk products have too many product vulnerabilities themself for a Security Product. Review collected by and hosted on G2.com.

It's easy to deploy, the agent /forwarder is very lightweight, and it can parse almost all log sources, which makes it the best in the industry. Review collected by and hosted on G2.com.
Customer service needs improvement and the tool is a bit expensive, apart from that there are no issues with this product. Review collected by and hosted on G2.com.

Great product for security monitoring and reporting. Blazing fast searches, superb user interface and excellent visualization options. Also, reporting and other features are great as well. Review collected by and hosted on G2.com.
Scalability is an issue and licensing costs are very high which makes this great tool hard to procure for SMEs. Also, support can improve to enhance the overall experience. Review collected by and hosted on G2.com.
Enterprise Security has a built-in Risk Analysis Dashboard. This allows an executive-level overview of what is going on in an understandable format which can be viewed by non-technical personnel. It incorporates MITRE, NIST as well as CIS identifiers for threat activity, allowing high-level classification of assets, identity, and communication behavior. Review collected by and hosted on G2.com.
If you are deploying this product for yourself, it is quite a challenge. Enterprise Security offers the single pane of glass for your investigation and monitoring needs, but to get everything onboarded can be daunting. The identity and assets enrichment was not straightforward and required a lot of manual work. For it to be optimized for full benefit, there is a layer of complexity along the journey Review collected by and hosted on G2.com.
All the features were great. From the correlation rules to all the details in the reporting were actually great. Indeed a useful product when it comes to granular security. Review collected by and hosted on G2.com.
Nothing to be disliked of. However it could have been great if they had a handy dashboard template for different enterprises. Review collected by and hosted on G2.com.

Splunk Enterprise Security allows us to actively perform threat intelligence and analysis while providing results in an easy-to-understand manner. Review collected by and hosted on G2.com.
As with Splunk in general proper configuration and deployment requires a steep learning curve. In general, this is my only issue with Splunk, the complexity of configuration and deployment. Review collected by and hosted on G2.com.
Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights.
What is the difference between Splunk Enterprise and Splunk Enterprise Security?
Averages based on real user reviews.
3 months
18 months
22%