Splunk Enterprise Security

By Cisco

4.3/5(250)
4.3 out of 5 stars
3 star
0%
2 star
0%
1 star
0%

How would you rate your experience with Splunk?

Splunk Enterprise Security Reviews & Product Details

Profile Status

This profile is currently managed by Splunk Enterprise Security but has limited features.

Are you part of the Splunk Enterprise Security team? Upgrade your plan to enhance your branding and engage with visitors to your profile!

Value at a Glance

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

User Insights

Average based on 250 real user reviews.

Implementation Time

3 months

Perceived Cost

$$$$$

Typical contract price

$0k - $0k

Sign in to view

Per Year

Splunk Enterprise Security Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is Splunk Enterprise Security, and what problem is it built to solve?

Splunk Enterprise Security is used as a SIEM to bring security logs and events together so teams can monitor activity, correlate signals, and investigate potential threats from a centralized view.

What languages does Splunk Enterprise Security support?

Splunk Enterprise Security supports 8 languages: Chinese (Simplified), Chinese (Traditional), English, French, German, Italian, Japanese, and Korean.

What company sizes and industries is Splunk Enterprise Security the best fit for?

Splunk Enterprise Security has a strong fit among positive reviewers from large organizations, with mid-market teams also represented. The industries with the clearest presence include:
  • Enterprise organizations: Companies with more than 1,000 employees are the most represented size segment.
  • Mid-market organizations: Companies with 51–1,000 employees are also well represented.
  • Information technology and computer/network security: These are prominent areas of use.
  • Financial services and banking: These sectors also feature among the represented industries.
  • Telecommunications: This industry appears regularly among positive reviewers.

How long does it take to implement Splunk Enterprise Security across a team?

Implementation timelines vary with the amount of data normalization and configuration required, but 1–3 months is the most commonly reported range. Teams also report shorter and longer rollouts.

What customer support options does Splunk Enterprise Security provide, and how do users find the overall support experience?

Splunk Enterprise Security offers support through email/help desk, phone, and chat, with 24/7 live-rep support. The support experience is mixed: users describe helpful, knowledgeable assistance, while others report slow or inconsistent responses and room to improve support resources.

What features or capabilities could make Splunk Enterprise Security even more useful?

A smoother setup and tuning experience would help teams get value sooner, especially where data normalization and detection configuration take significant effort. Recurring improvement areas include:
  • Simpler onboarding and data normalization: Make it easier to configure data sources and maintain Common Information Model mappings.
  • More approachable search authoring: Improve query guidance, syntax help, and error messages for users learning SPL.
  • More flexible dashboards and incident views: Expand options for tailoring dashboards, alert presentation, and analyst workflows.
  • Faster searches and interface response: Improve performance when working with large volumes of data.

Is Splunk Enterprise Security considered safe and secure for handling data?

Splunk Enterprise Security is used to centralize security data and help teams monitor activity, correlate events, and investigate potential threats, which can give them a clearer view of their environment. That confidence depends on sound configuration and data handling; users also raise concerns about maintaining visibility when managing ingestion costs and about potential conflicts with other add-ons.

Splunk Enterprise Security Reviews (250)

View 2 Video Reviews
Reviews

Splunk Enterprise Security Reviews (250)

View 2 Video Reviews
4.3
250 reviews

What do users say?

Generated using AI from real user reviews

Pros & Cons

Generated from real user reviews
View All Pros and Cons
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
Seereeram D.
SD
Seereeram D.
IT Security Specialist
Enterprise (> 1000 emp.)
"World Class Threat Intelligence, Analytics and Risk Monitoring"
5/5
What do you like best about Splunk Enterprise Security?

Splunk Enterprise Security allows us to actively perform threat intelligence and analysis while providing results in an easy-to-understand manner. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

As with Splunk in general proper configuration and deployment requires a steep learning curve. In general, this is my only issue with Splunk, the complexity of configuration and deployment. Review collected by and hosted on G2.com.

Rohit S.
RS
Rohit S.
Senior Technical Account Manager
Mid-Market (51-1000 emp.)
Originally submitted 1/17/2018
Business partner of the seller or seller's competitor, not included in G2 scores.
"Splunk - Looking for troubles :)"
5/5
What do you like best about Splunk Enterprise Security?

Splunk is a great SIEM solution and its integration with almost any network and security device makes it a unique player in market. Its apps and super fast search options are best in class Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

No problems with splunk so far. Its been working very good Review collected by and hosted on G2.com.

Nikhil P.
NP
Nikhil P.
Engineer trainee
Enterprise (> 1000 emp.)
"Smart, efficient and powerful tool to gather and organize raw logs from multiple sources."
4.5/5
What do you like best about Splunk Enterprise Security?

The best feature would be the user interface which is easy to navigate and understand. A little training on how to use the Splunk query language, and you are good to go! Easy to download or share the logs across various platforms and has a very insightful pictorial representation of data in graphs, tables, and various other forms. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

It has an overwhelming amount of features that may go unused in some cases. It would be better if Splunk could be altered according to a user's needs. Splunk doesn't use MFA as far as I know, so it would be better if it is included. If queries aren't precise, your job (output) will be running for a long time. Review collected by and hosted on G2.com.

Verified User in Pharmaceuticals
CP
Verified User in Pharmaceuticals
Enterprise (> 1000 emp.)
"Profesional SIEM based on Splunk Enterprise"
3.5/5
What do you like best about Splunk Enterprise Security?

The best thing I like about Splunk Enterprise Security is that it comes as an add-on on top of Splunk Enterprise. This thing makes it easy to deploy and use if you are familiar with Splunk. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

I don't like that it doesn't come with many security use-cases and alerts out of the box and it's a bit difficult to configure it from scratch. This product can't be highly customized, but it can be confusing for untrained personnel. Review collected by and hosted on G2.com.

Verified User in Security and Investigations
AS
Verified User in Security and Investigations
Enterprise (> 1000 emp.)
"Very useful for user activity monitoring"
5/5
What do you like best about Splunk Enterprise Security?

The detection power and customisation possibilities. Very helpful to identify any suspicious activities in the environment within no time. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Nothing so far. I'm really happy with its performance Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
UI
Verified User in Information Technology and Services
Enterprise (> 1000 emp.)
"The best SIEM out there, if you're willing to learn"
5/5
What do you like best about Splunk Enterprise Security?

You can customize all aspects of the platform, automate workflow actions, design rules with detailed drill down searches, enrich the notables with valuable context, and if you're willing to get creative and hack it a little bit, you can do unexpected things. If you choose to follow this route, there is a great and active community ready to help you achieve even the weirdest of goals. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Hard to ensure the logs are processed into CIM compliance, if this is not done right, the product becomes mediocre. This process can require professional services and lots of maintenance. Review collected by and hosted on G2.com.

Munigala R.
MR
Munigala R.
Cyber Security Specialist
Mid-Market (51-1000 emp.)
Business partner of the seller or seller's competitor, not included in G2 scores.
"splunk experience"
4.5/5
What do you like best about Splunk Enterprise Security?

able to monitor logs of end devices more deeply with every event been triggered in the console which helps for monitoring Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

no major dislikes but sometimes experiences timestamp issues with logs Review collected by and hosted on G2.com.

vivek sagar s.
VS
vivek sagar s.
Sr DevOps Engineer
Enterprise (> 1000 emp.)
"Best tool for troubleshooting server issue"
4.5/5
What do you like best about Splunk Enterprise Security?

Easy to search and analyze the issue based on keywords. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Queries can be lengthy sometimes. Otherwise output gets bigger and bigger. Review collected by and hosted on G2.com.

VS
Vinay S.
Application Development Analyst
Enterprise (> 1000 emp.)
"Very satisfied with the splunk enterprise security used in our project"
5/5
What do you like best about Splunk Enterprise Security?

The dashboard facility provided to view the different types of logs generated from our application and also the data gets stored. Which will help us to analyze. It also provides enhanced graphical user interface so that the end user will be able to easily navigate through the tool. Need to mention the charting capabilities of splunk which represents the data graphically which inturn makes the users to identify the variation in the logs generated by the application.this also feels very rich while using the same.It also helps I real time monitoring which provides us with the accurate and latest data which we will be able to figure it out. Also the BI dashboards adds the most value for splunk.we can use this for the SQL injection vulnerability fixes and the logs to store the same as well Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

It seems to be expensive and also felt the search operations on the dashboards can be made a bit faster than the usual speed. In simple words it will be easy if we optimize this dashboard search functionality. A problem that was we licensed it base don how much data we upload to them everyday.something changed I. One of our applications and it started changing the behaviour. Since the competition is very hight in the other business fileds it will be beneficial for Splunk to resolve these issues to keep up the top position and remain as a roller in this industry. Review collected by and hosted on G2.com.

Verified User in Oil & Energy
AO
Verified User in Oil & Energy
Mid-Market (51-1000 emp.)
Business partner of the seller or seller's competitor, not included in G2 scores.
"Best SIEM tool in the world"
5/5
What do you like best about Splunk Enterprise Security?

The analysis and indexing of any data format. Integration support for almost all of the security devices available in the market. SOAR feature addition makes it one of a kind in the industry. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Best product comes with a heavy price tag on it. Many SMB companies could not afford the price of the products and the add-ons. Review collected by and hosted on G2.com.

Questions about Splunk Enterprise Security? Ask real users or explore answers from the community

Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights.

GU
Guest User
•
Last activity about 4 years ago

What is the difference between Splunk Enterprise and Splunk Enterprise Security?

GU
Guest User

What is Splunk User Behavior Analytics used for?

Pricing Insights

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

Average Discount

22%

Perceived Cost

$$$$$
Splunk Enterprise Security Comparisons
Splunk Enterprise Security Features
Activity Monitoring
Asset Management
Log Management
Event Management
Automated Response
Incident Reporting
Threat Intelligence
Vulnerability Assessment
Behavioral Analytics
Product Avatar Image
Splunk
4.3/5(250)