Splunk Enterprise Security Reviews & Product Details

Splunk Enterprise Security (ES) is a data-centric, modern security information and event management (SIEM) solution that delivers data-driven insights for full breadth visibility into your security posture so you can protect your business and mitigate risk at scale. With unparalleled search and reporting, advanced analytics, integrated intelligence, and prepackaged security content, Splunk ES accelerates threat detection and investigation, letting you determine the scope of high-priority threats to your environment so you can quickly take action. Built on an open and scalable data platform, you can stay agile in the face of evolving threats and business needs. Our extensive ecosystem of Splunk, partner, and community-built integrations as well as flexible deployment options ensure your technology investments are working in tandem with Splunk ES whilst meeting you wherever you are on your cloud, multi-cloud, or hybrid journey.

Seller

Cisco

Discussions

Splunk Enterprise Security Community

Languages Supported

German, English, French, Italian, Japanese, Korean, Chinese (Simplified), Chinese (Traditional)

Solution Type

All-in-One

Overview by

Mike Tomita

Value at a Glance

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

View More Pricing Information

Top-Rated Alternatives

View All Alternatives

User Insights

Average based on 249 real user reviews.

Implementation Time

3 months

Perceived Cost

$$$$$

Typical contract price

$0k - $0k

Per Year

Splunk Enterprise Security Integrations

(17)

Integration information sourced from real user reviews.

AWS CloudTrail

AWS Transfer Family

Azure Active Directory...

Azure Firewall

Cisco Duo

CrowdStrike Falcon Endpoint...

FortiGate SD-WAN

FortiGate-VM NGFW

Microsoft Defender XDR

Show More Integrations

G2 reviews are authentic and verified.

Here's how.

Rohit S.

Senior Technical Account Manager

Mid-Market (51-1000 emp.)

1/17/2018

Business partner of the seller or seller's competitor, not included in G2 scores.

"Splunk - Looking for troubles :)"

5/5

What do you like best about Splunk Enterprise Security?

Splunk is a great SIEM solution and its integration with almost any network and security device makes it a unique player in market. Its apps and super fast search options are best in class Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

No problems with splunk so far. Its been working very good Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

great tool for SIEM Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

we are integrating our network security devices to corelate logs and making case studies for any security violations. its one of the best part of our SOC Review collected by and hosted on G2.com.

Nikhil P.

Engineer trainee

Enterprise (> 1000 emp.)

11/5/2021

"Smart, efficient and powerful tool to gather and organize raw logs from multiple sources."

4.5/5

What do you like best about Splunk Enterprise Security?

The best feature would be the user interface which is easy to navigate and understand. A little training on how to use the Splunk query language, and you are good to go! Easy to download or share the logs across various platforms and has a very insightful pictorial representation of data in graphs, tables, and various other forms. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

It has an overwhelming amount of features that may go unused in some cases. It would be better if Splunk could be altered according to a user's needs. Splunk doesn't use MFA as far as I know, so it would be better if it is included. If queries aren't precise, your job (output) will be running for a long time. Review collected by and hosted on G2.com.

Verified User in Pharmaceuticals

Enterprise (> 1000 emp.)

1/18/2022

"Profesional SIEM based on Splunk Enterprise"

3.5/5

What do you like best about Splunk Enterprise Security?

The best thing I like about Splunk Enterprise Security is that it comes as an add-on on top of Splunk Enterprise. This thing makes it easy to deploy and use if you are familiar with Splunk. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

I don't like that it doesn't come with many security use-cases and alerts out of the box and it's a bit difficult to configure it from scratch. This product can't be highly customized, but it can be confusing for untrained personnel. Review collected by and hosted on G2.com.

Verified User in Security and Investigations

Enterprise (> 1000 emp.)

3/7/2022

"Very useful for user activity monitoring"

5/5

What do you like best about Splunk Enterprise Security?

The detection power and customisation possibilities. Very helpful to identify any suspicious activities in the environment within no time. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Nothing so far. I'm really happy with its performance Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

I have tried other user behaviour tools as well but really happy with splunk as it is one solution for multiple problems Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Majorly User behaviour things are been taken care by splunk user behaviour analytics tool. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

3/5/2021

"The best SIEM out there, if you're willing to learn"

5/5

What do you like best about Splunk Enterprise Security?

You can customize all aspects of the platform, automate workflow actions, design rules with detailed drill down searches, enrich the notables with valuable context, and if you're willing to get creative and hack it a little bit, you can do unexpected things. If you choose to follow this route, there is a great and active community ready to help you achieve even the weirdest of goals. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Hard to ensure the logs are processed into CIM compliance, if this is not done right, the product becomes mediocre. This process can require professional services and lots of maintenance. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

Invest in training your personnel properly, since it's very easy to misuse this tool and get low performance or inconsistent results. Also adhere to logging standards, Splunk ES works amazingly as long as you keep your logs CIM compliant and in good shape, if that's not the case you'll get an expensive, unreliable, and even slow tool. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Using it as a SIEM, allowing to generate alerts for the SOC to triage and then kick off more in-depth investigations, providing different views of your overall security stance under the concept of domains, you can analyze dashboards related to hosts, malware, network activity and so on. It also integrates with threat intelligence frameworks so your detection rules have a higher relevance. Review collected by and hosted on G2.com.

Munigala R.

Cyber Security Specialist

Mid-Market (51-1000 emp.)

6/17/2021

Business partner of the seller or seller's competitor, not included in G2 scores.

"splunk experience"

4.5/5

What do you like best about Splunk Enterprise Security?

able to monitor logs of end devices more deeply with every event been triggered in the console which helps for monitoring Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

no major dislikes but sometimes experiences timestamp issues with logs Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

Good SIEM tool to monitor the client environment and able to create dashboards reports for real-time monitoring of the logs Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Easy able to identify the threats in the network with the help of rules and defend them promptly Review collected by and hosted on G2.com.

vivek sagar s.

Sr DevOps Engineer

Enterprise (> 1000 emp.)

7/27/2021

"Best tool for troubleshooting server issue"

4.5/5

What do you like best about Splunk Enterprise Security?

Easy to search and analyze the issue based on keywords. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Queries can be lengthy sometimes. Otherwise output gets bigger and bigger. Review collected by and hosted on G2.com.

Vinay S.

Application Development Analyst

Enterprise (> 1000 emp.)

7/30/2020

"Very satisfied with the splunk enterprise security used in our project"

5/5

What do you like best about Splunk Enterprise Security?

The dashboard facility provided to view the different types of logs generated from our application and also the data gets stored. Which will help us to analyze. It also provides enhanced graphical user interface so that the end user will be able to easily navigate through the tool. Need to mention the charting capabilities of splunk which represents the data graphically which inturn makes the users to identify the variation in the logs generated by the application.this also feels very rich while using the same.It also helps I real time monitoring which provides us with the accurate and latest data which we will be able to figure it out. Also the BI dashboards adds the most value for splunk.we can use this for the SQL injection vulnerability fixes and the logs to store the same as well Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

It seems to be expensive and also felt the search operations on the dashboards can be made a bit faster than the usual speed. In simple words it will be easy if we optimize this dashboard search functionality. A problem that was we licensed it base don how much data we upload to them everyday.something changed I. One of our applications and it started changing the behaviour. Since the competition is very hight in the other business fileds it will be beneficial for Splunk to resolve these issues to keep up the top position and remain as a roller in this industry. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

I surely recommend this software to others since it is really helpful in maintaining large number of security logs which are generated by the application and can be easily monitored. It is very helpful in generating reports for the logs and security issues reported.which will be easy to extract and monitor offline for comfortable use Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

It has helped us to monitor the logs which are generated from our application and we could view them in an organized manner so that we are keeping track of all the logs and resolving one by one. This has helped us in maintaining large number of security logs. Review collected by and hosted on G2.com.

Verified User in Oil & Energy

Mid-Market (51-1000 emp.)

5/6/2021

Business partner of the seller or seller's competitor, not included in G2 scores.

"Best SIEM tool in the world"

5/5

What do you like best about Splunk Enterprise Security?

The analysis and indexing of any data format. Integration support for almost all of the security devices available in the market. SOAR feature addition makes it one of a kind in the industry. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Best product comes with a heavy price tag on it. Many SMB companies could not afford the price of the products and the add-ons. Review collected by and hosted on G2.com.

Scott R.

VP of Technology and Infrastructure

Enterprise (> 1000 emp.)

7/30/2020

Business partner of the seller or seller's competitor, not included in G2 scores.

"Industry leading log aggregation and management tool"

4.5/5

What do you like best about Splunk Enterprise Security?

An enterprise level tool for log aggregation and management that enables an all inclusive approach to data mining for service management and compliance. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Expensive licensing model compared to some other tools available. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

Do not underestimate how much capacity you will need. As once people start using it they integrate it into their daily workloads. If possible get the business to buy into it as a BI tool this enabling the cost to be spread outside of IT. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Enabled us to meet PCI compliance responsibilities and to create dashboards enabling not only IT problem solving but also to provide real value to business processes. Review collected by and hosted on G2.com.