Splunk Enterprise Security Reviews & Product Details

Splunk Enterprise Security (ES) is a data-centric, modern security information and event management (SIEM) solution that delivers data-driven insights for full breadth visibility into your security posture so you can protect your business and mitigate risk at scale. With unparalleled search and reporting, advanced analytics, integrated intelligence, and prepackaged security content, Splunk ES accelerates threat detection and investigation, letting you determine the scope of high-priority threats to your environment so you can quickly take action. Built on an open and scalable data platform, you can stay agile in the face of evolving threats and business needs. Our extensive ecosystem of Splunk, partner, and community-built integrations as well as flexible deployment options ensure your technology investments are working in tandem with Splunk ES whilst meeting you wherever you are on your cloud, multi-cloud, or hybrid journey.

Seller

Cisco

Discussions

Splunk Enterprise Security Community

Languages Supported

German, English, French, Italian, Japanese, Korean, Chinese (Simplified), Chinese (Traditional)

Solution Type

All-in-One

Overview by

Mike Tomita

Value at a Glance

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

View More Pricing Information

Top-Rated Alternatives

View All Alternatives

User Insights

Average based on 250 real user reviews.

Implementation Time

3 months

Perceived Cost

$$$$$

Typical contract price

$0k - $0k

Per Year

Splunk Enterprise Security Integrations

(19)

Integration information sourced from real user reviews.

AWS CloudTrail

AWS Transfer Family

Azure Active Directory...

Azure Firewall

Cisco Duo

Cortex XDR

CrowdStrike Falcon Endpoint...

FortiGate SD-WAN

FortiGate-VM NGFW

Show More Integrations

Splunk Enterprise Security Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is Splunk Enterprise Security, and what problem is it built to solve?

Splunk Enterprise Security is used as a SIEM to bring security logs and events together so teams can monitor activity, correlate signals, and investigate potential threats from a centralized view.

What languages does Splunk Enterprise Security support?

Splunk Enterprise Security supports 8 languages: Chinese (Simplified), Chinese (Traditional), English, French, German, Italian, Japanese, and Korean.

What company sizes and industries is Splunk Enterprise Security the best fit for?

Splunk Enterprise Security has a strong fit among positive reviewers from large organizations, with mid-market teams also represented. The industries with the clearest presence include:

Enterprise organizations: Companies with more than 1,000 employees are the most represented size segment.
Mid-market organizations: Companies with 51–1,000 employees are also well represented.
Information technology and computer/network security: These are prominent areas of use.
Financial services and banking: These sectors also feature among the represented industries.
Telecommunications: This industry appears regularly among positive reviewers.

How long does it take to implement Splunk Enterprise Security across a team?

Implementation timelines vary with the amount of data normalization and configuration required, but 1–3 months is the most commonly reported range. Teams also report shorter and longer rollouts.

What customer support options does Splunk Enterprise Security provide, and how do users find the overall support experience?

Splunk Enterprise Security offers support through email/help desk, phone, and chat, with 24/7 live-rep support. The support experience is mixed: users describe helpful, knowledgeable assistance, while others report slow or inconsistent responses and room to improve support resources.

What features or capabilities could make Splunk Enterprise Security even more useful?

A smoother setup and tuning experience would help teams get value sooner, especially where data normalization and detection configuration take significant effort. Recurring improvement areas include:

Simpler onboarding and data normalization: Make it easier to configure data sources and maintain Common Information Model mappings.
More approachable search authoring: Improve query guidance, syntax help, and error messages for users learning SPL.
More flexible dashboards and incident views: Expand options for tailoring dashboards, alert presentation, and analyst workflows.
Faster searches and interface response: Improve performance when working with large volumes of data.

Is Splunk Enterprise Security considered safe and secure for handling data?

Splunk Enterprise Security is used to centralize security data and help teams monitor activity, correlate events, and investigate potential threats, which can give them a clearer view of their environment. That confidence depends on sound configuration and data handling; users also raise concerns about maintaining visibility when managing ingestion costs and about potential conflicts with other add-ons.

G2 reviews are authentic and verified.

Here's how.

Scott R.

VP of Technology and Infrastructure

Enterprise (> 1000 emp.)

Originally submitted 7/30/2020

Business partner of the seller or seller's competitor, not included in G2 scores.

"Industry leading log aggregation and management tool"

4.5/5

What do you like best about Splunk Enterprise Security?

An enterprise level tool for log aggregation and management that enables an all inclusive approach to data mining for service management and compliance. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Expensive licensing model compared to some other tools available. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

Do not underestimate how much capacity you will need. As once people start using it they integrate it into their daily workloads. If possible get the business to buy into it as a BI tool this enabling the cost to be spread outside of IT. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Enabled us to meet PCI compliance responsibilities and to create dashboards enabling not only IT problem solving but also to provide real value to business processes. Review collected by and hosted on G2.com.

Verified User in Program Development

Mid-Market (51-1000 emp.)

9/18/2020

Business partner of the seller or seller's competitor, not included in G2 scores.

"Easy and efficient to use"

4/5

What do you like best about Splunk Enterprise Security?

Enables users to access all log sources from a single box Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Too many features, took me some time to understand the functionality Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

Efficient, easy to deploy and easy to learn to use Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

I'm able to easily write custom SPLs and Dashboards in minimum time. And data populates more accurately and is easy to understand, with enhanced widgets etc. Review collected by and hosted on G2.com.

Verified User in Computer & Network Security

Small-Business (50 or fewer emp.)

1/4/2021

Business partner of the seller or seller's competitor, not included in G2 scores.

"It was an awesome expirience"

5/5

What do you like best about Splunk Enterprise Security?

Easy to manage dashboards and get the data you need right there Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Navigation can be improved a bit to make it easier to use. Review collected by and hosted on G2.com.

Danny S.

Director of Planning, Engineering, and Innovation @ USSOCOM

Enterprise (> 1000 emp.)

8/31/2020

"Splunk - What is it good for?"

1.5/5

What do you like best about Splunk Enterprise Security?

Nothing to add here. I hate the name as much as I hate the product. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Everything but mostly the cost and licensing model for anything Splunk has to offer. Review collected by and hosted on G2.com.

Sunny K.

Senior Technology Consultant

Enterprise (> 1000 emp.)

7/25/2020

"Improve security with Splunk"

5/5

What do you like best about Splunk Enterprise Security?

The user interface (GUI), which is self-explanatory on every page or view. Also its security-related investigation capabilities. It is real-time. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Splunk can be expensive for large data volumes Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

You can rely on its effectiveness. The product really solves the purpose it is built for. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Monitoring, analyzing, and visualizing machine-generated data. The main benefit is that we are building real-time data applications with the help of it. Review collected by and hosted on G2.com.

Verified User in Automotive

Enterprise (> 1000 emp.)

7/27/2020

"Splunk ES"

5/5

What do you like best about Splunk Enterprise Security?

I have been using Splunk ES for about 1 year to support the SOC. I find the product produces a lot of information that increases the company's level of security. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

don't find dislike for now. All is right Review collected by and hosted on G2.com.

Gopichand R.

Enterprise (> 1000 emp.)

1/28/2020

"It's good SIEM tools to reduce false positive alerts."

5/5

What do you like best about Splunk Enterprise Security?

It will providing all the future details in Splunk ES. Where we can get details summary reports in alerts. Depend on alerts. Like source, destination, users, workstations, Event code, login types etc.. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

There is nothing anything to dislike with this product. It's all in one. Review collected by and hosted on G2.com.

Verified User in Computer Networking

Enterprise (> 1000 emp.)

8/31/2020

"Splunk the Swiss Army knife do all in security"

4.5/5

What do you like best about Splunk Enterprise Security?

Flexibility the splunk SIEM is very versatile Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Dashboards can be tricky to set up. However, once set up a great security tool. Review collected by and hosted on G2.com.

Pathman P.

Snr. Systems Engineer / Security Consultant

Mid-Market (51-1000 emp.)

10/25/2019

Business partner of the seller or seller's competitor, not included in G2 scores.

"The watchman never sleep : Splunk Enterprise Security"

4/5

What do you like best about Splunk Enterprise Security?

Splunk ES product that monitors real-time data generated from network endpoints, access, malware and vulnerabilities and generate alerts by analyzing and correlating them with defined and built-in rules. Administration is so easy and reduces security personnel risk of tacking security incidents. This is very useful and well recognized product every organization should setup. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Have not found any dislikes so far. great product. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

Before Splunk, we collected lots of logs but we never had time to analyze them and later we found that we had missed important security alerts. Now with Splunk, we never miss any security alerts and we can stop before any damage happens. So we recommend all enterprises to set up Splunk and know your network activities and control before they make you devastated. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Having lots of devices and servers introduced to the network, generate lots of logs and not enough manpower and time to analyze them. This became unmanageable and security events went unnoticed. Then we learned about Splunk SIEM and tested before buying. This can collect all event logs into one engine and analyze and alert us. Review collected by and hosted on G2.com.

Mohammed Aquib A.

SIEM Specialist

Enterprise (> 1000 emp.)

Originally submitted 6/22/2019

"Best in SIEM Solution"

4.5/5

What do you like best about Splunk Enterprise Security?

Splunk is the best SIEM solution that a company can have for security of an enterprise. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

There is nothing I feel personally any disadvantage in Splunk SIEM solution. Review collected by and hosted on G2.com.

Questions about Splunk Enterprise Security? Ask real users or explore answers from the community

Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights.

Guest User

•

Last activity about 4 years ago

What is the difference between Splunk Enterprise and Splunk Enterprise Security?

0 Upvotes

Join the conversation

Guest User

What is Splunk User Behavior Analytics used for?

0 Upvotes

Join the conversation

View all Discussions

Pricing Insights

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

Average Discount

22%

Perceived Cost

$$$$$

View More Pricing Information

Splunk Enterprise Security Comparisons

Microsoft Sentinel

4.4/5(299)

Compare Now

IBM QRadar SIEM

4.4/5(341)

Compare Now

LogRhythm SIEM

4.2/5(152)

Compare Now

Splunk Enterprise Security Features

Network Management

Activity Monitoring

Asset Management

Log Management

Incident Management

Event Management

Automated Response

Incident Reporting

Security Intelligence

Threat Intelligence

Vulnerability Assessment

Behavioral Analytics

View More Features

Categories on G2

Security Information and Event Management (SIEM)Incident Response AI SOC Agents

Explore More

Which lead-to-account matching and routing platforms are most trusted by revenue operations managers based on user reviews?What's the best AI software for small and mid-sized teams running their first AI rollout?Which secure data room providers offer seamless integration with financial tools?

Which Meeting Management software is adopted by consultants and CEOs for streamlined board meeting organization and accountability?Otter PR vs WebiMax: which reputation management services platform delivers better measurable ROI for marketing managers?Pros and Cons Details

Show MoreShow Less

4.3 out of 5 stars

Splunk Enterprise Security Reviews & Product Details

Profile Status

Value at a Glance

Time to Implement

Return on Investment

Top-Rated Alternatives

User Insights

Splunk Enterprise Security Integrations

Splunk Enterprise Security Reviews FAQs

What is Splunk Enterprise Security, and what problem is it built to solve?

What languages does Splunk Enterprise Security support?

What company sizes and industries is Splunk Enterprise Security the best fit for?

How long does it take to implement Splunk Enterprise Security across a team?

What customer support options does Splunk Enterprise Security provide, and how do users find the overall support experience?

What features or capabilities could make Splunk Enterprise Security even more useful?

Is Splunk Enterprise Security considered safe and secure for handling data?

Splunk Enterprise Security Reviews (250)

Splunk Enterprise Security Reviews (250)

What do users say?

Pros & Cons

Filter Reviews

Questions about Splunk Enterprise Security? Ask real users or explore answers from the community

Pricing Insights

Time to Implement

Return on Investment

Average Discount

Perceived Cost

Splunk Enterprise Security Features

Categories on G2

Explore More