Splunk Enterprise Security Pros and Cons: Top 5 Advantages and Disadvantages

Quick AI Summary Based on G2 Reviews

Generated from real user reviews

Users value the ease of use of Splunk Enterprise Security, enhancing their monitoring and log management experience. (15 mentions)

Users appreciate the easy integrations of Splunk Enterprise Security, enabling seamless connection with various platforms and systems. (13 mentions)

Users highlight the impressive threat detection capabilities of Splunk Enterprise Security, enhancing security focus and reducing false alarms. (13 mentions)

Users value the effective features of Splunk Enterprise Security, enhancing security analysis with comprehensive logs and insights. (12 mentions)

Users appreciate the user-friendly interface of Splunk Enterprise Security, enabling efficient monitoring and attractive dashboards. (11 mentions)

Users note that the high cost of Splunk Enterprise Security is a major drawback for smaller organizations. (17 mentions)

Users find the initial implementation complex, needing expert resources and time to onboard Splunk Enterprise Security effectively. (8 mentions)

Users find the complex implementation of Splunk Enterprise Security challenging, requiring extensive expertise and resources. (6 mentions)

Users find the complexity and extensive setup of Splunk Enterprise Security to be time-consuming and challenging. (6 mentions)

Users find the difficult learning curve of Splunk Enterprise Security a challenge for beginners and costly to set up. (6 mentions)

5 Pros or Advantages of Splunk Enterprise Security

1. Ease of Use

Users value the ease of use of Splunk Enterprise Security, enhancing their monitoring and log management experience.

See 15 mentions

See Related User Reviews

Jordan M.

Enterprise (> 1000 emp.)

4.0/5

"Splunk in a security environment"

What do you like about Splunk Enterprise Security?

Splunk is easy to use/configure and to find what i need. plus, the splunk employees with whom we work are very talented and skilled

Ernesto M.

Mid-Market (51-1000 emp.)

5.0/5

"Easy to integrate, understand the workflows and to manage."

What do you like about Splunk Enterprise Security?

Splunk ES is easy to manage and understard even if you are new with SIEMs. The workflows are easy to follow and the language the splunk uses is easy t

2. Easy Integrations

Users appreciate the easy integrations of Splunk Enterprise Security, enabling seamless connection with various platforms and systems.

See 13 mentions

See Related User Reviews

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Robust SIEM Solution with Strong Ecosystem Support"

What do you like about Splunk Enterprise Security?

✅ Powerful Search and Correlation Capabilities Splunk Enterprise Security excels at log aggregation, correlation, and threat detection. The Search Pr

Ernesto M.

Mid-Market (51-1000 emp.)

5.0/5

"Easy to integrate, understand the workflows and to manage."

What do you like about Splunk Enterprise Security?

Splunk ES is easy to manage and understard even if you are new with SIEMs. The workflows are easy to follow and the language the splunk uses is easy t

3. Threat Detection

Users highlight the impressive threat detection capabilities of Splunk Enterprise Security, enhancing security focus and reducing false alarms.

See 13 mentions

See Related User Reviews

Naushad T.

Enterprise (> 1000 emp.)

4.5/5

"Splunk ES- Scalable SIEM for Large Enterprise"

What do you like about Splunk Enterprise Security?

The best thing about Splunk is the deep visibility it provides across the environment, along with its strong ability to correlate large volumes of sec

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Splunk user behavior"

What do you like about Splunk Enterprise Security?

It's great because it uses smart technology to spot unusual behavior from users that might signal security issues. It helps find potential threats ea

4. Features

Users value the effective features of Splunk Enterprise Security, enhancing security analysis with comprehensive logs and insights.

See 12 mentions

See Related User Reviews

Muhammad R.

Enterprise (> 1000 emp.)

5.0/5

"Unmatched Visibility and Customization for Security Operations"

What do you like about Splunk Enterprise Security?

What I like most about Splunk Enterprise Security is its ability to give clear and comprehensive visibility across the entire environment. The correla

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Robust SIEM Solution with Strong Ecosystem Support"

What do you like about Splunk Enterprise Security?

✅ Powerful Search and Correlation Capabilities Splunk Enterprise Security excels at log aggregation, correlation, and threat detection. The Search Pr

5. User Interface

Users appreciate the user-friendly interface of Splunk Enterprise Security, enabling efficient monitoring and attractive dashboards.

See 11 mentions

See Related User Reviews

Muhammad R.

Enterprise (> 1000 emp.)

5.0/5

"Unmatched Visibility and Customization for Security Operations"

What do you like about Splunk Enterprise Security?

What I like most about Splunk Enterprise Security is its ability to give clear and comprehensive visibility across the entire environment. The correla

RUDRA P.

Enterprise (> 1000 emp.)

5.0/5

"Splunk User Behavior Analytics Review"

What do you like about Splunk Enterprise Security?

Splunk User Behavior Analytics establishes baseline behaviors for users, devices, and applications using unsupervised machine learning algorithms. It

5 Cons or Disadvantages of Splunk Enterprise Security

1. Expensive

Users note that the high cost of Splunk Enterprise Security is a major drawback for smaller organizations.

See 17 mentions

See Related User Reviews

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Robust SIEM Solution with Strong Ecosystem Support"

What do you dislike about Splunk Enterprise Security?

❌ Learning Curve The flexibility of SPL is a double-edged sword. New analysts often struggle with query writing and alert customization unless they h

Ernesto M.

Mid-Market (51-1000 emp.)

5.0/5

"Easy to integrate, understand the workflows and to manage."

What do you dislike about Splunk Enterprise Security?

Might be very expensinve depend of how much data you are ingesting.

2. Complex Setup

Users find the initial implementation complex, needing expert resources and time to onboard Splunk Enterprise Security effectively.

See 8 mentions

See Related User Reviews

Naushad T.

Enterprise (> 1000 emp.)

4.5/5

"Splunk ES- Scalable SIEM for Large Enterprise"

What do you dislike about Splunk Enterprise Security?

The initial implementation is complicated and requires significant expertise, time, and resources. In our case, we had to extend the contract to a thi

Muhammad R.

Enterprise (> 1000 emp.)

5.0/5

"Unmatched Visibility and Customization for Security Operations"

What do you dislike about Splunk Enterprise Security?

What I dislike about Splunk Enterprise Security is that some of its features can be quite resource intensive. The platform is powerful, but it sometim

3. Complex Implementation

Users find the complex implementation of Splunk Enterprise Security challenging, requiring extensive expertise and resources.

See 6 mentions

See Related User Reviews

Naushad T.

Enterprise (> 1000 emp.)

4.5/5

"Splunk ES- Scalable SIEM for Large Enterprise"

What do you dislike about Splunk Enterprise Security?

The initial implementation is complicated and requires significant expertise, time, and resources. In our case, we had to extend the contract to a thi

Sanket S.

Mid-Market (51-1000 emp.)

5.0/5

"Navigating insider threats using Splunk"

What do you dislike about Splunk Enterprise Security?

Setting up and configuring this solution can be complex and time consuming. It may generates false positives, especially in the early stages of deplo

4. Complexity

Users find the complexity and extensive setup of Splunk Enterprise Security to be time-consuming and challenging.

See 6 mentions

See Related User Reviews

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Splunk user behavior"

What do you dislike about Splunk Enterprise Security?

it can be complex and require a lot of setup.

Sanket S.

Mid-Market (51-1000 emp.)

5.0/5

"Navigating insider threats using Splunk"

What do you dislike about Splunk Enterprise Security?

Setting up and configuring this solution can be complex and time consuming. It may generates false positives, especially in the early stages of deplo

5. Difficult Learning

Users find the difficult learning curve of Splunk Enterprise Security a challenge for beginners and costly to set up.

See 6 mentions

See Related User Reviews

Alexandra V.

Mid-Market (51-1000 emp.)

4.5/5

"Splunk Enterprise Security is the master log data collection and threat detection"

What do you dislike about Splunk Enterprise Security?

Advanced security settings not easy especially when new with the system. The support team deseves merit for being helpful and always available when in

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Neutral Experience"

What do you dislike about Splunk Enterprise Security?

Learning Curve is a steep. Take a bit of time to undersant everything

Top-Rated Alternatives

View All Alternatives

G2 reviews are authentic and verified.

Here's how.

Verified User in Computer & Network Security

Small-Business (50 or fewer emp.)

1/4/2021

Business partner of the seller or seller's competitor, not included in G2 scores.

"It was an awesome expirience"

5/5

What do you like best about Splunk Enterprise Security?

Easy to manage dashboards and get the data you need right there Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Navigation can be improved a bit to make it easier to use. Review collected by and hosted on G2.com.

Danny S.

Director of Planning, Engineering, and Innovation @ USSOCOM

Enterprise (> 1000 emp.)

8/31/2020

"Splunk - What is it good for?"

1.5/5

What do you like best about Splunk Enterprise Security?

Nothing to add here. I hate the name as much as I hate the product. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Everything but mostly the cost and licensing model for anything Splunk has to offer. Review collected by and hosted on G2.com.

Sunny K.

Senior Technology Consultant

Enterprise (> 1000 emp.)

7/25/2020

"Improve security with splunk"

5/5

What do you like best about Splunk Enterprise Security?

The user interface(GUI), which is self-explanatory on every page or view. Also its security related investigation capabilities. It is real time. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Splunk can be expensive for large data volumes Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

you can rely on its effectiveness. The product really solves the purpose it is built for. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Monitoring, Analyzing and visualizing machine generated data. The main benefit is that we are building real time data application with help of it. Review collected by and hosted on G2.com.

Verified User in Automotive

Enterprise (> 1000 emp.)

7/27/2020

"Splunk ES"

5/5

What do you like best about Splunk Enterprise Security?

I have been using splunk ES for about 1 year to support the SOC. I find the product produces a lot of information that increases the company's level of security Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

dont't find dislike for now. All is right Review collected by and hosted on G2.com.

Gopichand R.

Enterprise (> 1000 emp.)

1/28/2020

"It's good SIEM tools to reduce false positive alerts."

5/5

What do you like best about Splunk Enterprise Security?

It will providing all the future details in Splunk ES. Where we can get details summary reports in alerts. Depend on alerts. Like source, destination, users, workstations, Event code, login types etc.. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

There is nothing anything to dislike with this product. It's all in one. Review collected by and hosted on G2.com.

Verified User in Computer Networking

Enterprise (> 1000 emp.)

8/31/2020

"Splunk the Swiss Army knife do all in security"

4.5/5

What do you like best about Splunk Enterprise Security?

Flexibility the splunk SIEM is very versatile Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Dashboards can be tricky to set up.

However, once set up a great security tool. Review collected by and hosted on G2.com.

Pathman P.

Snr. Systems Engineer / Security Consultant

Mid-Market (51-1000 emp.)

10/25/2019

Business partner of the seller or seller's competitor, not included in G2 scores.

"The watchman never sleep : Splunk Enterprise Security"

4/5

What do you like best about Splunk Enterprise Security?

Splunk ES product that monitors real-time data generated from network endpoints, access, malware and vulnerabilities and generate alerts by analyzing and correlating them with defined and built-in rules. Administration is so easy and reduces security personnel risk of tacking security incidents. This is very useful and well recognized product every organization should setup. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Have not found any dislikes so far. great product. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

before splunk we collected lots log but we never had time to analyze them and later we found that we have missed important security alerts. Now with splunk , we never miss any security alerts and we can stop before any damage happens. So we recommend all enterprises to setup Splunk and know your network activities and control before they make you devastated. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Having lots of devices and servers introduced to the network, generate lots of logs and not enough man power and time anlyze them. This became unmanageable and security events went unnoticed. Then we learned about Splunk SIEM and tested before buying. This can collects all events logs into one engine and analyze and alert us. Review collected by and hosted on G2.com.

Mohammed Aquib A.

SIEM Specialist

Enterprise (> 1000 emp.)

6/22/2019

"Best in SIEM Solution"

4.5/5

What do you like best about Splunk Enterprise Security?

Splunk is the best SIEM solution that a company can have for security of an enterprise. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

There is nothing I feel personally any disadvantage in Splunk SIEM solution. Review collected by and hosted on G2.com.

Verified User in Health, Wellness and Fitness

Enterprise (> 1000 emp.)

10/24/2019

"Amazing Software for Security and Dashboards"

5/5

What do you like best about Splunk Enterprise Security?

I love how diverse this software is. It's easy to create simple dashboards and searches or you can create very complicated searches and filter through specific data. Dashboards can be created so that other members of the team that aren't so technical can easily look at the visuals and see what is going on. We use it in security for a bunch of different areas of the company. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Somewhat of a learning curve to get set up and going. Review collected by and hosted on G2.com.