Anomali Threat Platform vs Splunk Light

• Fantastic UI
• STAXXX for sharing intelligence
• Threat Intelligence feeds
• Automation and collaboration cuts work down for the analysts

Read full review

• Real-time + Scheduled alerts - i-e you can set up alerts which are actively monitoring your logs
• Pretty good response time for search results. With our key/value logging, Splunk makes it blazing fast to query the data.
• Dashboards provide insights into historical data
• Love how Splunk indexes all of the data and provides keys to search on

Read full review

• Splunk light limits number of users to 5. Wish there was a flexible license, where one could add more users.
• Splunk light does not let you add > few realtime alerts. Wish there was a flexible license, where one could add as many realtime alerts as wanted.
• Better insight into daily ingestion values

Read full review

• After the Initial startup cost, it has overall had a positive impact by increasing efficiency of the team and freeing up analysts to do manual threat hunting

Read full review

• Splunk Light has had a positive impact on our overall business objective of having a central log repository.
• Splunk Light is able to help us hunt down the reasons for account lock outs and has thus had a positive impact on time to resolution of helpdesk issues.
• Splunk Light had a positive impact on reporting and showing our auditor specific events he was looking for.

Read full review