Anomali Threat Platform vs Splunk Light

• Fantastic UI
• STAXXX for sharing intelligence
• Threat Intelligence feeds
• Automation and collaboration cuts work down for the analysts

Read full review

• Real-time + Scheduled alerts - i-e you can set up alerts which are actively monitoring your logs
• Pretty good response time for search results. With our key/value logging, Splunk makes it blazing fast to query the data.
• Dashboards provide insights into historical data
• Love how Splunk indexes all of the data and provides keys to search on

Read full review

• Splunk light limits number of users to 5. Wish there was a flexible license, where one could add more users.
• Splunk light does not let you add > few realtime alerts. Wish there was a flexible license, where one could add as many realtime alerts as wanted.
• Better insight into daily ingestion values

Read full review

• After the Initial startup cost, it has overall had a positive impact by increasing efficiency of the team and freeing up analysts to do manual threat hunting

Read full review

• Helped us be more proactive about issues
• Helped us understand our system usage
• Helped us invest in areas we previously did not think of

Read full review