Auvik vs. Splunk Cloud Platform vs. Splunk Enterprise

Auvik is well suited for managed service customers and small-scale SMB customers who do not have enough technical resource to manage and monitor their network. Also for customer who has distributed networks spreaded across worldwide or nation wide, Auvik is well suited since it does not need any on-premise setup at each site except for a collector. For customer who has already adopted and used cloud network and hosting services, Auvik is better as Auvik is also fully cloud based offering

Incentivized

Splunk is excellent when all your data is in one location. Its ability to correlate all that data is intuitive (once the hurdle of learning the query language is overcome). It is also easy to standardize the presentation of information to the company. When data is siloed/standalone, other systems can be cheaper and faster to implement.

Incentivized

It's well suited for what I do, which is network security operations. And that's for anything from troubleshooting incidents, troubleshooting performance, troubleshooting for the purpose of a compliance and auditing. It's not best suited for users who are new in terms of they're new to the product and they have expectations that probably Splunk cannot meet.

Incentivized

• Auvik is the big pic tool of choice for network diagramming, helps layout of our network infrastructure, and we'll know immediately the status of the devices that are successfully communicating, and those that may have, for example, credentials issues.
• Auvik's "Traffic Insights" are key accelerators for intuitively isolating and resolving traffic-related issues quickly and easily, and the historical information makes it simpler to deduce what aspects may need replacement, capacity improvement, or possibly even re-architecture.
• Auvik integration tools are excellent solution enhancers - that are of particular interest to our company, as we make use of MS Teams and Connectwise products; we would like to see some features to integrate to ServiceNow as well.

Incentivized

• This SIEM consolidates multiple data points and offers several features and benefits, creating custom dashboards and managing alert workflows.
• Splunk Cloud provides a simple way to have a central monitoring and security solution. Though it does not have a huge learning curve, you should spend some time learning the basics.
• Splunk Cloud enables me to create and schedule statistical reports on network use for Management.

Incentivized

• It is very useful in creating custom rules for analyzing system logs and display relevant information. The query language is very easy to learn.
• We can create custom UI to visualize the output of our data. The interface is very flexible. It also allows the sharing of rules among users.
• There is an open online community to help others. Stackoverflow also has a splunk community. These resources make it more convenient to learn.

Incentivized

• The map is not easy to quickly zoom in and out of or pan around. Usually requires a lot of filter toggling. Keyboard shortcuts for this would be nice.
• Better global settings that can be pushed to multiple client organizations
• Security groups/RBAC for user permissions across multiple clients
• Ability to change the URL

Incentivized

• The SPL programming language that the queries are built in is not very intuitive.
• There should be a better repository of pre-built queries for what I would think of as common Active Directory usage monitoring.
• I would like to see more free training/familiarization information made available.

Incentivized

• Splunk light limits number of users to 5. Wish there was a flexible license, where one could add more users.
• Splunk light does not let you add > few realtime alerts. Wish there was a flexible license, where one could add as many realtime alerts as wanted.
• Better insight into daily ingestion values

Incentivized

Because it's an amazing product.

Incentivized

Ease of use and have all the features we need

Incentivized

We are using Splunk extensively in our projects and we have recently upgraded to Splunk version 6.0 which is quite efficient and giving expected results. We keep track of updates and new features Splunk introduces periodically and try to introduce those features in our day to day activities for improvement in our reporting system and other tasks.

The program can be a bit unwieldy at times, however the majority of information is displayed in a readable and friendly way. The maps and popup information box from the bottom can be harder to use on a smaller screen but on a 1080p+ display tends to work fine.

Incentivized

What it does well:

- Powerful SPL query language for advanced users

- Excellent visualization dashboards

- Comprehensive documentation and community support

Where it needs work:

- Steep learning curve for SPL syntax

- Non-Intuitive UI for beginners

- Complex administration and data model configuration

- Search performance degrades with poor query optimization

Bottom line: Enterprise-grade tool requiring dedicated training investment. Best for teams with experienced analysts.

Incentivized

You can literally throw in a single word into Splunk and it will pull back all instances of that word across all of your logs for the time span you select (provided you have permission to see that data). We have several users who have taken a few of the free courses from Splunk that are able to pull data out of it everyday with little help at all.

Incentivized

We have never had a major outage or impact that was noticeable.

Incentivized

When properly setup and configured, Splunk is extremely reliable.

Incentivized

Pages can be slow to load on larger sites but tends to be fine for most clients.

Incentivized

Fast response and knowledgeable. If the technician does not know, they will look for the information and get back to you.

Incentivized

Splunk Cloud support is sorely lacking unfortunately. The portal where you submit tickets is not very good and is lacking polish. Tickets are left for days without any updates and when chased it is only sometimes you get a reply back. I get the feeling the support team are very understaffed and have far too much going on. From what I know, Splunk is aware of this and seem to be trying to remedy it.

Incentivized

Splunk maintains a well resourced support system that has been consistent since we purchased the product. They help out in a timely manner and provide expert level information as needed. We typically open cases online and communicate when possible via e-mail and are able to resolve most issues with that method.

Incentivized

The online course was simple clear and described the main capabilities of the solution. There is also an initial module that can be done for free so anyone can familiarize themselves with the functionality of this solution. On the other hand, however, there could be more free online courses. Maybe even with a certificate, this would broaden the group of people who are familiar with the platform while increasing familiarity with the solution itself.

Smooth without too many major issues.

Incentivized

Auvik can stand up against any of the big network management and monitoring solutions on the market. I've implemented and used SolarWinds at many organizations for over 15 years. The paradigm that SolarWinds, PRTG, Prime, etc., work under is completely different than Auvik. It's apparent that Auvik was aiming to solve a different problem and built that solution from the ground up. For any organization responsible for multiple other organizations' infrastructure, Auvik is invaluable in comparison to the other products listed.

Search Processing Language really is a game changer for writing easy-to-understand and maintainable queries on your data base logs. Once understood, setting up and validating a query can be done in no time- which leaves us the option to focus on more monitoring and improved services. We have no other tools that utilizes data this efficiently

Incentivized

I didn't get to fully evaluate Logstash as our corporation was already using Logstash, but both seemed like viable solutions to the problem that we were having. I wanted to evaluate Logstash some more, both did seem like they would work for the business needs that we had, we went with splunk as many teams were already using it.

Incentivized

Auvik has worked on sites with 15+ offices connected with VPN's and we have not encountered any issues with the monitoring. On larger sites the map can be a bit cumbersome to read however it can be cleaned up easily with device filters.

Incentivized

Splunk can scale in to the petabyte per day range which of course is awesome

• the ROI for Auvik comes from the time it saves in updating documentation and onboarding, new clients. We no longer have to spend a day investigating a network and documenting it, this is life and up to date so you always have true information for reporting and troubleshooting.

Incentivized

• End-end visibility across your departmental silos
• Strengthen the overall global monitoring posture
• Move from Reactive to Proactive Monitoring
• Highly secure environment at your finger-tips
• Takes you away from managing infrastructure/administration, allows saving time & money. Reduce the overall TCO (Total Cost of Ownership)

Incentivized

• I don't have any numbers to share but Splunk has positively served as a 24/7 monitoring tool that has saved hours of work by self-detecting, saving statistics and alerting problems in the system or from external interfaces as soon as they happen.
• Splunk dashboards does a solid job in collecting, analyzing data and creating reports that contain an entire day's activity and then automatically sent out to the business.
• Splunk is very easy to learn and very useful to any program or business application.

Incentivized