Datadog vs. Splunk User Behavior Analytics

DataDog Is well suited to all of the Infrastructure Monitoring Solutions, DB monitoring, and other Network monitoring also. It's not well suited because it cannot give perfect Infrastructure recommendations for our use case but also For example: If we are using AWS DB to monitor performance insights then Datadog is less effective there because AWS gives very niche recommendations.

Incentivized

Splunk User Behavior Analytics application is necessary when any company wants to capture the threat based on user behavior instead of just counting the number of occurrences of particular event. With Splunk UBA, we can analyse number of anomalies captured and which in turn creating threats which are nearly true positive.

Incentivized

• APIs, the ability to interact with the data we pull into data dog is key. We port the information over to Servicenow, so the ability to pull everything into DataDog, then Servicenow, is a key component of our success here at Wayfair.
• Simple Interface - clean, useful, effective. Allows users to use DataDog for one reason, get work done.
• Lightweight agent on hosts

Incentivized

• Monitor and troubleshoot for any system errors.
• Get the insights on application data sets and do some predictive analysis.

Incentivized

• We had a couple "integrations" that had some issues during setup, but Support addressed them very quickly
• Unnecessary alerts about DataDog components...by the time I see them, they're almost always also fixed
• I wish there was a DataDog mobile app that would have dedicated alerts (configurable per alert to override Do Not Disturb setting) instead of relying on emails notifications that could be overlooked in the midst of many incoming emails around the same time.

Incentivized

• Performance-wise, it can be improved. Queries take a long time.
• Dataset exploration - More data visualization charts can be added.

Incentivized

Datadog does very well with the amount of products and integrations it offers, but lacks in intuitiveness in certain places. One of these places is setting up monitors and alerts - there's almost too many options which results in confusion or some understanding gaps. However, this is balanced with the ability to see issues from the database all the way to the user.

Incentivized

The support team usually gets it right. We did have a rather complicate issue setting up monitoring on a domain controller. However, they are usually responsive and helpful over chat. The downside would be I don’t think they have any phone support. If that is important to you this might not be a good fit.

Incentivized

We are still trying other products, but people still like Datadog. After setting up a dashboard, it's great for monitoring instances on Datadog. Also, the DevOps team had a good time setting up Datadog. It means Datadog was way easier to set up compared to those others.

Incentivized

Easier we were using Splunk Enterprise on heavy forwarder on which all the add-on were installed and were using Splunk Cloud with respect to search head and indexers stack. And with Splunk Enterprise Security premium app, we were relying on correlation rules which were throwing more number of false positive but after implementing Splunk UBA, we are now getting real-time true positive threat or incidents.

Incentivized

• Visibility into website issues and performance problems has improved our company communication.
• Handling and detecting site issues faster has improved customer satisfaction and retention.
• Configuration of the Datadog site can take a bit of time and we lost a bit of developer time during that process.

Incentivized

• Fewer team members to work on real threats.
• Less time required to deal with real incidents.
• Easy to implement across the network.

Incentivized