ExtraHop in Seattle, Washington offers an IT operations analytics platform via the ExtraHop Performance Platform, providing a dynamic, real-time view of all transactions in the IT environment, every team from NetOps to SecOps can spot and solve problems fast.
$5.04
Per Hour
Splunk IT Service Intelligence (ITSI)
Score 10.0 out of 10
N/A
Splunk supports IT operations analytics with the Splunk IT Service Intelligence premium offering, a software application available to subscribers to Splunk Cloud or Splunk Enterprise log analytics and SIEM platforms.
One very big use is the ability to resolve performance issues. One example used was with the performance of sql issues. ExtraHop [Performance Platform] gave us the packet tracing ability to see the database was being queried incorrectly. A programmer has written a query that would bring the database information local and one the queries instead of allowing the sql server itself to do the work and push out the information.
Splunk ITSI is a great tool (and toolbox) for combining together numerous and varied monitoring regimes to bring more holistic analysis and reduce alert fatigue. By leveraging the Splunk ITSI service and KPI modeling regime, ecosystem telemetry can be turned into a more reliable, clearer, high-level perspective on the current state of your components and services.
Some person like me who want to see Extrahop can integrate better with other network analysis tools like Wireshark or TCPdump. The desired functionality I've been looking for is to program a kind of specific criteria to trigger the probe starts to run Wireshark or TCPdump to save the trace of a specific problematic session. Sometimes I want to see the evidence in a packet trace layer rather than just have the warning or error only presented in the dashboard.
We have replaced our monitoring platform with Splunk & ITSI, and with the success, it's seen at our organization thus far we would be hard-pressed to pivot to another tool. Frankly, our business partners and application teams love Splunk & ITSI.
Splunk IT Service Intelligence (ITSI) is a platform with extended functionality and provides various functionalities which can be utilized to improve the efficiency and accuracy in analyzing the data and detecting the attacks.
During POC, pre-planning, and implementation, we have had interactions with numerous folks at Splunk. Everyone from sales & engineering to markets analysts to specific IT component SMEs, and a small professional services engagement to get started. They have all been exceptionally helpful and go above and beyond the call of duty. They actively reach out to ensure success is being realized and find ways to help proactively, instead of having to simply open support cases with the vendor.
We use ExtraHop specifically to monitor network traffic. It does many other things very well also, but it is the best network traffic analysis tool that we currently have in house. The fact that it is agentless also makes it more reliable and not dependent on agents running on devices throughout our enterprise.
Splunk has raised itself as a platform not just as a tool unlike other products in the market. If I talk about Moogsoft it also has similar capabilities but Splunk ITSI has more visibility and its GUI is making a different impact on the users. ServiceNow and Splunk are equally capable products however Splunk seems to have more tech-savvy people tools than ServiceNow.
Splunk ITSI has reduced the number of alerts exposed to our Network Operations Center by 100x while increasing the context around outages.
Splunk ITSI has increased the accuracy of our incident detection by leveraging the Event Analytics system to weigh the behavior of the many characteristics of each component together instead of independently.
Splunk ITSI has reduced our incident MTTR (mean time to restore) by detecting issues faster, presenting them more clearly, and surfacing the salient details about the underlying issue.
