Guru is a knowledge platform designed to serve as what the vendor describes as an AI source of truth for enterprises. It connects information from tools like Slack, Teams, Google Workspace, Salesforce, and other systems into one governed, permission-aware knowledge layer. Guru delivers cited AI answers, chat, and research directly within existing workflows, to enable employees and AI assistants to access verified knowledge securely and efficiently. The platform combines…
$25
per month per user
Splunk Enterprise Security
Score8.3 out of 10
N/A
Splunk Enterprise Security is an analytics-driven SIEM that helps to combat threats with actionable intelligence and advanced analytics at scale.
N/A
Pricing
Guru
Splunk Enterprise Security
Editions & Modules
Team
$25
per month per user
AI Source of Truth Platform
Custom
No answers on this topic
Offerings
Pricing Offerings
Guru
Splunk Enterprise Security
Free Trial
Yes
No
Free/Freemium Version
No
No
Premium Consulting/Integration Services
Yes
No
Entry-level Setup Fee
Optional
No setup fee
Additional Details
Guru provides a tailored platform and expertise package based on an organization’s scale, knowledge complexity, and AI maturity.
Each engagement includes the full AI Source of Truth platform along with implementation guidance, knowledge architecture design, and ongoing optimization. Pricing is customized to ensure the right fit for enterprise systems, governance requirements, and AI initiatives.
Best suited for mid-market and enterprise organizations.
I think Guru is well-suited to organizations with subject matter experts committed to maintaining documentation. Guru cannot be managed by a single admin. It's essential that the SMEs are on board and are expected to participate in Guru as part of their role responsibilities. I'm not sure how well Guru would work for larger organizations with more information to house. I've only ever used Guru in SMBs with about 250 employees. It works well for that size.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Based on my experience, Splunk is a strong git for some environments and a poor match for others. The distinction is primarily based on infrastructure complexity and budget. It's perfect for large enterprises with a mix of on-prem/cloud infrastructure. It's not a perfect match for small teams with restricted resources.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Easy to learn. Anyone can make cards and use the AI to make them professional.
Answer questions about my business, essentially a wiki for everything we do.
The research mode is amazing. Full reports on various types of information including some rather complex topics. Complete with citations of where the information came from.
Admins can manage a hierarchy to keep information secure and available to the correct people.
Writes Powerful Queries: The queries that can be written using the Splunk Query Language are very powerful and highly customizable to meet every need. Ex: Writing queries to search the intersection of two different sources like Network and Endpoint Logs.
Offers Dashboard Abilities: Helps build complex panels for Dashboards in addition to providing several out-of-the-box panels. Ex: creating panels to calculate the performance of analysts in a given timezone.
Helpful Search Aids: It helps to set up complex custom alerts very easily. The interesting fields section is very helpful while threat hunting. Ex: It shows all the users and the frequency of each in a failed login event. The user list on the interesting fields is useful to look for suspicious logins.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Improved User Interface Customization: While the interface is generally intuitive, providing more options for users to customize their dashboards and views would enhance the overall user experience. Tailoring the interface to specific roles or use cases could be a valuable addition.
Simplified Alert Management: Streamlining the process of managing alerts, such as grouping or categorizing them based on severity or type, would make it easier for security teams to prioritize and respond to incidents effectively.
Expanded Threat Intelligence Feeds: Increasing the variety and sources of threat intelligence feeds available within ES would provide a broader context for identifying and mitigating emerging threats, ensuring a more comprehensive defense against evolving attack vectors.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
I rated Guru a 9 out of 10 for renewal likelihood because it has significantly enhanced our processes and customer satisfaction in the automotive rental company. Guru’s user-friendly interface and organized knowledge base make it easy to access and update essential information, which is crucial for maintaining high operational standards. The tool’s integration with other platforms, like the Guru Chrome extension, streamlines our workflow, increasing efficiency and productivity. One of the standout features is the ability to favorite cards, allowing quick access to frequently used information, which saves time and ensures accuracy in customer interactions. Additionally, Guru’s analytics feature helps us identify which resources need updating, ensuring our knowledge base remains relevant and effective. The only reason it’s not a perfect 10 is occasional slow performance and occasional inaccuracies in search results. However, these minor issues do not overshadow the overall benefits Guru provides. Its consistent updates and reminders further enhance our ability to deliver excellent customer support, making it an indispensable tool for our team.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
While using the GURU card, the level of response I get is quality. The rate at which my responses and prompts through the search or chat is fast, responsive, and high-quality. I can easily see when the cards were modified, who modified them, and the new information available on the GURU.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Maintaining hundreds or even 1000+ SOC use cases is really difficult, considering that the Data sources may not always send the data. A module that detects data freshness issues and detect data format changes would be a great help. the main challenge today using Splunk Enterprise Security is making sure that the detection rules are still working properly given all the changes that occur in data source applications. Also, maintaining the data collects on tens of thousands of servers and more than 100k workstations is a real company IT challenge: the splunkbase forwarder may not support old OS anymore, while these are the most important to monitor. Moving to the Open Telemetry collector has become essential so that only 1 agent is required for both SIEM and application observability.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Highly reliable day‑to‑dayGuru is consistently available when I need it. The platform loads quickly, search works reliably, and I rarely experience downtime or slow performance. It’s dependable enough that teams can trust it as a daily source of truth. Minimal unplanned outages or errors. In my experience, unplanned outages or errors are extremely rare. Even during high‑usage periods or heavy workflows, Guru remains stable and responsive.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Pages load quickly and consistently. Guru’s interface is lightweight, so cards, boards, and search results load fast with very little lag. Even when navigating between collections or opening larger cards, performance stays smooth and reliable. Integrations perform well without slowing systems down. Using Guru through the browser extension or Slack integration doesn’t noticeably impact performance. Cards surface quickly, and interacting with the integrations feels just as smooth as using Guru directly.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
It takes a long time for items to load if you are just generally searching through logs. It is best to use the data models which load faster but can be strange in terms of what is coming from which logs where. Yes, you can look it up, but this also requires familiarity with where things are and how to look them up.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
The support has been wonderful - probably one of the best things about Guru. We have a Slack channel where we can reach out and interact with our Guru CSM, and she is extremely responsive. Even if the solution isn't always easy, she provides all the necessary steps and options clearly.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
It's good when it's responsive, but I've had times where I had to wait quite a while for a response. But these are typically the exceptions rather than the rule. When you do get a response it is always well-informed and appropriate. I would say they've been trending better over time with this.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
I would rate the in-person training for Guru a solid 9 out of 10. The session was incredibly valuable as it provided comprehensive insights into using Guru effectively. I learned a lot about the tool's functionalities, which significantly enhanced my proficiency and confidence in utilizing Guru for my daily tasks. The training was engaging, informative, and tailored well to ensure I could apply what I learned immediately. Overall, it was a highly productive and beneficial learning experience.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
I experienced only on-line training, but the trainers were very professional and competent. Maybe it could be more useful if they also have an experience in projects because sometimes they didn't have a real project experience to communicate to the students. Anyway, it was very interesting and I learned many thing that's very difficoult (or maybe impossible!) to have by myself, aven if I have more than 10 years of Splunk activity experience.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
The online, on-demand training available was very good. I do wish we had done live online training as an org so that everyone had the same opportunity to learn the value and best practices. I completed the online, on-demand trainings personally, then turned around and taught the org, but I wish I had let the Guru experts do the heavy lifting for me!
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
It was very interesting and I learned many thing that's very difficoult (or maybe impossible!) to have by myself. The only problem was that, when I worked with the Splunk Professional Services, I found some difference between the training contents and the information from PS. In addition is required a long experience on Splunk Enterprise for the data ingestion part, in other words I'm able to work with ES because I'm worling on Splunk since 11 years, otherwise I'd some problem.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
You will need a very strong team of guru champions in order to get EVERYONE and EVERYTHING on Guru, it takes some craziness and over talking about guru everywhere to get people to be exicted, contribute and use. If you are starting any kind of buisness and you need KB, just go for guru as fast as you can because when you will grow you will thank yourself.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Compared with the vendors that we initially evaluate the AI functionality of, Guru makes the difference and also the interface capabilities, making it user-friendly, being able to build it up in a professionally way. there are no limitations on the customization of the interface, which supports multiple use cases at once and can apply to different teams that have different needs
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Splunk enterprise is the only solution that we’ve been able to identify that provides risk based alerting, which allows our SOC to reduce analyst fatigue which would be a huge problem without it. Before RBA, there were thousands of alerts a day and it was impossible to review all of them
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Guru is somewhat expensive compared to what our org is typically willing to spend on software solutions. Additionally, there is a price difference per seat when paid monthly versus annually, which was a big downside for us as my company didn't want to commit to an annual cost.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
for my exterience, unit pricing and billing frequency are correct. As I already said, I hint to have more discount flexibility, expecially with new customers, because there are competitors less expensive and very aggressive that are dangerous. In addition the possibility to don't pay the license for the development period could be a very interesting feature for the final customers.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Easily deployable across multiple teams and departmentsGuru is designed to scale horizontally across an organization. As teams grow, it’s simple to create new Collections, Boards, and permission sets without disrupting existing structures. This allows each department to manage its own knowledge while still contributing to a unified source of truth
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
- 8 out of 10 and took 2 for the data pipeline and administration part. Even if you'd like to improve yourself or your team, you have to pay a lot of money and it could be more than GIAC education + cert. - Normalization for Data models and CPU-based searches can be a problem sometimes.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
I had a fantastic experience with Splunk Professional Services: they worked with us in our last SON project (a SOC migration for a very large customer) and helped to build a multi tenent environment even if ES isn't a multi tenant platform. Th Splunk PS was a very professional and competent people, he is italian and was able to speak with our italian customers.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Guru allows our team to quickly reference available learning/knowledge materials with our clients on a daily basis and provide better support at every outreach
With that said, spreading those same resources across two major global teams in the USA and Germany can lead to some inconsistencies. The i-frame process is not very intuitive for this scenario and our team treats policy/procedural differences as separate card or article entities.
Guru allowed our organization to pioneer and establish a dedicated knowledge team component, of subject matter experts who work in tangent with existing resources, create new ones, and vet collective knowledge.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
We have a 100% success rate on all our ES implementations due to the amazing documentation and Splunk enablement on the subject.
Our Splunk ES business has grown 100% YoY for the last 3 years.
In terms of long term management and maintenance, ES has been highly stable and predictable, reducing our overhead on costly services team for ad hoc maintenance work.
