TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    IBM Guardium

    Score9.1 out of 10
    N/AIBM Guardium is IBM's data security posture management solution, that aims to offer organizations comprehensive visibility, actionable insights and real-time controls to help users comply with regulations, preserve privacy and secure sensitive data no matter where it is stored.N/A

    Splunk Enterprise

    Score8.6 out of 10
    N/ASplunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.N/A
    Pricing
    IBM GuardiumSplunk Enterprise
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    IBM GuardiumSplunk Enterprise
    Free Trial
    YesYes
    Free/Freemium Version
    NoYes
    Premium Consulting/Integration Services
    YesNo
    Entry-level Setup FeeOptionalNo setup fee
    Additional DetailsPricing is dependent based on data source environment.—
    More Pricing Information
    Community Pulse
    IBM GuardiumSplunk Enterprise
    Considered Both Products
    IBM
    Chose IBM Guardium
    first of all, these products having all the capability but what is best suited for our environment we selected that as our primary goal to get monitor all the database activity then we should have its Realtime alerts and notification then again it should be in budget and …
    Incentivized
    Chose IBM Guardium
    It is possible to connect the product with SIEM and SOAR systems.
    Incentivized
    Chose IBM Guardium
    Guardium, I believe, does a lot more than other products I have used.
    Incentivized
    Cisco
    No answer on this topic
    Key User Insights
    Would buy again
    99%
    Would buy again
    77 Answers
    97%
    Would buy again
    59 Answers
    Delivers good value for the price
    97%
    Delivers good value for the price
    61 Answers
    94%
    Delivers good value for the price
    49 Answers
    Happy with the feature set
    94%
    Happy with the feature set
    73 Answers
    97%
    Happy with the feature set
    59 Answers
    Lived up to sales and marketing promises
    94%
    Lived up to sales and marketing promises
    50 Answers
    93%
    Lived up to sales and marketing promises
    43 Answers
    Implementation went as expected
    95%
    Implementation went as expected
    63 Answers
    96%
    Implementation went as expected
    50 Answers
    Features
    IBM GuardiumSplunk Enterprise
    Data Security Posture Management (DSPM)
    Comparison of Data Security Posture Management (DSPM) features of IBM Guardium and Splunk Enterprise
    Feature
    IBM Guardium
    8.1
    1 Ratings
    0% above category average
    Splunk Enterprise
    -
    Ratings
    Shadow & Dark Data Identification7.31 Ratings00 Ratings
    Data Access & Entitlement Mapping8.21 Ratings00 Ratings
    Security Posture Assessment & Risk Prioritization9.11 Ratings00 Ratings
    Non-Intrusive, Agentless Scanning8.21 Ratings00 Ratings
    Data Lineage and Flow Tracking8.21 Ratings00 Ratings
    Automated Remediation Workflows8.21 Ratings00 Ratings
    Real-Time Data Detection and Response (DDR)8.21 Ratings00 Ratings
    AI-Ready Security Guardrails7.31 Ratings00 Ratings
    Automated Compliance Mapping8.21 Ratings00 Ratings
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of IBM Guardium and Splunk Enterprise
    Feature
    IBM Guardium
    -
    Ratings
    Splunk Enterprise
    8.2
    91 Ratings
    3% above category average
    Centralized event and log data collection00 Ratings9.085 Ratings
    Correlation00 Ratings8.487 Ratings
    Event and log normalization/management00 Ratings8.488 Ratings
    Deployment flexibility00 Ratings8.081 Ratings
    Integration with Identity and Access Management Tools00 Ratings8.282 Ratings
    Custom dashboards and workspaces00 Ratings8.887 Ratings
    Host and network-based intrusion detection00 Ratings7.865 Ratings
    Data integration/API management00 Ratings8.334 Ratings
    Behavioral analytics and baselining00 Ratings7.732 Ratings
    Rules-based and algorithmic detection thresholds00 Ratings7.933 Ratings
    Response orchestration and automation00 Ratings7.529 Ratings
    Reporting and compliance management00 Ratings8.634 Ratings
    Incident indexing/searching00 Ratings8.737 Ratings
    Best Alternatives
    IBM GuardiumSplunk Enterprise
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    No answers on this topic
    IBM Security QRadar SIEM
    Score8.9 out of 10
    Enterprises
    No answers on this topic
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    IBM GuardiumSplunk Enterprise
    Likelihood to Recommend
    9.5
    (68 ratings)
    8.7
    (112 ratings)
    Likelihood to Renew
    7.4
    (5 ratings)
    8.5
    (25 ratings)
    Usability
    5.6
    (34 ratings)
    8.5
    (45 ratings)
    Availability
    -
    (0 ratings)
    10.0
    (1 ratings)
    Support Rating
    4.5
    (5 ratings)
    8.0
    (19 ratings)
    Online Training
    -
    (0 ratings)
    8.0
    (1 ratings)
    Implementation Rating
    -
    (0 ratings)
    7.0
    (3 ratings)
    Ease of integration
    4.5
    (1 ratings)
    -
    (0 ratings)
    Product Scalability
    6.4
    (1 ratings)
    9.1
    (1 ratings)
    User Testimonials
    IBM GuardiumSplunk Enterprise
    Likelihood to Recommend
    IBM
    IBM Guardium DP is suitable for monitoring, auditing, data discovery, vulnerability analysis, and risk detection and investigation in relational and non-relational databases, cloud database services, indexed databases, and non-relational databases as well. IBM Guardium DPR is appropriate for supporting the process of detecting anomalous behavior in accessing sensitive data, helping to optimize the work of cybersecurity analysts or data team analysts by providing the data officer within our organization with insight into compromised users, compromised databases, or file servers containing sensitive data.
    Read full review
    Cisco
    I'm liking the newer products, and I'm looking forward to how they integrate with the overall product when they come together. Just log in and be able to query a large number of systems for similar issues or a unique one. That is a great fit for Splunk Enterprise, looking for a simple case or a simple String or something of that nature across multiple machines. It's a great fit for that to identify issues or particular software, whatever your scenario is, String, to find it across any particular server or group of servers, so that you can update or do a deployment or whatever it is you're looking to do.
    Incentivized
    Read full review
    Pros
    IBM
    • Provides complete monitoring of data access and usage activities.
    • Provides customizable security controls and policies that help us meet compliance and regulatory requirements.
    • Uses advanced algorithms and machine learning to detect abnormal behavior patterns.
    • Helps us protect sensitive and confidential data by controlling access.
    • Integrates easily with other security systems and tools.
    Incentivized
    Read full review
    Cisco
    • It is very useful in creating custom rules for analyzing system logs and display relevant information. The query language is very easy to learn.
    • We can create custom UI to visualize the output of our data. The interface is very flexible. It also allows the sharing of rules among users.
    • There is an open online community to help others. Stackoverflow also has a splunk community. These resources make it more convenient to learn.
    Incentivized
    Read full review
    Cons
    IBM
    • Cleanup the menu bar- way too many items.
    • Ktap support for newer O/S. Recently, I have had to open support tickets to get the most recent support for the RHEL Kernel.
    • Also, upgrading agents to V12 doesnt not have the same Flex or exact match for KTAP as 11.5. You would think V12 would have the same Kernel support as 11.5. Clients are moving to V12.
    Incentivized
    Read full review
    Cisco
    • Splunk light limits number of users to 5. Wish there was a flexible license, where one could add more users.
    • Splunk light does not let you add > few realtime alerts. Wish there was a flexible license, where one could add as many realtime alerts as wanted.
    • Better insight into daily ingestion values
    Incentivized
    Read full review
    Likelihood to Renew
    IBM
    It is a perfect system to detect problems that we do not see manually, it is light, with a very simple learning curve and with great protection of our data, we will use it forever.
    Incentivized
    Read full review
    Cisco
    We are using Splunk extensively in our projects and we have recently upgraded to Splunk version 6.0 which is quite efficient and giving expected results. We keep track of updates and new features Splunk introduces periodically and try to introduce those features in our day to day activities for improvement in our reporting system and other tasks.
    Read full review
    Usability
    IBM
    This software is not the easiest to use in all work environments, each department has some difficulties accessing and managing some functions, it can be considered a complex softy, but I consider it necessary to have it in the company due to its security qualities of warm cans, it offers exactly what it promises but with a little difficulty in its configuration.
    Incentivized
    Read full review
    Cisco
    You can literally throw in a single word into Splunk and it will pull back all instances of that word across all of your logs for the time span you select (provided you have permission to see that data). We have several users who have taken a few of the free courses from Splunk that are able to pull data out of it everyday with little help at all.
    Incentivized
    Read full review
    Reliability and Availability
    IBM
    No answers on this topic
    Cisco
    When properly setup and configured, Splunk is extremely reliable.
    Incentivized
    Read full review
    Support Rating
    IBM
    There has been great support coming from IBM. It is easy to use and a great way to keep our data secure. I would recommend this to other possible users and if I were to move companies, I would recommend we use this there too. Thank you
    Incentivized
    Read full review
    Cisco
    Splunk maintains a well resourced support system that has been consistent since we purchased the product. They help out in a timely manner and provide expert level information as needed. We typically open cases online and communicate when possible via e-mail and are able to resolve most issues with that method.
    Incentivized
    Read full review
    Online Training
    IBM
    No answers on this topic
    Cisco
    The online course was simple clear and described the main capabilities of the solution. There is also an initial module that can be done for free so anyone can familiarize themselves with the functionality of this solution. On the other hand, however, there could be more free online courses. Maybe even with a certificate, this would broaden the group of people who are familiar with the platform while increasing familiarity with the solution itself.
    Read full review
    Implementation Rating
    IBM
    No answers on this topic
    Cisco
    Smooth without too many major issues.
    Incentivized
    Read full review
    Alternatives Considered
    IBM
    IBM Security Guardium has extended capabilities of automatically locating databases and assessing the vulnerabilities and configuration flaws in them. IBM Security Guardium stacks up against other products due to the additional features that can be easily added to your IT systems after installation. Additionally, Guardium has the ability to monitor a mainframe database environment which makes it the best choice!
    Incentivized
    Read full review
    Cisco
    A lot of products have natively inside their own dashboards and or their own logging repositories. And each one is difficult to learn or they're too complex or they're not verbose in the sense that they're not easy to mine the data that you're looking for. So that could be anything from the native logging that you find in other Cisco products. It's easier to use Splunk to draw the data that you're looking for as opposed to going to the individual's products themselves to get the logs that you're looking for.
    Incentivized
    Read full review
    Scalability
    IBM
    Only a few users in our shop for now
    Incentivized
    Read full review
    Cisco
    Splunk can scale in to the petabyte per day range which of course is awesome
    Read full review
    Return on Investment
    IBM
    • Security and monitoring are important in a financial institution
    • Constant visibility and auditing of companies is easy with IBM Guardium.
    • la seguridad y monitored es important en una entidad financiera
    • la visibilidad y auditoria constante de empresas es facil con IBM Guardium
    Incentivized
    Read full review
    Cisco
    • Splunk has allowed developers to diagnose production issues when access of control was taken away from them to be allowed to view items in production environments and I believe that is invaluable.
    • At times some developers weren't super happy about using it, but it was more of the fact that they were used to having production access and not creating their splunk queries to get information.
    • Going one place to view logs was very beneficial to have.
    Incentivized
    Read full review
    ScreenShots

    IBM Guardium Screenshots

    Screenshot of the IBM Guardium Data Protection dashboard showing all the features. One click can take you to databases or to data analytics.Screenshot of IBM Guardium Data Protection: The S-TAP and GIM Dashboard gives real-time visibility into the health and performance of S-TAPs. It is used to track the status of different S-TAP versions, see database activity across inspection engines, and view detailed insights by operating system.Screenshot of IBM Guardium DSPM: Discovery, Classification & Threat Monitoring - Automate cloud data security with discovery, classification, and continuous threat monitoring. This offers a unified view of sensitive data across cloud workloads (AWS, Azure, GCP) and SaaS (SharePoint, OneDrive, Slack, Google Drive, Jira, Confluence and more), understand its risk level, and ensure ongoing protection and compliance.Screenshot of IBM Guardium DSPM: Discovery, Classification & Threat Monitoring - Automate cloud data security with discovery, classification, and continuous threat monitoring. This offers a unified view of sensitive data across cloud workloads (AWS, Azure, GCP) and SaaS (SharePoint, OneDrive, Slack, Google Drive, Jira, Confluence and more), understand its risk level, and ensure ongoing protection and compliance.Screenshot of IBM Guardium DSPM: Discovery, Classification & Threat Monitoring - Automate cloud data security with discovery, classification, and continuous threat monitoring. This offers a unified view of sensitive data across cloud workloads (AWS, Azure, GCP) and SaaS (SharePoint, OneDrive, Slack, Google Drive, Jira, Confluence and more), understand its risk level, and ensure ongoing protection and compliance.