IBM Log Analysis with LogDNA is a fully centralized log management solution.
N/A
Splunk Cloud Platform
Score 8.0 out of 10
N/A
Splunk Cloud Platform is a data platform service thats help users search, analyze, visualize and act on data. The service can go live in as little as two days, and with an IT backend managed by Splunk experts.
IBM Log Analysis with LogDNA is well suited if you are using other IBM cloud product ecosystems. It's very mature and supports HIPAA-compliant configurations if you need to store PI/PHI data. We particularly use it for audit requirements but understand the limitation with the retention period is for 30 days only. Also you need to configure if your IBM cloud service doesn't have any log collection or report tool. Log collection agents are widely supported for most of infrastructure in cloud.
Splunk is excellent when all your data is in one location. Its ability to correlate all that data is intuitive (once the hurdle of learning the query language is overcome). It is also easy to standardize the presentation of information to the company. When data is siloed/standalone, other systems can be cheaper and faster to implement.
This SIEM consolidates multiple data points and offers several features and benefits, creating custom dashboards and managing alert workflows.
Splunk Cloud provides a simple way to have a central monitoring and security solution. Though it does not have a huge learning curve, you should spend some time learning the basics.
Splunk Cloud enables me to create and schedule statistical reports on network use for Management.
Splunk Cloud support is sorely lacking unfortunately. The portal where you submit tickets is not very good and is lacking polish. Tickets are left for days without any updates and when chased it is only sometimes you get a reply back. I get the feeling the support team are very understaffed and have far too much going on. From what I know, Splunk is aware of this and seem to be trying to remedy it.
If you use other IBM product ecosystems, IBM Log Analysis with LogDNA is the obvious choice, as it supports seamless integration and better access control with IBM cloud access group setups. IBM Log Analysis with LogDNA was flexible and has wide support for various infrastructure implementations and is also controlled by the same IAM access setup. It can be configured for any IBM cloud services or platform logs or for infrastructure by installing the agent.
Search Processing Language really is a game changer for writing easy-to-understand and maintainable queries on your data base logs. Once understood, setting up and validating a query can be done in no time- which leaves us the option to focus on more monitoring and improved services. We have no other tools that utilizes data this efficiently
Most of IBM cloud services support easier integration for log analysis.
We are able to achieve compliance with various audit log reports, which improves governance and control over various cloud resources we have.
Also IBM Log Analysis with LogDNA helps in troubleshooting and analysis for application logs in real time. This helps with improved issue resolution timings.
