ITM vs Splunk Enterprise

• The GUI is easy to read.
• The software is fairly easy to configure.
• Almost real-time.

Read full review

• Real-time + Scheduled alerts - i-e you can set up alerts which are actively monitoring your logs
• Pretty good response time for search results. With our key/value logging, Splunk makes it blazing fast to query the data.
• Dashboards provide insights into historical data
• Love how Splunk indexes all of the data and provides keys to search on

Read full review

• The software is not reliable at all.
• Reports errors that are false-negatives.
• Hard to configure alarms/alerts.
• Bulky installation (takes up quite a bit of space).

Read full review

• At times some queries can run slowly if indices are not on a portion of the query you use.
• Setup time initially can be difficult if your logs aren't stored in common locations or in a common way to write the log.
• Ability to ingest logs from different locations without having to change code to put logs in a certain place (pro and con).
• Searches can be a bit more difficult to look through if your log isn't pulled in a manner that is easy to read through splunk.

Read full review

• I would not purchase this again.
• Other software monitoring tools have been more reliable and easier to manage.
• Difficult to manage, if you patch the server the software is installed on and have to reboot it, IBM Tivoli Monitoring does not come up clean.

Read full review

• Overall very positive. It has provided visibility to what is going on within our network.
• One drawback is the time it takes to get up to speed with the application, but this is up to the user, and Splunk education is excellent.
• In my field, IT Security, there are few other friends to have in your back pocket better than Splunk. They are just that good.

Read full review