LogicMonitor vs. Splunk Enterprise

The warnings are incredibly detailed. I think it would be incredibly helpful to have a record of what happens when an outage starts and when the status changes. Also the average customer who isn't overly concerned about the data's storage location will love LogicMonitor, but security-conscious clients may find it harder to adopt due to data not held locally.

Incentivized

Pros: Splunk is very well suited if you have multiple log sources of related data. All of them can be correlated and tasks can be automated based on the requirement. Other than alerts, Splunk can also run a specific script of your choice, based on some defined conditions. Cons: If you have a few logs but a large number of log sources, Splunk can be very expensive.

Incentivized

• LogicMonitor is very customizable. We can build whatever modules we need, because it uses standard protocols like HTTPS, SNMP and WMI to gather data and metrics.
• We like that LogicMonitor is an agentless solution for our use case. Not all customers will allow an agent-based approach to 3rd party tools.
• LogicMonitor has thousands of out of the box modules, which work on their own and also act as good baselines for the ones that we will end up customizing more. We are rarely starting at zero when we decide to do something new with LogicMonitor.
• LogicMonitor has great documentation, and support has been helpful in the instances where we've needed them.

Incentivized

• Real-time + Scheduled alerts - i-e you can set up alerts which are actively monitoring your logs
• Pretty good response time for search results. With our key/value logging, Splunk makes it blazing fast to query the data.
• Dashboards provide insights into historical data
• Love how Splunk indexes all of the data and provides keys to search on

Incentivized

• Because of the rapid change in technology, maintaining DataSources to the most current level can be time-consuming for staff.
• The network discovery and mapping capabilities are not as robust when compared to other solutions
• While it can back-up configuration files on devices, it does not have the ability to push or modify configuration files back to devices.

Incentivized

• At times some queries can run slowly if indices are not on a portion of the query you use.
• Setup time initially can be difficult if your logs aren't stored in common locations or in a common way to write the log.
• Ability to ingest logs from different locations without having to change code to put logs in a certain place (pro and con).
• Searches can be a bit more difficult to look through if your log isn't pulled in a manner that is easy to read through splunk.

Incentivized

This product has met virtually all of our needs. It was easy to implement and has been simple to support. Customization has been intuitive with many options available. They keep adding features and expanding available options. The future of LogicMonitor looks even better than it is today which is very promising. The management and support teams at LogicMonitor are always helpful

Incentivized

We are using Splunk extensively in our projects and we have recently upgraded to Splunk version 6.0 which is quite efficient and giving expected results. We keep track of updates and new features Splunk introduces periodically and try to introduce those features in our day to day activities for improvement in our reporting system and other tasks.

Set up is super easy. Just stand up a small Linux or Windows server to act as a collector. There are no agents to install on monitored devices and all you need is SNMP or WMI access. When creating dashboards, all you have to do is find the widget on the device you want to show up and choose the menu option to add it.

Incentivized

You can literally throw in a single word into Splunk and it will pull back all instances of that word across all of your logs for the time span you select (provided you have permission to see that data). We have several users who have taken a few of the free courses from Splunk that are able to pull data out of it everyday with little help at all.

Incentivized

When properly setup and configured, Splunk is extremely reliable.

Incentivized

The sales team support we received was top notch. They worked hand in hand to make sure the product met all expectations. So far we have not really had to work with support that much; we have worked with setup team after purchase to deploy product fully. No issues so far and we are four weeks in.

Incentivized

Splunk maintains a well resourced support system that has been consistent since we purchased the product. They help out in a timely manner and provide expert level information as needed. We typically open cases online and communicate when possible via e-mail and are able to resolve most issues with that method.

Incentivized

Add good training

Incentivized

The training is good but room to improve

Incentivized

The online course was simple clear and described the main capabilities of the solution. There is also an initial module that can be done for free so anyone can familiarize themselves with the functionality of this solution. On the other hand, however, there could be more free online courses. Maybe even with a certificate, this would broaden the group of people who are familiar with the platform while increasing familiarity with the solution itself.

We found the LogicMonitor documentation and online guides to be up to date and easy to follow. During our pre-sale proof of concept phase, we learned the basics of creating import CSV files and had the bulk of our devices added the first day. After the purchase, we used the professional services to get training on the entire system and help customizing everything to meet our needs. We also made use of the available certification online training courses for our power users to get them comfortable with the system.

Incentivized

Smooth without too many major issues.

Incentivized

During the evaluation process we looked a number of other solutions, a detailed technically analysis was carried out to map functionlity, deployment and scalabilty across the solutions. The primary areas that LogicMonitor succeeded are around the simplicity of deployment, scalability and to a lesser extent cost. Of the alternative products, Datadog is a better solution if your focus is on APM. However it will be harder to manage in a scaling MSP environment.

I wanted to learn a new language that I can quickly master and implement. Splunk is easy, fun to use and best of all, it can be developed in hours not days or weeks. Splunk is fundamentally a programming language that is minimal but yet powerful enough to collect, analyze and visualize data.

Incentivized

Pricing seems to be getting more and more aggressive, I worry that it's going to turn into ServiceNow or SAP and everything minor feature will be an extreme cost that prices out us and our customers

Incentivized

Splunk can scale in to the petabyte per day range which of course is awesome

Haven't really used it but our initial onboarding PS was disappointing. Felt like we were being told what we needed to cover as opposed to what we wanted to cover. In addition, we were pushed into using the PS in tight time frames and we were not ready to do so.

Incentivized

• definitely adds a good amount of cost to any account which is not easy to sell to SMBs
• it does give a piece of mind knowing that everything is monitored and alerts will go out before users know something is not working

Incentivized

• Overall very positive. It has provided visibility to what is going on within our network.
• One drawback is the time it takes to get up to speed with the application, but this is up to the user, and Splunk education is excellent.
• In my field, IT Security, there are few other friends to have in your back pocket better than Splunk. They are just that good.

Incentivized