Microsoft System Center Operations Manager (SCOM) vs. Splunk Application Performance Monitoring (APM)

More appropriate for:

• Pure Microsoft ecosystem environments (Windows Server and SQL server) and the most common Linux and UNIX platforms.
• Environments where cost is less of a factor than settling on a single platform for monitoring
• Environments where the administrators are familiar with the setup and installation of SCOM.

Less appropriate for:

• Pure UNIX/Linux shops, especially versions not supported out of the box by SCOM.
• Shops that cannot afford the engagement to setup/configure and maintain on a continuous basis.
• Shops that cannot dedicate personnel to the care and feeding of SCOM, especially when supporting larger environments.

Incentivized

Good for below cases 1. There is a front end and need to correlate data with front end data 2. multiple microservices and need to check the health of each system 3. correlate data from various sources 4. Application performance is a key to be captured 5. application performance is a key metric.

Incentivized

• Allows us to visualize our systems in a single interface and see the status of health as well as relevant performance metrics.
• A flexible and powerful interface with active alerting covering domain controllers, SQL servers, etc...
• Allows you to customize your views and workspaces for specific tasks and needs.
• Reporting is powerful and flexible.

Incentivized

• Detect and Troubleshoot, which allows team to eliminate errors.
• Dashboard creates a one stop location for environment health
• Provides visibility, access to logs and user data real time.

Incentivized

• One of the biggest drawbacks to SCOM is the sheer scope and complexity of the system. This can be a pro and a con. The system is very customizable, what you put into it is what you'll get out of it. That said, the learning curve is fairly steep. An organization needs to be committed to putting time and resources into SCOM to get the most out of it. I've heard stories from colleagues of several different companies that invested in SCOM and then abandoned it due to the excessive time and care required.
• SCOM is expensive. Not only is the enterprise licensing costly, SCOM requires it's own servers, operational and warehouse databases to be maintained.
• The OOB SCOM reports are a bit clunky and feel outdated.

Incentivized

• I wish Splunk Application Performance Monitoring could integrate with packet capture and analysis tools and provide the integrated analysis results on each tier of the application

Incentivized

Splunk is a great tool for log mining. It is less time-consuming and easy to use. It provides high security, it has customisable dashboards. Furthermore, it acts as a search head, and it gives real-time status. It has the ability to collect data from any source and multiple sources, and it can correlate them.

Incentivized

Hard to get support. The product is not being actively developed anymore, so it is hard to get new features for the product.

Incentivized

We used Altiris and WSUS and in the beginning Altiris had the better admin interface than SCOM, but it is no longer the case as SCOM has refined their admin interface. Altiris still has better and more robust group assignments for management roles and those two other tools can better manage non Windows OS devices than SCOM but for a large enterprise Windows shop, if you can afford it, SCOM is the way to go.

Incentivized

It is good that the correlation analysis and the cause of the failure can be analyzed more extensively through the collection of many data. It is good because it provides a user interface (usability) well and can be used conveniently.
It is good because it can utilize anomaly detection through various AI-based ML models.

Incentivized

• It has allowed us to provide an Enterprise Event/Alert management solution to the Global company
• It has taken a long time to get it to provide valuable alerts and information, lots of user resources and investment.
• It assists with 24/7 monitoring and out of hours support

Incentivized

• It gave us more quicker alerts in a organize way to distribute to specific audience.
• Helped us to improve our uptime by getting pro-active alerts via emails
• More collaboration in a DevOps culture

Incentivized