Likelihood to Recommend More appropriate for:
Pure Microsoft ecosystem environments (Windows Server and SQL server) and the most common Linux and UNIX platforms. Environments where cost is less of a factor than settling on a single platform for monitoring Environments where the administrators are familiar with the setup and installation of SCOM. Less appropriate for:
Pure UNIX/Linux shops, especially versions not supported out of the box by SCOM. Shops that cannot afford the engagement to setup/configure and maintain on a continuous basis. Shops that cannot dedicate personnel to the care and feeding of SCOM, especially when supporting larger environments. Read full review Splunk ITSI is a great tool (and toolbox) for combining together numerous and varied monitoring regimes to bring more holistic analysis and reduce alert fatigue. By leveraging the Splunk ITSI service and KPI modeling regime, ecosystem telemetry can be turned into a more reliable, clearer, high-level perspective on the current state of your components and services.
Read full review Pros Allows us to visualize our systems in a single interface and see the status of health as well as relevant performance metrics. A flexible and powerful interface with active alerting covering domain controllers, SQL servers, etc... Allows you to customize your views and workspaces for specific tasks and needs. Reporting is powerful and flexible. Read full review Monitor hundreds of IT services by continuously tracking thousands of KPIs in a scalable way. Quickly identify problem areas by a combination of default visualizations and ability to create custom dashboards. Extremely configurable to effectively monitor nearly any KPI imaginable from Splunk. Read full review Cons One of the biggest drawbacks to SCOM is the sheer scope and complexity of the system. This can be a pro and a con. The system is very customizable, what you put into it is what you'll get out of it. That said, the learning curve is fairly steep. An organization needs to be committed to putting time and resources into SCOM to get the most out of it. I've heard stories from colleagues of several different companies that invested in SCOM and then abandoned it due to the excessive time and care required. SCOM is expensive. Not only is the enterprise licensing costly, SCOM requires it's own servers, operational and warehouse databases to be maintained. The OOB SCOM reports are a bit clunky and feel outdated. Read full review ITSI really needs a robust splunk log ingestion infrastructure at its core ITSI requires a great engineering team to build out the automated discovery and topology Unless you use an API to build the topology, the view can quickly become static Read full review Likelihood to Renew We have replaced our monitoring platform with Splunk & ITSI, and with the success, it's seen at our organization thus far we would be hard-pressed to pivot to another tool. Frankly, our business partners and application teams love Splunk & ITSI.
Read full review Support Rating Hard to get support. The product is not being actively developed anymore, so it is hard to get new features for the product.
Read full review During POC, pre-planning, and implementation, we have had interactions with numerous folks at Splunk. Everyone from sales & engineering to markets analysts to specific IT component SMEs, and a small professional services engagement to get started. They have all been exceptionally helpful and go above and beyond the call of duty. They actively reach out to ensure success is being realized and find ways to help proactively, instead of having to simply open support cases with the vendor.
Read full review Alternatives Considered We used Altiris and WSUS and in the beginning Altiris had the better admin interface than SCOM, but it is no longer the case as SCOM has refined their admin interface. Altiris still has better and more robust group assignments for management roles and those two other tools can better manage non Windows OS devices than SCOM but for a large enterprise Windows shop, if you can afford it, SCOM is the way to go.
Read full review Splunk has raised itself as a platform not just as a tool unlike other products in the market. If I talk about
Moogsoft it also has similar capabilities but Splunk ITSI has more visibility and its GUI is making a different impact on the users. ServiceNow and Splunk are equally capable products however Splunk seems to have more tech-savvy people tools than ServiceNow.
Read full review Return on Investment It has allowed us to provide an Enterprise Event/Alert management solution to the Global company It has taken a long time to get it to provide valuable alerts and information, lots of user resources and investment. It assists with 24/7 monitoring and out of hours support Read full review Splunk ITSI has reduced the number of alerts exposed to our Network Operations Center by 100x while increasing the context around outages. Splunk ITSI has increased the accuracy of our incident detection by leveraging the Event Analytics system to weigh the behavior of the many characteristics of each component together instead of independently. Splunk ITSI has reduced our incident MTTR (mean time to restore) by detecting issues faster, presenting them more clearly, and surfacing the salient details about the underlying issue. Read full review ScreenShots