Nagios Log Server vs. Splunk Cloud

Nagios Log Server facilitates the ability to search all entries of logs in a quick and easy way. Beyond that, it has allowed us to configure alerts for notification when there are potential threats (may they be security threats or only application-side problems), and to filter the data for audits and compliance.

Incentivized

I will highly recommend this software because using Splunk
Cloud has helped us become more proactive about handling our security concerns
and better manage our environment. It is one of the finest security software
that is easy to use and also provides analytics. It has excellent features like
creating dashboard security and managing features etc. So you must give it a try once!

Incentivized

• Log auditing.
• Server monitoring.

Incentivized

• Splunk Cloud allows me to search the volumes of information help in Windows Server Logs quickly and accurately.
• Splunk Cloud allows me to create Dashboards for everyday monitoring of multiple parameters.
• Splunk Cloud allows me to create and schedule reports for Management on network usage and statistics.

Incentivized

• A bit hard to install and configure.
• High price.

Incentivized

• Splunk Cloud support is increasing a lot now a days and I see no cons other than the price factor to the other compared products. Overall Splunk Cloud is a very good product all together.
• I can see that Splunk Cloud can still improve in the form of SLA.
• Splunk Cloud generally lags behind the available splunk upgrades. They are always one version behind the one available for enterprise.

Incentivized

Overall, it is very usable. I would like if recent searches were saved for longer because I always have to refer to my notes when I'm looking for something specific and it's been a few weeks. But that's a small issue, and the actual search and browsing interface is easy to use and powerful.

Incentivized

Nagios support is decent. Nothing bad to say about them, but nothing extraordinary too. We mostly asked them questions instead of actively asking them to change or fix things for us. The response time is OK, commonly you can get a response in the same day. You can also call, but they are available only during US office hours.

Incentivized

Splunk Cloud support is sorely lacking unfortunately. The portal where you submit tickets is not very good and is lacking polish. Tickets are left for days without any updates and when chased it is only sometimes you get a reply back. I get the feeling the support team are very understaffed and have far too much going on. From what I know, Splunk is aware of this and seem to be trying to remedy it.

Incentivized

Windows Event Log doesn't have 10% of the capabilities of Nagios Log Server. No real-time alerts, no scheduling, no external plugins or APIs. Nothing. The only advantage is that it is a native Windows application.

Incentivized

Splunk Cloud blows Sumo Logic out of the water. The experience is night and day. We went from several highly stressed IT security professionals who were unsure if the data they were getting was valuable, to very happy IT security professionals who can now be more proactive and get all the information they need.

Incentivized

• We could react in way less time to a lot of potential outages since we started using it.

Incentivized

• The biggest return on investment is how quickly logs are now consumed, and how quickly we can follow events that occur in logs.
• The number of logs that can be consumed by Splunk is much higher than previous solutions.
• We have much better visibility into our logs, and are able to spot patterns in events with the built-in graphs and reports.

Incentivized