Netwrix Auditor vs Splunk Enterprise

• Netwrix Auditor sends out warnings to users when their passwords are close to expiring. This saves us some headache, because if they have any problems with changing their password, we can help them before they get locked out.
• The notifications for multiple failed logons is a lifesaver. Very useful for spotting suspicious activity!
• I love the way that you can create your own custom notifications and reports through the "Search" function. You can pick the "What", "Where", and "When" for the event you want to monitor and set up email email reports for them.

Read full review

• Allow for separation of control where we don't let some employees have access to production but still can diagnose issues.
• Common location to go for all logs even if the logs themselves aren't in the same place.
• Ability to ingest logs from different locations without having to change the code to put logs in a certain place (pro and con).

Read full review

• They have a screen capture function that I have never been able to get to work properly. However, I have never called their support on this issue so it is not necessarily a big ding against them. I am only mildly interested in this feature. We have enough network monitoring so I already know what my users are doing I don't need a capture.

Read full review

• Even though there is a search tool as a help function, you still have to read through many documentation to find the answers you're looking for and sometimes you don't find it. The help function in Splunk could be improved to be more intuitive or have a built-in help per report, panel or dashboard.
• Creating a Splunk dashboard is rather straightforward however, customization is not. Splunk could be improved to provide more tools or features for customization such as adding colors and font options for text and graphs or graphics.
• My dashboard has a lot of useful information and I want the important panels and reports at the top but there is no easy way to do this. Perhaps Splunk could be improved to allow features such as adding URL links to other dashboards or some other clever way to emphasize the important data in my dashboard without compromising space.

Read full review

• Neutral on its effectiveness - Difficult to set up, poor support response from the supplier, but it does the basics well. We might not make the same decision with the benefit of hindsight.
• If you lack technical skills in AD security and have little other choice for monitoring tools and automated alerts then this may be a good purchase for you.
• With the stability issues that we are fighting with, I would say currently this has not yet met the business objectives set for this purchase.

Read full review

• I'm not a data analyst so I can not provide concrete examples on how the business has benefited from implementing Splunk. However, the analysts I have worked with have provided a wealth of support in reducing workstation issues across the enterprise. This alone reduces the time it takes to determine where the exact problem lies between a workstation and the servers it tries to communicate with.

Read full review