What users are saying about
34 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring#question3' target='_blank' rel='nofollow noopener noreferrer'>Customer Verified: Read more.</a>
Top Rated
293 Ratings
34 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 9 out of 100

Splunk Enterprise

<a href='https://www.trustradius.com/static/about-trustradius-scoring#question3' target='_blank' rel='nofollow noopener noreferrer'>Customer Verified: Read more.</a>
Top Rated
293 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 8.7 out of 100

Likelihood to Recommend

Netwrix Auditor

Netwrix Auditor is well suited to perform audit data collection on many types of servers that require audit data to be collected. It runs fairly quickly and usually informs you if something went wrong in the data collection. They do need to have better documentation and some form of internal documentation to help the users who understand what is happening in their system to help them through the process of figuring out when something went wrong.
Glenn Jones | TrustRadius Reviewer

Splunk Enterprise

Pros: Splunk is very well suited if you have multiple log sources of related data. All of them can be correlated and tasks can be automated based on the requirement. Other than alerts, Splunk can also run a specific script of your choice, based on some defined conditions. Cons: If you have a few logs but a large number of log sources, Splunk can be very expensive.
Kuntal Das | TrustRadius Reviewer

Feature Rating Comparison

Security Information and Event Management (SIEM)

Netwrix Auditor
Splunk Enterprise
8.9
Centralized event and log data collection
Netwrix Auditor
Splunk Enterprise
9.5
Correlation
Netwrix Auditor
Splunk Enterprise
9.0
Event and log normalization
Netwrix Auditor
Splunk Enterprise
9.1
Deployment flexibility
Netwrix Auditor
Splunk Enterprise
8.5
Integration with Identity and Access Management Tools
Netwrix Auditor
Splunk Enterprise
8.2
Custom dashboards and views
Netwrix Auditor
Splunk Enterprise
9.1
Host and network-based intrusion detection
Netwrix Auditor
Splunk Enterprise
8.6

Pros

Netwrix Auditor

  • Netwrix Auditor sends out warnings to users when their passwords are close to expiring. This saves us some headache, because if they have any problems with changing their password, we can help them before they get locked out.
  • The notifications for multiple failed logons is a lifesaver. Very useful for spotting suspicious activity!
  • I love the way that you can create your own custom notifications and reports through the "Search" function. You can pick the "What", "Where", and "When" for the event you want to monitor and set up email email reports for them.
Matt Rogers | TrustRadius Reviewer

Splunk Enterprise

  • Allow for separation of control where we don't let some employees have access to production but still can diagnose issues.
  • Common location to go for all logs even if the logs themselves aren't in the same place.
  • Ability to ingest logs from different locations without having to change the code to put logs in a certain place (pro and con).
Anonymous | TrustRadius Reviewer

Cons

Netwrix Auditor

  • They have a screen capture function that I have never been able to get to work properly. However, I have never called their support on this issue so it is not necessarily a big ding against them. I am only mildly interested in this feature. We have enough network monitoring so I already know what my users are doing I don't need a capture.
Jon Gabriel Bolland II | TrustRadius Reviewer

Splunk Enterprise

  • Even though there is a search tool as a help function, you still have to read through many documentation to find the answers you're looking for and sometimes you don't find it. The help function in Splunk could be improved to be more intuitive or have a built-in help per report, panel or dashboard.
  • Creating a Splunk dashboard is rather straightforward however, customization is not. Splunk could be improved to provide more tools or features for customization such as adding colors and font options for text and graphs or graphics.
  • My dashboard has a lot of useful information and I want the important panels and reports at the top but there is no easy way to do this. Perhaps Splunk could be improved to allow features such as adding URL links to other dashboards or some other clever way to emphasize the important data in my dashboard without compromising space.
Trung Pham | TrustRadius Reviewer

Likelihood to Renew

Netwrix Auditor

Netwrix Auditor 8.0
Based on 1 answer
We have renewed already the licensing of the product minus SQL Server and Oracle Database because the organisation believes the modules are very expensive and have identified a different product for auditing DatabasesOther modules are very important like the User Activity monitor, AD queries that we can not get from the native AD itself or you have to run complicated powershell scripts!Easy to use interfacePre-defined ReportsEasy way to subscribe to important alerts e.g Privilege account group membership changes
Junie Johwa | TrustRadius Reviewer

Splunk Enterprise

Splunk Enterprise 10.0
Based on 17 answers
We are using Splunk extensively in our projects and we have recently upgraded to Splunk version 6.0 which is quite efficient and giving expected results. We keep track of updates and new features Splunk introduces periodically and try to introduce those features in our day to day activities for improvement in our reporting system and other tasks.
Anonymous | TrustRadius Reviewer

Usability

Netwrix Auditor

Netwrix Auditor 8.0
Based on 1 answer
The product has user friend pre-defined queries which takes off the stress and horrors of having to query Active Directory with complex Powershell scripts!You can subscribe to certain functions when they are done and you get an alert e.g privileged accounts actions and you don't need to have programming skillsThe product has a desktop version of the software and donot have to login to the server all the time you need to use it.You can see very fast the posture of your environment of the overview screen and deduce what exactly is wrong and what has to be done
Junie Johwa | TrustRadius Reviewer

Splunk Enterprise

Splunk Enterprise 9.0
Based on 3 answers
You can literally throw in a single word into Splunk and it will pull back all instances of that word across all of your logs for the time span you select (provided you have permission to see that data). We have several users who have taken a few of the free courses from Splunk that are able to pull data out of it everyday with little help at all.
Kenneth Taitingfong | TrustRadius Reviewer

Reliability and Availability

Netwrix Auditor

No score
No answers yet
No answers on this topic

Splunk Enterprise

Splunk Enterprise 10.0
Based on 1 answer
When properly setup and configured, Splunk is extremely reliable.
Anonymous | TrustRadius Reviewer

Support Rating

Netwrix Auditor

Netwrix Auditor 8.8
Based on 5 answers
Customer support has always been fast and helpful when we run into any issues. The smaller issues are usually resolved within a day or two. It is great support and I feel like I am in good hands anytime an issue comes up. However, we don't run into many issues
Anonymous | TrustRadius Reviewer

Splunk Enterprise

Splunk Enterprise 8.8
Based on 17 answers
Splunk maintains a well resourced support system that has been consistent since we purchased the product. They help out in a timely manner and provide expert level information as needed. We typically open cases online and communicate when possible via e-mail and are able to resolve most issues with that method.
Anonymous | TrustRadius Reviewer

Implementation Rating

Netwrix Auditor

Netwrix Auditor 7.0
Based on 2 answers
Make sure you trial the software and understand the fundamentals of each module that you are interested inMake sure you get the buy in from both Management and most importantly your team members (the product users) for a successful implementationWatch the webinars of the product from the product website
Junie Johwa | TrustRadius Reviewer

Splunk Enterprise

Splunk Enterprise 9.0
Based on 2 answers
Smooth without too many major issues.
Anonymous | TrustRadius Reviewer

Alternatives Considered

Netwrix Auditor

Netwrix Auditor is a visibility and governance platform that allows you to monitor changes, configurations and access in IT infrastructure of important IT infrastructure components such as Active Directory, event logs, Exchange, Office 365, SQL Server, and others. Apart from that - what’s wonderful about this tool is that you can view before/after snapshots of your managed data. For instance, you can view Group Policy data as it existed before one of your colleagues made some blocking edits to the domain policy.
Anonymous | TrustRadius Reviewer

Splunk Enterprise

Splunk is proving to be a formidable replacement for Qradar, which we had as our previous SIEM. Qradar was powerful, but not easy to customize and quite limited. Splunk is not per se a "SIEM" but it can be in the way you used it. Also there is an Enterprise Security App that is available to buy and sit on top of Splunk, and that will take care of any concerns with needing a full-fledged SIEM. Splunk wins.
Anonymous | TrustRadius Reviewer

Scalability

Netwrix Auditor

No score
No answers yet
No answers on this topic

Splunk Enterprise

Splunk Enterprise 9.1
Based on 1 answer
Splunk can scale in to the petabyte per day range which of course is awesome
Rick Yetter | TrustRadius Reviewer

Return on Investment

Netwrix Auditor

  • Neutral on its effectiveness - Difficult to set up, poor support response from the supplier, but it does the basics well. We might not make the same decision with the benefit of hindsight.
  • If you lack technical skills in AD security and have little other choice for monitoring tools and automated alerts then this may be a good purchase for you.
  • With the stability issues that we are fighting with, I would say currently this has not yet met the business objectives set for this purchase.
Anonymous | TrustRadius Reviewer

Splunk Enterprise

  • I'm not a data analyst so I can not provide concrete examples on how the business has benefited from implementing Splunk. However, the analysts I have worked with have provided a wealth of support in reducing workstation issues across the enterprise. This alone reduces the time it takes to determine where the exact problem lies between a workstation and the servers it tries to communicate with.
Anonymous | TrustRadius Reviewer

Screenshots

Pricing Details

Netwrix Auditor

General

Free Trial
Yes
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Splunk Enterprise

General

Free Trial
Yes
Free/Freemium Version
Yes
Premium Consulting/Integration Services
Entry-level set up fee?
No

Rating Summary

Likelihood to Recommend

Netwrix Auditor
9.0
Splunk Enterprise
9.0

Likelihood to Renew

Netwrix Auditor
8.0
Splunk Enterprise
10.0

Usability

Netwrix Auditor
8.0
Splunk Enterprise
9.0

Reliability and Availability

Netwrix Auditor
Splunk Enterprise
10.0

Support Rating

Netwrix Auditor
8.8
Splunk Enterprise
8.8

Implementation Rating

Netwrix Auditor
7.0
Splunk Enterprise
9.0

Scalability

Netwrix Auditor
Splunk Enterprise
9.1

Add comparison