Oracle Database vs. Splunk Enterprise

We migrated from NoSQL to an Oracle database. One of the reasons was robust backup and recovery options available in the Oracle database, which provide zero data loss. A transactional database like Oracle is a better fit for our use case than NoSQL. On a large scale, deployment was evaluated as a cheaper option than the NoSQL engine. This conclusion came even after considering Oracle license is expensive.

Incentivized

I'm liking the newer products, and I'm looking forward to how they integrate with the overall product when they come together. Just log in and be able to query a large number of systems for similar issues or a unique one. That is a great fit for Splunk Enterprise, looking for a simple case or a simple String or something of that nature across multiple machines. It's a great fit for that to identify issues or particular software, whatever your scenario is, String, to find it across any particular server or group of servers, so that you can update or do a deployment or whatever it is you're looking to do.

Incentivized

• Best thing about it is that it supports PL/SQL which is helpful in writing complex quarries easily.
• Its storage capacity , backup and recovery features make it the best database storage tool available.
• Other thing I like about this software is its interface is so good.

Incentivized

• Real-time + Scheduled alerts - i-e you can set up alerts which are actively monitoring your logs
• Pretty good response time for search results. With our key/value logging, Splunk makes it blazing fast to query the data.
• Dashboards provide insights into historical data
• Love how Splunk indexes all of the data and provides keys to search on

Incentivized

• The memory demand and management makes it impossible to run it in a container.
• It is hard to perform local unit testing with Oracle even using the personal edition (aggressive all the available memory grab for itself).
• Lack of built in database migrations (e.g. as Flyway).
• The need to install the Oracle client in addition to its drivers.
• The cost of running it, especially in the Cloud.
• Comes with very spartan community grade client/management tools whereas the commercial offerings tend to demand a premium price.

Incentivized

• At times some queries can run slowly if indices are not on a portion of the query you use.
• Setup time initially can be difficult if your logs aren't stored in common locations or in a common way to write the log.
• Ability to ingest logs from different locations without having to change code to put logs in a certain place (pro and con).
• Searches can be a bit more difficult to look through if your log isn't pulled in a manner that is easy to read through splunk.

Incentivized

It is very likely to use this 12c (or next version) of Oracle Database. Nothing close to it in the marketplace in terms of performance, reliability and overall database management efficiency. If Oracle did one thing really good - it is it's OLTP Database I must say.

We are using Splunk extensively in our projects and we have recently upgraded to Splunk version 6.0 which is quite efficient and giving expected results. We keep track of updates and new features Splunk introduces periodically and try to introduce those features in our day to day activities for improvement in our reporting system and other tasks.

Many of the powerful options can be auto-configured but there are still many things to take into account at the moment of installing and configuring an Oracle Database, compared with SQL Server or other databases. At the same time, that extra complexity allows for detailed configuration and guarantees performance, scalability, availability and security.

Incentivized

Splunk usability could be a little more friendly on correlations and log analysis. not for end users, but for the tech team, sometimes is hard to find good professionals to set up integrations and new dashboards when needed. For the high-level management, it can be overwhelming to read Splunk dashboards.

Incentivized

When properly setup and configured, Splunk is extremely reliable.

Incentivized

1. I have very good experience with Oracle Database support team. Oracle support team has pool of talented Oracle Analyst resources in different regions. To name a few regions - EMEA, Asia, USA(EST, MST, PST), Australia. Their support staffs are very supportive, well trained, and customer focused. Whenever I open Oracle Sev1 SR(service request), I always get prompt update on my case timely. 2. Oracle has zoom call and chat session option linked to Oracle SR. Whenever you are in Oracle portal - you can chat with the Oracle Analyst who is working on your case. You can request for Oracle zoom call thru which you can share the your problem server screen in no time. This is very nice as it saves lot of time and energy in case you have to follow up with oracle support for your case. 3.Oracle has excellent knowledge base in which all the customer databases critical problems and their solutions are well documented. It is very easy to follow without consulting to support team at first.

Incentivized

Splunk maintains a well resourced support system that has been consistent since we purchased the product. They help out in a timely manner and provide expert level information as needed. We typically open cases online and communicate when possible via e-mail and are able to resolve most issues with that method.

Incentivized

The online course was simple clear and described the main capabilities of the solution. There is also an initial module that can be done for free so anyone can familiarize themselves with the functionality of this solution. On the other hand, however, there could be more free online courses. Maybe even with a certificate, this would broaden the group of people who are familiar with the platform while increasing familiarity with the solution itself.

Overall the implementation went very well and after that everything came out as expected - in terms of performance and scalability. People should always install and upgrade a stable version for production with the latest patch set updates, test properly as much as possible, and should have a backup plan if anything unexpected happens

Smooth without too many major issues.

Incentivized

Because of a rich user base and support for any critical issue, this is one of the best options to choose. In case the project has a TCO issue, it can compromise and choose Postgres as the best alternative. SQL server is also good and easy to code and maintain but performance is not as good as the Oracle

Incentivized

A lot of products have natively inside their own dashboards and or their own logging repositories. And each one is difficult to learn or they're too complex or they're not verbose in the sense that they're not easy to mine the data that you're looking for. So that could be anything from the native logging that you find in other Cisco products. It's easier to use Splunk to draw the data that you're looking for as opposed to going to the individual's products themselves to get the logs that you're looking for.

Incentivized

Splunk can scale in to the petabyte per day range which of course is awesome

• Our product's ability to monitor the Oracle database has generated significant revenue from only a few customers, totaling $1mn.
• An Oracle account helps analyze the patches and changes going into it, enabling the team to enhance the product and update it more quickly. It reduced the effort by more than 50%.
• Being a closed-source code DBMS, it is difficult to ascertain the exact exploits of the vulnerability to provide patches to customers and requires reverse engineering.

Incentivized

• Ease of collecting IP for blacklisting.
• Generation of metrics against compromised accounts based on location and time of the year. It helped in launching phishing education campaign before hitting the most vulnerable month of the year.
• It helped in neutralizing vulnerable word-press sites across the campus, leading to the decrease of account compromise.

Incentivized