SAS Advance Analytics is well suited for data that is visual. Data where you want to see multiple graphs and models are good for this software. However, if your data is more descriptive this may not be the best program. SAS is well suited for data where you need to make comparisons on the feasibility of two different programs. Data that can be compared is perfect for this software.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Splunk ES is great for organizations with complex IT environments, and real-time visibility into their infrastructure is critical. We use it as the central platform to sort through alerts, run diagnostics, and respond to incidents. We have integrated it with SOAR and automations; both help keep our security posture up to date.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Writes Powerful Queries: The queries that can be written using the Splunk Query Language are very powerful and highly customizable to meet every need. Ex: Writing queries to search the intersection of two different sources like Network and Endpoint Logs.
Offers Dashboard Abilities: Helps build complex panels for Dashboards in addition to providing several out-of-the-box panels. Ex: creating panels to calculate the performance of analysts in a given timezone.
Helpful Search Aids: It helps to set up complex custom alerts very easily. The interesting fields section is very helpful while threat hunting. Ex: It shows all the users and the frequency of each in a failed login event. The user list on the interesting fields is useful to look for suspicious logins.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
SAS Analytics does not have very good graphic capabilities. Their advanced graphics packages are expensive, and still not very appealing or intuitive to customize.
SAS Analytics is not as up-to-date when it comes to advanced analytical techniques as R or other open-source analytics packages.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Improved User Interface Customization: While the interface is generally intuitive, providing more options for users to customize their dashboards and views would enhance the overall user experience. Tailoring the interface to specific roles or use cases could be a valuable addition.
Simplified Alert Management: Streamlining the process of managing alerts, such as grouping or categorizing them based on severity or type, would make it easier for security teams to prioritize and respond to incidents effectively.
Expanded Threat Intelligence Feeds: Increasing the variety and sources of threat intelligence feeds available within ES would provide a broader context for identifying and mitigating emerging threats, ensuring a more comprehensive defense against evolving attack vectors.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Not only does SAS become easier to use as the user gets more familiar with its capabilities, but the customer service is excellent. Any issues with SAS and their technical team is either contacting the user via email, chat, text, WebEx, or phone. They have power users that have years of experience with SAS there to help with any issue.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
If SAS Enterprise Guide is utilized any beginning user will be able to shorten the learning curve. This is allow the user a plethora of basic capabilities until they can utilize coding to expand their needs in manipulating and presenting data. SAS is also dedicated to expanding this environment so it is ever growing.
I gave it a 6/10 because it's a perfect tool for experienced Splunk users. It's very difficult to add people to the Splunk team due to the complexity of the solutions. It took weeks to write useful SPL queries and even more time to be independent of the solution.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
SAS probably has the most market saturation out of all of the analytics software worldwide. They are in every industry and they are knowledgable about every industry. They are always available to take questions, solve issues, and discuss a company's needs. A company that buys SAS software has a dedicated representative that is there for all of their needs.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Although nothing is perfect, SAS is almost there. The software can handle billions of rows of data without a glitch and runs at a quick pace regardless of what the user wants to perform. SAS products are made to handle data so performance is of their utmost important. The software is created to run things as efficiently as SAS software can to maximize performance.
It takes a long time for items to load if you are just generally searching through logs. It is best to use the data models which load faster but can be strange in terms of what is coming from which logs where. Yes, you can look it up, but this also requires familiarity with where things are and how to look them up.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
SAS is generally known for good support that's one of the main reasons to justify the cost of having SAS licenses within our organization is knowing that customer support is just a quick phone call away. I've usually had good experiences with the SAS customer support team it's one of the ways in which the company stands out in my view.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
It's good when it's responsive, but I've had times where I had to wait quite a while for a response. But these are typically the exceptions rather than the rule. When you do get a response it is always well-informed and appropriate. I would say they've been trending better over time with this.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
SAS has regional and national conferences that are dedicated to expanding users' knowledge of the software and showing them what changes and additions they are making to the software. There are user groups in most of the major cities that also provide multi-day seminars that focus on specific topics for education. If online training isn't the best way for the user, there is ample in-person training available.
I experienced only on-line training, but the trainers were very professional and competent. Maybe it could be more useful if they also have an experience in projects because sometimes they didn't have a real project experience to communicate to the students. Anyway, it was very interesting and I learned many thing that's very difficoult (or maybe impossible!) to have by myself, aven if I have more than 10 years of Splunk activity experience.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
There are online videos, live classes, and resource material which makes training very easy to access. However, nothing is circumstantial so applying your training can get tricky if the user is performing complex tasks. When purchasing software, SAS will also allocate education credits so the user(s) can access classes and material online to help expand their knowledge.
It was very interesting and I learned many thing that's very difficoult (or maybe impossible!) to have by myself. The only problem was that, when I worked with the Splunk Professional Services, I found some difference between the training contents and the information from PS. In addition is required a long experience on Splunk Enterprise for the data ingestion part, in other words I'm able to work with ES because I'm worling on Splunk since 11 years, otherwise I'd some problem.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Ask as many questions you can before the install to understand the process. Since a third party does the installation your company is sort of a passanger and it is easy to get lost in the process. It also helps to have all users and IT support involved in the install to help increase the knowledge as to how SAS runs and what it needs to perform correctly.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
SAS was the incumbent tool, and what the team knew. We did look into using Revolution Analytics enterprise version of R, but the learning curve on that caused us to stick with SAS. In my current position, I've opted for WPS over SAS. I can still leverage my SAS experience, but the price is about 15% of what SAS charges, with extra functionality, such as direct database access. I can supplement WPS with free software, such R for anything that it might be missing.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Splunk enterprise is the only solution that we’ve been able to identify that provides risk based alerting, which allows our SOC to reduce analyst fatigue which would be a huge problem without it. Before RBA, there were thousands of alerts a day and it was impossible to review all of them
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
for my exterience, unit pricing and billing frequency are correct. As I already said, I hint to have more discount flexibility, expecially with new customers, because there are competitors less expensive and very aggressive that are dangerous. In addition the possibility to don't pay the license for the development period could be a very interesting feature for the final customers.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
It all depends on the type of SAS product the user has. Scaleability differs from product to product, and if the user has SAS Office Analytics the scaleability is quite robust. This software will satisfy the majority of the company's analytic needs for years to come. In addition, if SAS is not meeting the users needs the company can easily find SAS solutions that will.
- 8 out of 10 and took 2 for the data pipeline and administration part. Even if you'd like to improve yourself or your team, you have to pay a lot of money and it could be more than GIAC education + cert. - Normalization for Data models and CPU-based searches can be a problem sometimes.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
I had a fantastic experience with Splunk Professional Services: they worked with us in our last SON project (a SOC migration for a very large customer) and helped to build a multi tenent environment even if ES isn't a multi tenant platform. Th Splunk PS was a very professional and competent people, he is italian and was able to speak with our italian customers.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
We have a 100% success rate on all our ES implementations due to the amazing documentation and Splunk enablement on the subject.
Our Splunk ES business has grown 100% YoY for the last 3 years.
In terms of long term management and maintenance, ES has been highly stable and predictable, reducing our overhead on costly services team for ad hoc maintenance work.
