SentinelOne Singularity vs. Splunk Log Observer

I'm not sure about pricing but I have heard from larger companies that it was not very accessible because of their size. We are a small company and we also utilize a SIEM which helped offset costs right off the bat. I think it makes 100% sense for IT departments that don't have enough staff to monitor their environment in depth.

Incentivized

Great for organizations that need to centralize different types of logging across integration, qa, sandbox and production environments. Would be less impactful for organizations that don't have complex logging needs.

• SentinelOne provides excellent protection against known and unknown attacks to our endpoints.
• The recovery option provides a fast, first line of defense against ransomware and other system damaging attacks.
• SentinelOne requires minimal administrative support making it a very cost effective and efficient solution.

Incentivized

• Providing in-depth insights
• A related content feature which really helps us to figure out which service is breaking the infrastructure.
• The Log explorer which helps us to explore the entire log and pin point the errors/issues.
• Fast and powerful log investigation

Incentivized

• Possibly for compatibility with legacy Windows OS's and non Windows OS's.
• Some settings are greyed out and unable to change but I believe this is to protect you from making a bad configuration change.
• Could do better with reporting at the base level subscription.

Incentivized

• Integrating the system with Slack channels
• Saving the logs in different cloud provider
• Viewing the logs at more fine grained level based on user roles and permissions

Incentivized

Reliable for simple installation and above all efficient

Incentivized

I'm a Splunk specialist, and I'm involved in its use and improvement.

Incentivized

Compared to all the other major players, SentinelOne is truly hands off. One installed, the tool is able to manage all the major threats on my endpoints without intervention. The biggest thing the IT Dept has to do now is just clear the incidents after SentinelOne has dealt with them. Every other tool I have used requires significantly more effort to maintain.

Incentivized

It gives access to data features for every level of users: from managers and executives to Analysts, each one with the correct level of observation and analysis.

Incentivized

Their support is good and quick to respond. The one issue we faced was when a non-protection issue arose there was a lot of dancing around trying to figure things out. This was frustrating as it took significantly longer to figure out issues. Lots of repetitive log gathers, screen caps, uninstalls that never seemed to resolve issues. Eventually, the product would be updated and the issue seemed to be resolved, but seemed to be the only solution.

Incentivized

Splunk support is very quick and efficient. Pre-sale specialists are very skilled and available.

Incentivized

Follow a training before starting.

Incentivized

Webroot is a great product but did not provide the versatility that we really were desiring. It allowed to us to centrally manage, but required policy-based management, and not the endpoint detail we wanted. SentinelOne's central management provides a variety of options for us to deploy and manage.

Incentivized

I had not considered other products because Splunk Log Observer was in use in my company before I started working there.

Incentivized

• SentinelOne has already proved its value by stopping attacks that would have gone otherwise unnoticed until much later in their infection process.
• The Vigilance team has provided quick response to threats that were not easily contained via the automated response SentinelOne's agents provide. This has given us a significant piece of mind.

Incentivized

• Significantly reduced the MTTR (Mean Time To Recovery), which in turn has improved the end-user experience tremendously.
• Meets compliance requirements of security policies, audit, regulation, and forensics.
• Helps us to track/manage the resource usage on our cloud instances which has a direct implication on the recurring cost.

Incentivized