ServiceNow IT Operations Management vs. Splunk Cloud

We have taken advantage of the single platform for different IT disciplines over the past few years and now we are doing more and more with the integrations. Our teams are looking at the same information which stops the blame game a lot. Their newest AIOps has been a very nice surprise as we've tried another tool for about 2 years and it required us to hire outside consultants to try and build what we needed. So far, ServiceNow found a lot of things we didn't know to look for. It's not perfect in fixing everything, but really has provided a lot of visibility and troubleshooting.

Splunk is excellent when all your data is in one location. Its ability to correlate all that data is intuitive (once the hurdle of learning the query language is overcome). It is also easy to standardize the presentation of information to the company. When data is siloed/standalone, other systems can be cheaper and faster to implement.

Incentivized

• The centralized dashboard allows us to keep track of production incidents as they come in, and allow us to view and sort them based on severity, making sure it's tracked
• The read/edit access and role granting process is straightforward, meaning that only the right people can change /update the statuses of incidents without unintended consequences
• With AI driven classification, it's easy to track outage impacts

Incentivized

• This SIEM consolidates multiple data points and offers several features and benefits, creating custom dashboards and managing alert workflows.
• Splunk Cloud provides a simple way to have a central monitoring and security solution. Though it does not have a huge learning curve, you should spend some time learning the basics.
• Splunk Cloud enables me to create and schedule statistical reports on network use for Management.

Incentivized

• Scan network is limited to their discovery tool, which is costly
• Integration to jamf and ubunto tools
• Agents TCO
• integration to password management tools which are critical for successful scans

Incentivized

• The SPL programming language that the queries are built in is not very intuitive.
• There should be a better repository of pre-built queries for what I would think of as common Active Directory usage monitoring.
• I would like to see more free training/familiarization information made available.

Incentivized

Overall, it is very usable. I would like if recent searches were saved for longer because I always have to refer to my notes when I'm looking for something specific and it's been a few weeks. But that's a small issue, and the actual search and browsing interface is easy to use and powerful.

Incentivized

Splunk Cloud support is sorely lacking unfortunately. The portal where you submit tickets is not very good and is lacking polish. Tickets are left for days without any updates and when chased it is only sometimes you get a reply back. I get the feeling the support team are very understaffed and have far too much going on. From what I know, Splunk is aware of this and seem to be trying to remedy it.

Incentivized

BMC was our legacy system before deploying ServiceNow. It's time had passed for us as it couldn't really keep up with our move to cloud and the number of services we were using. The cost kept getting higher, especially with all of the customization we had to do. Over the years, just got unwieldy. We still use Splunk for raw data and log analysis, but we upgraded to ServiceNow event management and the Loom system log analytics. We had Loom before ServiceNow bought them, but it's nice it's all on one platform for us. Splunk at times had so much info, we didn't know where to start, but ServiceNow gives us a great starting point.

Splunk Cloud blows Sumo Logic out of the water. The experience is night and day. We went from several highly stressed IT security professionals who were unsure if the data they were getting was valuable, to very happy IT security professionals who can now be more proactive and get all the information they need.

Incentivized

• With the regular use of ServiceNow IT Operations Management platform, our incident resolution time has gone down by over 90% over the past year
• Our access and role granting process has been streamlined leading to increased developer hours by around ~90 PM
• With the enablement of AIOps driven impact prediction, we expect an improvement of user communication time by over 90%

Incentivized

• End-end visibility across your departmental silos
• Strengthen the overall global monitoring posture
• Move from Reactive to Proactive Monitoring
• Highly secure environment at your finger-tips
• Takes you away from managing infrastructure/administration, allows saving time & money. Reduce the overall TCO (Total Cost of Ownership)

Incentivized