TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Splunk Cloud Platform

    Score8 out of 10
    N/ASplunk Cloud Platform is a data platform service thats help users search, analyze, visualize and act on data. The service can go live in as little as two days, and with an IT backend managed by Splunk experts.N/A

    Splunk SOAR

    Score9.1 out of 10
    N/ASplunk now offers a security orchestration, automation, and response (SOAR) platform via its acquisition of Phantom. Splunk Security Orchestration and Automation (Splunk SOAR) provides playbook automation and is available as a standalone solution.N/A
    Pricing
    Splunk Cloud PlatformSplunk SOAR
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Splunk Cloud PlatformSplunk SOAR
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Splunk Cloud PlatformSplunk SOAR
    Considered Both Products
    Cisco
    Chose Splunk Cloud Platform
    Vs elastic:
    - SPL's statistical functions superior to KQL for complex correlations
    - Better enterprise support, less operational overhead
    Incentivized
    Chose Splunk Cloud Platform
    Splunk currently has the most integrations with log sources and tools. Easiest platform to fully onboard new sources, parse and search.
    Incentivized
    Cisco
    No answer on this topic
    Key User Insights
    Would buy again
    100%
    Would buy again
    15 Answers
    100%
    Would buy again
    41 Answers
    Delivers good value for the price
    92%
    Delivers good value for the price
    11 Answers
    100%
    Delivers good value for the price
    34 Answers
    Happy with the feature set
    100%
    Happy with the feature set
    15 Answers
    100%
    Happy with the feature set
    41 Answers
    Lived up to sales and marketing promises
    91%
    Lived up to sales and marketing promises
    10 Answers
    90%
    Lived up to sales and marketing promises
    26 Answers
    Implementation went as expected
    100%
    Implementation went as expected
    13 Answers
    97%
    Implementation went as expected
    37 Answers
    Features
    Splunk Cloud PlatformSplunk SOAR
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Splunk Cloud Platform and Splunk SOAR
    Feature
    Splunk Cloud Platform
    8.2
    20 Ratings
    3% above category average
    Splunk SOAR
    -
    Ratings
    Centralized event and log data collection9.019 Ratings00 Ratings
    Correlation8.419 Ratings00 Ratings
    Event and log normalization/management9.220 Ratings00 Ratings
    Deployment flexibility7.220 Ratings00 Ratings
    Integration with Identity and Access Management Tools7.718 Ratings00 Ratings
    Custom dashboards and workspaces8.920 Ratings00 Ratings
    Host and network-based intrusion detection8.117 Ratings00 Ratings
    Data integration/API management7.310 Ratings00 Ratings
    Behavioral analytics and baselining7.28 Ratings00 Ratings
    Rules-based and algorithmic detection thresholds8.210 Ratings00 Ratings
    Response orchestration and automation7.48 Ratings00 Ratings
    Reporting and compliance management8.810 Ratings00 Ratings
    Incident indexing/searching8.711 Ratings00 Ratings
    Best Alternatives
    Splunk Cloud PlatformSplunk SOAR
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    IBM Security QRadar SIEM
    Score8.9 out of 10
    No answers on this topic
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    Palo Alto Networks Cortex XSOAR
    Score1.1 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Splunk Cloud PlatformSplunk SOAR
    Likelihood to Recommend
    8.8
    (21 ratings)
    8.1
    (40 ratings)
    Likelihood to Renew
    9.1
    (1 ratings)
    7.5
    (3 ratings)
    Usability
    8.4
    (7 ratings)
    8.2
    (1 ratings)
    Performance
    -
    (0 ratings)
    8.2
    (40 ratings)
    Support Rating
    7.2
    (4 ratings)
    8.2
    (1 ratings)
    Online Training
    -
    (0 ratings)
    8.2
    (1 ratings)
    Implementation Rating
    -
    (0 ratings)
    8.2
    (1 ratings)
    Configurability
    -
    (0 ratings)
    8.2
    (1 ratings)
    Product Scalability
    -
    (0 ratings)
    8.2
    (1 ratings)
    User Testimonials
    Splunk Cloud PlatformSplunk SOAR
    Likelihood to Recommend
    Cisco
    Splunk is excellent when all your data is in one location. Its ability to correlate all that data is intuitive (once the hurdle of learning the query language is overcome). It is also easy to standardize the presentation of information to the company. When data is siloed/standalone, other systems can be cheaper and faster to implement.
    Incentivized
    Read full review
    Cisco
    Our company has very complex and dynamic security operations because of the large number of security tools and systems that we need to manage and coordinate. Moreover, it helps us to meet many regulatory and compliance requirements because it helps us to automate and document our security operations. We also use it to streamline our security operations and improve our response to potential threats.
    Incentivized
    Read full review
    Pros
    Cisco
    • This SIEM consolidates multiple data points and offers several features and benefits, creating custom dashboards and managing alert workflows.
    • Splunk Cloud provides a simple way to have a central monitoring and security solution. Though it does not have a huge learning curve, you should spend some time learning the basics.
    • Splunk Cloud enables me to create and schedule statistical reports on network use for Management.
    Incentivized
    Read full review
    Cisco
    • Its security orchestration and integration capability that supports multiple tools.
    • Easy coding that automates our security actions.
    • Enables us to easily collaborate and respond to security issues faster.
    • Splunk SOAR is a flexible product that is easy to deploy.
    • Efficient tracking and monitoring capability.
    • Excellent real-time reporting functionality.
    Incentivized
    Read full review
    Cons
    Cisco
    • The SPL programming language that the queries are built in is not very intuitive.
    • There should be a better repository of pre-built queries for what I would think of as common Active Directory usage monitoring.
    • I would like to see more free training/familiarization information made available.
    Incentivized
    Read full review
    Cisco
    • A lack of instruction It can be difficult to contact the support staff. Limited experience from current users.
    • It takes some effort to set up and learn new technology at first. More assistance is required from the support staff. The product's price needs to go down.
    • Cost of the larger version.
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    Ease of use and have all the features we need
    Incentivized
    Read full review
    Cisco
    As we already have a lot of clients being catered with Splunk SOAR and because Splunk SOAR is robust and efficient, we are already using it, and we have understood the product to a certain extent, I feel we are personally more enticed to use and scale it to a lot of business.
    Incentivized
    Read full review
    Usability
    Cisco
    Splunk AI Assistant for SPL is good tool, as I said, it is really useful for educational purpose, taking in its hands small and simple tasks (ex:small query dashboard,...), but it's not a ten because the contextual memory for complex issues/dashboarding/reports etc can be limited, and can sometime suggets none optimized query which are not always checked by teammates and can cause issue on the long term.
    Incentivized
    Read full review
    Cisco
    Building playbooks through the visual editor is fine for basic tasks, but once you start chaining complex logic or integrating 3rd party APIs you hit a wall that requires deep scripting knowledge.
    Incentivized
    Read full review
    Performance
    Cisco
    No answers on this topic
    Cisco
    We are able to automate almost every one of our use cases, even our threat-hunting, and threat intel procedures. We have 20+ playbooks and cover almost everything, even searching logs into Splunk, looking into TIP and external systems, enrichment, and collecting evidence for analysts; it can perform concurrent playbooks running.
    Incentivized
    Read full review
    Support Rating
    Cisco
    Splunk Cloud support is sorely lacking unfortunately. The portal where you submit tickets is not very good and is lacking polish. Tickets are left for days without any updates and when chased it is only sometimes you get a reply back. I get the feeling the support team are very understaffed and have far too much going on. From what I know, Splunk is aware of this and seem to be trying to remedy it.
    Incentivized
    Read full review
    Cisco
    Splunk Support is always great! In addition the Community is very efficient and active.
    Incentivized
    Read full review
    In-Person Training
    Cisco
    No answers on this topic
    Cisco
    I never followed an in-person training, I gave my evaluation based on the online training
    Incentivized
    Read full review
    Online Training
    Cisco
    No answers on this topic
    Cisco
    I followed training for Phantom admins and it opened a world for me
    Incentivized
    Read full review
    Implementation Rating
    Cisco
    No answers on this topic
    Cisco
    I already said that the main key insight is the knowledge of Phantom, so a detailed training for all the people involeved.
    Incentivized
    Read full review
    Alternatives Considered
    Cisco
    Vs elastic: - SPL's statistical functions superior to KQL for complex correlations - Better enterprise support, less operational overhead - Splunk Cloud Platform's detection engineering more mature vs Sentinel: - SPL more powerful than KQL for custom analytics - Better cross-platform visibility (non-Azure environments) vs Datadog - SPL enables deeper forensic Investigations - Superior compliance/audit capabilities
    Incentivized
    Read full review
    Cisco
    Splunk Phantom integrates well with Splunk ES and has many integrations. One thing that I liked about XSOAR as compared to Phantom is that it has an "app-store" where you can download not only app integrations (similar to Phantom) but Playbooks and dashboards as well.
    Incentivized
    Read full review
    Scalability
    Cisco
    No answers on this topic
    Cisco
    me and the customers I encountered found it flexible and scalable
    Incentivized
    Read full review
    Return on Investment
    Cisco
    • End-end visibility across your departmental silos
    • Strengthen the overall global monitoring posture
    • Move from Reactive to Proactive Monitoring
    • Highly secure environment at your finger-tips
    • Takes you away from managing infrastructure/administration, allows saving time & money. Reduce the overall TCO (Total Cost of Ownership)
    Incentivized
    Read full review
    Cisco
    • The playbooks are valuable. They are the core component. Being able to implement and build a code process to work through and scale out what we want to do is valuable
    • Before its use, analyzing each email would take at least 15 to 20 minutes, with some complex cases taking up to 30 minutes...With the automation provided by Splunk Phantom, we could significantly reduce the amount of time and human effort required to complete this task
    Incentivized
    Read full review
    ScreenShots