TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Splunk Cloud Platform

    Score8 out of 10
    N/ASplunk Cloud Platform is a data platform service thats help users search, analyze, visualize and act on data. The service can go live in as little as two days, and with an IT backend managed by Splunk experts.N/A

    Trellix ePolicy Orchestrator

    Score7 out of 10
    N/ATrellix ePolicy Orchestrator (formerly McAfee ePolicy Orchestrator) software centralizes and streamlines management of endpoint, network, data security, and compliance solutions.N/A
    Pricing
    Splunk Cloud PlatformTrellix ePolicy Orchestrator
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Splunk Cloud PlatformTrellix ePolicy Orchestrator
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Splunk Cloud PlatformTrellix ePolicy Orchestrator
    Considered Both Products
    Cisco
    No answer on this topic
    Trellix (Musarubra US LLC)
    No answer on this topic
    Key User Insights
    Would buy again
    100%
    Would buy again
    15 Answers
    100%
    Would buy again
    8 Answers
    Delivers good value for the price
    92%
    Delivers good value for the price
    11 Answers
    100%
    Delivers good value for the price
    6 Answers
    Happy with the feature set
    100%
    Happy with the feature set
    15 Answers
    100%
    Happy with the feature set
    8 Answers
    Lived up to sales and marketing promises
    91%
    Lived up to sales and marketing promises
    10 Answers
    100%
    Lived up to sales and marketing promises
    5 Answers
    Implementation went as expected
    100%
    Implementation went as expected
    13 Answers
    75%
    Implementation went as expected
    6 Answers
    Features
    Splunk Cloud PlatformTrellix ePolicy Orchestrator
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Splunk Cloud Platform and Trellix ePolicy Orchestrator
    Feature
    Splunk Cloud Platform
    8.2
    20 Ratings
    3% above category average
    Trellix ePolicy Orchestrator
    -
    Ratings
    Centralized event and log data collection9.019 Ratings00 Ratings
    Correlation8.419 Ratings00 Ratings
    Event and log normalization/management9.220 Ratings00 Ratings
    Deployment flexibility7.220 Ratings00 Ratings
    Integration with Identity and Access Management Tools7.718 Ratings00 Ratings
    Custom dashboards and workspaces8.920 Ratings00 Ratings
    Host and network-based intrusion detection8.217 Ratings00 Ratings
    Data integration/API management7.310 Ratings00 Ratings
    Behavioral analytics and baselining7.28 Ratings00 Ratings
    Rules-based and algorithmic detection thresholds8.210 Ratings00 Ratings
    Response orchestration and automation7.48 Ratings00 Ratings
    Reporting and compliance management8.810 Ratings00 Ratings
    Incident indexing/searching8.711 Ratings00 Ratings
    Threat Intelligence
    Comparison of Threat Intelligence features of Splunk Cloud Platform and Trellix ePolicy Orchestrator
    Feature
    Splunk Cloud Platform
    -
    Ratings
    Trellix ePolicy Orchestrator
    6.6
    1 Ratings
    20% below category average
    Network Analytics00 Ratings5.01 Ratings
    Threat Recognition00 Ratings6.01 Ratings
    Vulnerability Classification00 Ratings7.01 Ratings
    Automated Alerts and Reporting00 Ratings7.01 Ratings
    Threat Analysis00 Ratings8.01 Ratings
    Threat Intelligence Reporting00 Ratings7.01 Ratings
    Automated Threat Identification00 Ratings6.01 Ratings
    Vulnerability Management Tools
    Comparison of Vulnerability Management Tools features of Splunk Cloud Platform and Trellix ePolicy Orchestrator
    Feature
    Splunk Cloud Platform
    -
    Ratings
    Trellix ePolicy Orchestrator
    6.0
    1 Ratings
    32% below category average
    IT Asset Realization00 Ratings7.01 Ratings
    Authentication00 Ratings5.01 Ratings
    Configuration Monitoring00 Ratings6.01 Ratings
    Web Scanning00 Ratings6.01 Ratings
    Vulnerability Intelligence00 Ratings6.01 Ratings
    Best Alternatives
    Splunk Cloud PlatformTrellix ePolicy Orchestrator
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    IBM Security QRadar SIEM
    Score8.9 out of 10
    Tenable Nessus
    Score8.8 out of 10
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    Tenable Vulnerability Management
    Score8.9 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Splunk Cloud PlatformTrellix ePolicy Orchestrator
    Likelihood to Recommend
    8.8
    (21 ratings)
    7.0
    (14 ratings)
    Likelihood to Renew
    9.1
    (1 ratings)
    -
    (0 ratings)
    Usability
    8.4
    (7 ratings)
    -
    (0 ratings)
    Support Rating
    7.2
    (4 ratings)
    8.2
    (4 ratings)
    User Testimonials
    Splunk Cloud PlatformTrellix ePolicy Orchestrator
    Likelihood to Recommend
    Cisco
    Splunk is excellent when all your data is in one location. Its ability to correlate all that data is intuitive (once the hurdle of learning the query language is overcome). It is also easy to standardize the presentation of information to the company. When data is siloed/standalone, other systems can be cheaper and faster to implement.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    [McAfee ePolicy Orchestrator] seems to be better suited to large enterprise applications... I don't feel it really suits the or self-managed SMB market. The general joe is not going to understand how to wield this product to it's full potential. For those of us managing large networks, this is a very ideal product for managing multiple sites and users.
    Incentivized
    Read full review
    Pros
    Cisco
    • This SIEM consolidates multiple data points and offers several features and benefits, creating custom dashboards and managing alert workflows.
    • Splunk Cloud provides a simple way to have a central monitoring and security solution. Though it does not have a huge learning curve, you should spend some time learning the basics.
    • Splunk Cloud enables me to create and schedule statistical reports on network use for Management.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • Static malware scans for known bad processes and files works well and can be schedules on endpoints easily
    • Preventing users from accessing USB drives and other peripherals is easily configured. We can also allow users to access to USB drives with user codes for the times they need it for business reasons.
    • ePO provides access into our MSME software so that we're not managing many different products from different locations.
    • In recent years the console has gotten much easier to navigate even though there is a ton of information to be accessed.
    Incentivized
    Read full review
    Cons
    Cisco
    • The SPL programming language that the queries are built in is not very intuitive.
    • There should be a better repository of pre-built queries for what I would think of as common Active Directory usage monitoring.
    • I would like to see more free training/familiarization information made available.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • It has a slow mechanism when adding custom threat feeds. For example, if McAfee didn't have a signature or detection about a new virus and we try to add it to our console it is like a really big process in adding that to our available signatures.
    • Whenever a scan is performed, the system CPU utilization goes up 100 percent.
    • Installation fails due to difference in timestamp when we try to shuffle between packages.
    Read full review
    Likelihood to Renew
    Cisco
    Ease of use and have all the features we need
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Usability
    Cisco
    Splunk AI Assistant for SPL is good tool, as I said, it is really useful for educational purpose, taking in its hands small and simple tasks (ex:small query dashboard,...), but it's not a ten because the contextual memory for complex issues/dashboarding/reports etc can be limited, and can sometime suggets none optimized query which are not always checked by teammates and can cause issue on the long term.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Support Rating
    Cisco
    Splunk Cloud support is sorely lacking unfortunately. The portal where you submit tickets is not very good and is lacking polish. Tickets are left for days without any updates and when chased it is only sometimes you get a reply back. I get the feeling the support team are very understaffed and have far too much going on. From what I know, Splunk is aware of this and seem to be trying to remedy it.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    McAfee support is definitely GREAT! It is one of the best technical support on a business level. GOLD support is recommended to business. Their website is easy and quick to create a ticket. Their technical team usually responds right away with an email or call. Via call and web they provide a full and complete support until the issue is resolved. The best, most of the time they explain in detail what is the issue, the reason and how to resolve it.
    Incentivized
    Read full review
    Alternatives Considered
    Cisco
    Vs elastic: - SPL's statistical functions superior to KQL for complex correlations - Better enterprise support, less operational overhead - Splunk Cloud Platform's detection engineering more mature vs Sentinel: - SPL more powerful than KQL for custom analytics - Better cross-platform visibility (non-Azure environments) vs Datadog - SPL enables deeper forensic Investigations - Superior compliance/audit capabilities
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    I have used Symantec Endpoint Encryption before. Symantec and EPO are both good in their own ways. EPO allows integration of other McAfee products. I have been using ePolicy Orchestrator for years. I have a lot of experience with the product. That is why I like it.
    Incentivized
    Read full review
    Return on Investment
    Cisco
    • End-end visibility across your departmental silos
    • Strengthen the overall global monitoring posture
    • Move from Reactive to Proactive Monitoring
    • Highly secure environment at your finger-tips
    • Takes you away from managing infrastructure/administration, allows saving time & money. Reduce the overall TCO (Total Cost of Ownership)
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • Peace of mind that your environment is safe and secure.
    • Keep your network environment up and running.
    • Additional resources (consulting or training) may be required if not familiar with the product.
    • Very complex to setup and configure ( training may be required).
    • Once configured, it will take care of almost 80% of your tasks.
    Incentivized
    Read full review
    ScreenShots