TrustRadius: an HG Insights company

Splunk Enterprise vs. Splunk IT Service Intelligence (ITSI)

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Splunk Enterprise

    Score8.6 out of 10
    N/ASplunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.N/A

    Splunk IT Service Intelligence (ITSI)

    Score10 out of 10
    N/ASplunk supports IT operations analytics with the Splunk IT Service Intelligence premium offering, a software application available to subscribers to Splunk Cloud or Splunk Enterprise log analytics and SIEM platforms.N/A
    Pricing
    Splunk EnterpriseSplunk IT Service Intelligence (ITSI)
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Splunk EnterpriseSplunk IT Service Intelligence (ITSI)
    Free Trial
    YesNo
    Free/Freemium Version
    YesNo
    Premium Consulting/Integration Services
    NoYes
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details
    More Pricing Information
    Community Pulse
    Splunk EnterpriseSplunk IT Service Intelligence (ITSI)
    Considered Both Products
    Cisco
    No answer on this topic
    Cisco
    Chose Splunk IT Service Intelligence (ITSI)
    I have not used any other product like Splunk IT Service Intelligence. The Splunk IT Service Intelligence can be applied across all the information you have in your Splunk environment. You can correlate the events with Splunk IT Service Intelligence and use it as an APM tool or …
    Incentivized
    Chose Splunk IT Service Intelligence (ITSI)
    WE have not used or looked at alternatives to ITSI.
    Incentivized
    Chose Splunk IT Service Intelligence (ITSI)
    Splunk is better for service management and capacity planning
    Incentivized
    Chose Splunk IT Service Intelligence (ITSI)
    I don't know of any other product that does what Splunk IT Service Intelligence does. Some vendors have made that claim but they don't stack up.
    Incentivized
    Chose Splunk IT Service Intelligence (ITSI)
    Na
    Incentivized
    Chose Splunk IT Service Intelligence (ITSI)
    Splunk ITSI provides a holistic methodology for collecting and utilizing telemetry data that most other "basic" monitoring technologies and products in this space do not. By allowing us to model our ecosystem's components and services, Splunk ITSI observes and reports at a …
    Incentivized
    Key User Insights
    Would buy again
    97%
    Would buy again
    59 Answers
    100%
    Would buy again
    24 Answers
    Delivers good value for the price
    94%
    Delivers good value for the price
    49 Answers
    100%
    Delivers good value for the price
    19 Answers
    Happy with the feature set
    97%
    Happy with the feature set
    59 Answers
    100%
    Happy with the feature set
    24 Answers
    Lived up to sales and marketing promises
    93%
    Lived up to sales and marketing promises
    43 Answers
    83%
    Lived up to sales and marketing promises
    15 Answers
    Implementation went as expected
    96%
    Implementation went as expected
    50 Answers
    100%
    Implementation went as expected
    20 Answers
    Features
    Splunk EnterpriseSplunk IT Service Intelligence (ITSI)
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Splunk Enterprise and Splunk IT Service Intelligence (ITSI)
    Feature
    Splunk Enterprise
    8.2
    91 Ratings
    3% above category average
    Splunk IT Service Intelligence (ITSI)
    -
    Ratings
    Centralized event and log data collection9.085 Ratings00 Ratings
    Correlation8.487 Ratings00 Ratings
    Event and log normalization/management8.488 Ratings00 Ratings
    Deployment flexibility8.081 Ratings00 Ratings
    Integration with Identity and Access Management Tools8.282 Ratings00 Ratings
    Custom dashboards and workspaces8.887 Ratings00 Ratings
    Host and network-based intrusion detection7.865 Ratings00 Ratings
    Data integration/API management8.334 Ratings00 Ratings
    Behavioral analytics and baselining7.732 Ratings00 Ratings
    Rules-based and algorithmic detection thresholds7.933 Ratings00 Ratings
    Response orchestration and automation7.529 Ratings00 Ratings
    Reporting and compliance management8.634 Ratings00 Ratings
    Incident indexing/searching8.737 Ratings00 Ratings
    Best Alternatives
    Splunk EnterpriseSplunk IT Service Intelligence (ITSI)
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    IBM Security QRadar SIEM
    Score8.9 out of 10
    No answers on this topic
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    DX Spectrum
    Score7 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Splunk EnterpriseSplunk IT Service Intelligence (ITSI)
    Likelihood to Recommend
    8.7
    (112 ratings)
    10.0
    (28 ratings)
    Likelihood to Renew
    8.5
    (25 ratings)
    8.2
    (2 ratings)
    Usability
    8.5
    (45 ratings)
    10.0
    (1 ratings)
    Availability
    10.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    8.0
    (19 ratings)
    8.9
    (2 ratings)
    Online Training
    8.0
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    7.0
    (3 ratings)
    -
    (0 ratings)
    Product Scalability
    9.1
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Splunk EnterpriseSplunk IT Service Intelligence (ITSI)
    Likelihood to Recommend
    Cisco
    I'm liking the newer products, and I'm looking forward to how they integrate with the overall product when they come together. Just log in and be able to query a large number of systems for similar issues or a unique one. That is a great fit for Splunk Enterprise, looking for a simple case or a simple String or something of that nature across multiple machines. It's a great fit for that to identify issues or particular software, whatever your scenario is, String, to find it across any particular server or group of servers, so that you can update or do a deployment or whatever it is you're looking to do.
    Incentivized
    Read full review
    Cisco
    Splunk ITSI is a great tool (and toolbox) for combining together numerous and varied monitoring regimes to bring more holistic analysis and reduce alert fatigue. By leveraging the Splunk ITSI service and KPI modeling regime, ecosystem telemetry can be turned into a more reliable, clearer, high-level perspective on the current state of your components and services.
    Read full review
    Pros
    Cisco
    • It is very useful in creating custom rules for analyzing system logs and display relevant information. The query language is very easy to learn.
    • We can create custom UI to visualize the output of our data. The interface is very flexible. It also allows the sharing of rules among users.
    • There is an open online community to help others. Stackoverflow also has a splunk community. These resources make it more convenient to learn.
    Incentivized
    Read full review
    Cisco
    • Monitor hundreds of IT services by continuously tracking thousands of KPIs in a scalable way.
    • Quickly identify problem areas by a combination of default visualizations and ability to create custom dashboards.
    • Extremely configurable to effectively monitor nearly any KPI imaginable from Splunk.
    Incentivized
    Read full review
    Cons
    Cisco
    • Splunk light limits number of users to 5. Wish there was a flexible license, where one could add more users.
    • Splunk light does not let you add > few realtime alerts. Wish there was a flexible license, where one could add as many realtime alerts as wanted.
    • Better insight into daily ingestion values
    Incentivized
    Read full review
    Cisco
    • ITSI really needs a robust splunk log ingestion infrastructure at its core
    • ITSI requires a great engineering team to build out the automated discovery and topology
    • Unless you use an API to build the topology, the view can quickly become static
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    We are using Splunk extensively in our projects and we have recently upgraded to Splunk version 6.0 which is quite efficient and giving expected results. We keep track of updates and new features Splunk introduces periodically and try to introduce those features in our day to day activities for improvement in our reporting system and other tasks.
    Read full review
    Cisco
    We have replaced our monitoring platform with Splunk & ITSI, and with the success, it's seen at our organization thus far we would be hard-pressed to pivot to another tool. Frankly, our business partners and application teams love Splunk & ITSI.
    Read full review
    Usability
    Cisco
    You can literally throw in a single word into Splunk and it will pull back all instances of that word across all of your logs for the time span you select (provided you have permission to see that data). We have several users who have taken a few of the free courses from Splunk that are able to pull data out of it everyday with little help at all.
    Incentivized
    Read full review
    Cisco
    Splunk IT Service Intelligence (ITSI) is a platform with extended functionality and provides various functionalities which can be utilized to improve the efficiency and accuracy in analyzing the data and detecting the attacks.
    Read full review
    Reliability and Availability
    Cisco
    When properly setup and configured, Splunk is extremely reliable.
    Incentivized
    Read full review
    Cisco
    No answers on this topic
    Support Rating
    Cisco
    Splunk maintains a well resourced support system that has been consistent since we purchased the product. They help out in a timely manner and provide expert level information as needed. We typically open cases online and communicate when possible via e-mail and are able to resolve most issues with that method.
    Incentivized
    Read full review
    Cisco
    During POC, pre-planning, and implementation, we have had interactions with numerous folks at Splunk. Everyone from sales & engineering to markets analysts to specific IT component SMEs, and a small professional services engagement to get started. They have all been exceptionally helpful and go above and beyond the call of duty. They actively reach out to ensure success is being realized and find ways to help proactively, instead of having to simply open support cases with the vendor.
    Read full review
    Online Training
    Cisco
    The online course was simple clear and described the main capabilities of the solution. There is also an initial module that can be done for free so anyone can familiarize themselves with the functionality of this solution. On the other hand, however, there could be more free online courses. Maybe even with a certificate, this would broaden the group of people who are familiar with the platform while increasing familiarity with the solution itself.
    Read full review
    Cisco
    No answers on this topic
    Implementation Rating
    Cisco
    Smooth without too many major issues.
    Incentivized
    Read full review
    Cisco
    No answers on this topic
    Alternatives Considered
    Cisco
    A lot of products have natively inside their own dashboards and or their own logging repositories. And each one is difficult to learn or they're too complex or they're not verbose in the sense that they're not easy to mine the data that you're looking for. So that could be anything from the native logging that you find in other Cisco products. It's easier to use Splunk to draw the data that you're looking for as opposed to going to the individual's products themselves to get the logs that you're looking for.
    Incentivized
    Read full review
    Cisco
    Splunk has raised itself as a platform not just as a tool unlike other products in the market. If I talk about Moogsoft it also has similar capabilities but Splunk ITSI has more visibility and its GUI is making a different impact on the users. ServiceNow and Splunk are equally capable products however Splunk seems to have more tech-savvy people tools than ServiceNow.
    Incentivized
    Read full review
    Scalability
    Cisco
    Splunk can scale in to the petabyte per day range which of course is awesome
    Read full review
    Cisco
    No answers on this topic
    Return on Investment
    Cisco
    • Splunk has allowed developers to diagnose production issues when access of control was taken away from them to be allowed to view items in production environments and I believe that is invaluable.
    • At times some developers weren't super happy about using it, but it was more of the fact that they were used to having production access and not creating their splunk queries to get information.
    • Going one place to view logs was very beneficial to have.
    Incentivized
    Read full review
    Cisco
    • Splunk ITSI has reduced the number of alerts exposed to our Network Operations Center by 100x while increasing the context around outages.
    • Splunk ITSI has increased the accuracy of our incident detection by leveraging the Event Analytics system to weigh the behavior of the many characteristics of each component together instead of independently.
    • Splunk ITSI has reduced our incident MTTR (mean time to restore) by detecting issues faster, presenting them more clearly, and surfacing the salient details about the underlying issue.
    Read full review
    ScreenShots