Splunk Enterprise vs. Microsoft SQL Server

I'm liking the newer products, and I'm looking forward to how they integrate with the overall product when they come together. Just log in and be able to query a large number of systems for similar issues or a unique one. That is a great fit for Splunk Enterprise, looking for a simple case or a simple String or something of that nature across multiple machines. It's a great fit for that to identify issues or particular software, whatever your scenario is, String, to find it across any particular server or group of servers, so that you can update or do a deployment or whatever it is you're looking to do.

Incentivized

Microsoft SQL Server is ideal for highly available SQL workloads by using SQL Server Always On availability groups. Microsoft SQL Server might not be appropriate for solutions which require a very low resource footprint, since it requires significant CPU cores and RAM memory as well as high IOPS, always depending on the usage scenario.

Incentivized

• Real-time + Scheduled alerts - i-e you can set up alerts which are actively monitoring your logs
• Pretty good response time for search results. With our key/value logging, Splunk makes it blazing fast to query the data.
• Dashboards provide insights into historical data
• Love how Splunk indexes all of the data and provides keys to search on

Incentivized

• Easy to configure and use with Visual Studio and Dot Net
• Easy integration with MSBI to perform data analysis
• Data Security
• Easy to understand and use
• Very easy to export database and tables in the form of SQL query or a script

Incentivized

• At times some queries can run slowly if indices are not on a portion of the query you use.
• Setup time initially can be difficult if your logs aren't stored in common locations or in a common way to write the log.
• Ability to ingest logs from different locations without having to change code to put logs in a certain place (pro and con).
• Searches can be a bit more difficult to look through if your log isn't pulled in a manner that is easy to read through splunk.

Incentivized

• The import/export process can be tricky to follow with lots of steps and could be better for importing flat files
• Obtaining help from Microsoft is cumbersome and often other internet sources are better and quicker
• The documentation is not great and again it's generally better to obtain help elsewhere if needed

Incentivized

We are using Splunk extensively in our projects and we have recently upgraded to Splunk version 6.0 which is quite efficient and giving expected results. We keep track of updates and new features Splunk introduces periodically and try to introduce those features in our day to day activities for improvement in our reporting system and other tasks.

I think it is unlikely that sql server has disappointed someone, it is likely that someone will come initially discouraged if the needs and problems that occur are very challenging, but definitely have a SQL oriented system means having a solid base to work and on which maintain the their data securely

Incentivized

Splunk usability could be a little more friendly on correlations and log analysis. not for end users, but for the tech team, sometimes is hard to find good professionals to set up integrations and new dashboards when needed. For the high-level management, it can be overwhelming to read Splunk dashboards.

Incentivized

SQL Server mostly 'just works' or generates error messages to help you sort out the trouble. You can usually count on the product to get the job done and keep an eye on your potential mistakes. Interaction with other Microsoft products makes operating as a Windows user pretty straight forward. Digging through the multitude of dialogs and wizards can be a pain, but the answer is usually there somewhere.

Incentivized

When properly setup and configured, Splunk is extremely reliable.

Incentivized

Its does not have outages.

Incentivized

SSAS data cubes may some time slow down your Excel reports.

Incentivized

Splunk maintains a well resourced support system that has been consistent since we purchased the product. They help out in a timely manner and provide expert level information as needed. We typically open cases online and communicate when possible via e-mail and are able to resolve most issues with that method.

Incentivized

We managed to handle most of our problems by looking into Microsoft's official documentation that has everything explained and almost every function has an example that illustrates in detail how a particular functionality works. Just like PowerShell has the ability to show you an example of how some cmdlet works, that is the case also here, and in my opinion, it is a very good practice and I like it.

Incentivized

It was good

Incentivized

The online course was simple clear and described the main capabilities of the solution. There is also an initial module that can be done for free so anyone can familiarize themselves with the functionality of this solution. On the other hand, however, there could be more free online courses. Maybe even with a certificate, this would broaden the group of people who are familiar with the platform while increasing familiarity with the solution itself.

very hands on and detailed training

Incentivized

Smooth without too many major issues.

Incentivized

Other than SQL taking quite a bit of time to actually install there are no problems with installation. Even on hardware that has good performance SQL can still take close to an hour to install a typical server with management and reporting services.

Incentivized

A lot of products have natively inside their own dashboards and or their own logging repositories. And each one is difficult to learn or they're too complex or they're not verbose in the sense that they're not easy to mine the data that you're looking for. So that could be anything from the native logging that you find in other Cisco products. It's easier to use Splunk to draw the data that you're looking for as opposed to going to the individual's products themselves to get the logs that you're looking for.

Incentivized

Microsoft SQL is slower than MySQL and Access but far more feature-rich and reliable. Access is almost obsolete nowadays, so not too many people are considering it, but unless budget or an open-source ethos is a factor, Microsoft SQL is superior in every way. Many commonly used tools, like Crystal Reports, support it.

Incentivized

Splunk can scale in to the petabyte per day range which of course is awesome

SQL server does handle growing demands of a mid sized company.

Incentivized

• Ease of collecting IP for blacklisting.
• Generation of metrics against compromised accounts based on location and time of the year. It helped in launching phishing education campaign before hitting the most vulnerable month of the year.
• It helped in neutralizing vulnerable word-press sites across the campus, leading to the decrease of account compromise.

Incentivized

• Increased accuracy - We went from multiple users having different versions of an Excel spreadsheet to a single source of truth for our reporting.
• Increased Efficiency - We can now generate reports at any time from a single source rather than multiple users spending their time collating data and generating reports.
• Improved Security - Enterprise level security on a dedicated server rather than financial files on multiple laptop hard drives.

Incentivized