Splunk Infrastructure Monitoring vs. Splunk IT Essentials

Splunk Infrastructure Monitoring is well suited for any complicated environment where you have apps and servers across multiple clouds and platforms and products. If you have a data centre where all your apps and servers are in one single network, you could probably get away with older solutions. But for any modern, complex, hybrid-cloud microservices environment, Splunk Infrastructure Monitoring is a must-have.

Incentivized

Splunk IT Essentials scales really well and is quite suitable for large enterprise environments which is where I use it. It can easily handle the classification and ingest of metrics/log data from thousands of devices. It also allows for easy grouping of these devices so that users can search just for Windows devices, or just for Linux machines. Provides a great overview of enterprise health while allowing deeper dives into the device level of data.

Incentivized

• SignalFX handles historical metric aggregation exceptionally well, providing a multifaceted approach to event detection based on anomalies.
• SignalFX's cost is incredibly flexible with their pricing model of DPM (data-point per minute) vs the traditional "per host" model that most monitoring SaaS use.
• SignalFX support is responsive and knowledgeable, very eager to help solve your immediate problems.
• SignalFX integrations is vast and constantly growing, making adoption easy even when multiple different open-source technologies are used in your stack.

Incentivized

• Real time enterprise health monitoring
• Metrics ingest, parsing, and visualization
• Investigating and troubleshooting problems that arise with devices

Incentivized

• Better integration with our clients (native mobile clients SDKs will be great).
• A way to easily tag filters and move them across metrics/formula.
• Alert system to easy false [alarm] and hard to configure.
• Be able to have group more dimensions (and have more values on each).

Incentivized

• Currently need to special request this app on Splunk Cloud
• Not compatible with older versions of Splunk

Incentivized

Good: Stable system with low error rate Easy to use for simple use cases Bad: UI is not very clear for complex usage Mobile view (when logged in from phone) is bad No library for .net

Incentivized

I find that learning the interface can take some time. We need a better show-and-tell on how the Teams pages, Dashboard Groups, Dashboards and charts delay. Advance SignalFlow is sometimes hard to build. Some better samples of advanced SignalFlow would be helpful. For example, Splunk SPL has a vast resource of examples.

Incentivized

They’re not for the same purpose but we’re using NewRelic and Honeycomb for monitoring purposes. NewRelic is used for HTTP client monitoring for system related throughput, error, database and external client monitoring. Honeycomb is used to monitor actual HTTP request/response values. Splunk [Infrastructure Monitoring] is used for real-time application related throughout and error monitoring.

Incentivized

If you've used any Splunk product then you know they have a good reputation for creating smart and user-friendly tools. Splunk IT Essentials is no different and I have had nothing but positive experiences with it. It was a straightforward integration with our enterprise environment. And it can also be leverage, as we did, when moving to ITSI as well.

Incentivized

• Reduced downtime.
• Caused us to get a lot of spam when we redeployed apps and old instances stopped sending metrics. Muting alerts solves this, but people often forget to do it or do it incorrectly.
• Helped us find historical info about instances/apps.

Incentivized

• Huge time saver in troubleshooting issues in the environment
• Alerts allow for much quicker response time to certain events that require attention
• Able to leverage this app when transitioning to ITSI

Incentivized