Splunk Cloud

Splunk Cloud

Splunk Cloud


Recent Reviews

Popular Features

View all 13 features

Event and log normalization/management (21)


Custom dashboards and workspaces (21)


Correlation (12)


Centralized event and log data collection (12)


Reviewer Pros & Cons

View all pros & cons

Video Reviews

Leaving a video review helps other professionals like you evaluate products. Be the first one in your network to record a review of Splunk Cloud, and make your voice heard!


View all pricing

What is Splunk Cloud?

A data platform service thats help users search, analyze, visualize and act on data. The service can go live in as little as two days, and with an IT backend managed by Splunk experts, users can focus on acting on data. Search any kind of data in real-time to detect and prevent issues before they…

Entry-level set up fee?

  • No setup fee


  • Free Trial
  • Free/Freemium Version
  • Premium Consulting / Integration Services

Would you like us to let the vendor know that you want pricing?

6 people want pricing too

Alternatives Pricing

What is Microsoft Sentinel?

Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. Put the cloud and large-scale intelligence from decades of Microsoft security experience to work. Make threat detection and response smarter and faster with artificial intelligence (AI). Eliminate…

What is SolarWinds Kiwi Syslog Server?

Solarwinds® Kiwi Syslog® Server is a syslog management tool for network and systems engineers. It receives syslog messages and SNMP traps from network devices (routers, switches, firewalls, etc.), and Linux®/Unix® hosts. Users can filter and view these messages based on time, hostname, severity,…

Features Scorecard

Security Information and Event Management (SIEM)


Product Details

What is Splunk Cloud?

A data platform service thats help users search, analyze, visualize and act on data. The service can go live in as little as two days, and with an IT backend managed by Splunk experts, users can focus on acting on data. Search any kind of data in real-time to detect and prevent issues before they happen with access to streaming and machine learning capabilities. Search any kind of data in real-time to detect and prevent issues before they happen with access to the latest streaming and machine learning capabilities.

Splunk Cloud Competitors

Splunk Cloud Technical Details

Operating SystemsUnspecified
Mobile ApplicationNo


View all alternatives

Frequently Asked Questions

What is Splunk Cloud's best feature?

Reviewers rate Event and log normalization/management and Incident indexing/searching highest, with a score of 9.7.

Who uses Splunk Cloud?

The most common users of Splunk Cloud are from Enterprises (1,001+ employees) and the Information Technology & Services industry.

Reviews and Ratings




(1-12 of 12)
Companies can't remove reviews or game the system. Here's why
Fraser Clark | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User
Review Source
Splunk Cloud is used by the IT department for the majority of the devices that can produce logs. It was initially purchased as a syslog aggregate but has evolved into much more than that now. It addresses the question of log retention and security investigation. It will eventually be expanded to be used across the wider business.
  • Searching through logs/data
  • Data ingestion
  • Documentation for add-ons and apps
  • Support for Splunk Cloud
Splunk Cloud is suited for organisations that have a lot of data from many different data sources and you would like them to be in one tool. It's excellent for splitting data and searching through the different indexes of data.
If you only have one data source (syslog from network devices for example) I would say it is less appropriate and would be overkill.
Splunk Cloud support is sorely lacking unfortunately. The portal where you submit tickets is not very good and is lacking polish. Tickets are left for days without any updates and when chased it is only sometimes you get a reply back. I get the feeling the support team are very understaffed and have far too much going on. From what I know, Splunk is aware of this and seem to be trying to remedy it.
David Hillier | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User
Review Source
Splunk Cloud is one of the advanced and reliable platforms. It has efficient customer support which is playing an important role in giving great services. It is being used by me for the last year in our organization. It has helped me a lot in security information and event management. It provides me the real-time analysis. Using it, I create easy-to-follow dashboards that I can easily share with your users. The usability of the product is another amazing reason why I am using the product. It is very fast and reliable to use. It is very easy to create customizable dashboards for scheduling your events, and also you do not have to learn a lot for using them.
  • This SIEM consolidates multiple data points and offers several features and benefits, creating custom dashboards and managing alert workflows.
  • Splunk Cloud provides a simple way to have a central monitoring and security solution. Though it does not have a huge learning curve, you should spend some time learning the basics.
  • Splunk Cloud enables me to create and schedule statistical reports on network use for Management.
  • Splunk Cloud generally lags behind its competitors. Enterprise versions are always one version behind those available to consumers.
  • It is expensive as compared to its competitors. They should come up with cost-effective prices.
I will highly recommend this software because using Splunk Cloud has helped us become more proactive about handling our security concerns and better manage our environment. It is one of the finest security software that is easy to use and also provides analytics. It has excellent features like creating dashboard security and managing features etc. So you must give it a try once!
Score 9 out of 10
Vetted Review
Verified User
Review Source
Splunk Cloud is being used by our own department. We use it mainly to aggregate logs and metrics. We also create different dashboards to display our service running status.

Since we have multiple environments, it's very convenient to stream all logs/metrics into Splunk Cloud, and see them from one centralized place.
  • Display log events in a very nice way for humans to read
  • Very easy and powerful to create dashboards
  • Very fast and reliable
  • Since it's a managed cloud service, it doesn't offer the capability to edit the config files directly. So if the web UI doesn't support something, we can't change it.
Splunk Cloud is good for application monitoring/alerting, data analysis and root cause analysis. For organizations that would like use Splunk but do not want to hire someone to operate or maintain it, this is the best solution.

From a cost perspective, it's not the cheapest one in the market.
Score 6 out of 10
Vetted Review
Verified User
Review Source
We recently implemented it in our organization, mainly for security monitoring and to provide visibility into our cloud infrastructure and various providers. We are bringing in data to better identify anomalies, events of interest, and indicators of compromise.
  • Integration with Okta for IAM-related security events and monitoring.
  • Integration with AWS for CloudTrail and CloudWatch logs
  • Integration with Mimecast for email monitoring and integration
  • Deploying apps require a support ticket and can have a long turnaround time.
  • Making changes to conf files requires a ticket and if it's not through an approved process, then Puppet will reset it to what it was previously
  • Custom apps have to be very well written to make it through the approval process.
If you have a smaller team that can't have a dedicated Splunk admin to manage the indexers, clusters, search heads, etc, Splunk Cloud is good because you have them manage it.
Score 10 out of 10
Vetted Review
Verified User
Review Source
Splunk Cloud is used to provide quick and easy access to important data. This includes metrics about their business, the use of our services, revenue, and errors. Several departments throughout the organization use the data and dashboards available in Splunk.
  • Excellent dashboards that provide a quick view of important data.
  • Easy to create dashboards.
  • Filtering within the dashboards provides updated dashboards quickly.
  • Exporting is easy.
  • While the dashboards are intuitive, setting them up isn't always as easy. A more intuitive interface would help ensure all users can easily set up dashboards to get the information they need.
If you want to see the data instead of dig for it, Splunk is helpful for providing the visualizations that speak to the data.
Score 8 out of 10
Vetted Review
Verified User
Review Source
Splunk is used by just about every person in our company, from sales, to support, and from dev to operations. It has been adopted at all levels of our organization. We use Splunk to monitor build deployments, support tickets but most especially for operations and finding problems with servers and systems. We have many TVs setup in our Network Operations Center showing various aspects of our infrastructure. Splunk cloud is simply where our data is stored and searched.
  • Excellent tool for correlating logs from hundreds of servers and digging into events for a specific time period.
  • Based on issues found Splunk allows for simple and complex monitoring to alert when the same event or problem is seen again.
  • Advanced dashboard tools allow for unique and creative perspectives on how to display data in ways relevant to each department in our organization.
  • Some of their more advanced features, like ITSI, Machine Learning, or Security Analytics, can be very challenging to setup and configure.
  • Splunk Cloud support has been a challenge in the past. They are getting better, but they have had problems responding in a timely manner to issues.
  • These are only some minor observations of things I have had to deal with. In general, Splunk is a solid product that is fantastic to use.
Looking for the needle in the haystack is what Splunk excels at. When you have 300 servers all producing logs you need to look at it can be a very daunting task. Splunk allows you to add all of these logs into a central repository to search across all systems. It also helps you find how many times an error is happening and how widespread it is very quickly. I have yet to find an area where Splunk cannot help with searching and obtaining meaningful data from servers and network equipment.
Score 8 out of 10
Vetted Review
Verified User
Review Source
We use Splunk for a part of the business. More specifically, for the less critical machines. For the critical ones, we have a big SIEM with limited licenses. Having Splunk for the rest of the environment does save some money, and they do not need the same management as the critical ones.
  • Ease of use.
  • There is not a big learning curve.
  • It could be cheaper.
Splunk Cloud is easy to use for having a central Security and monitoring solution. It does not have a huge learning curve, though you should spend some time to learn the basics.
There is plenty of community-driven support, which is always a very good thing to have. Getting support from your peers worldwide means answers can be very quick, even quicker than official support channels.
Joseph Sweet | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Review Source
Splunk Cloud is being used by our IT security operation and our DevOps team. It is being used similarly to a SIEM for aggregating log data and running analysis on it for generating alerts. It replaced Sumo Logic which was producing too many poor alerts and was not as robust of a solution. It supports our SOC well, and it makes our security team's job much easier. We are also using it in DevOps as a pilot for APM.
Splunk Cloud has been great for our security environment and helping us becoming more proactive at addressing security concerns. For us, it has great transparency in terms of cost and allows for good scalability as we right-size our environment. It is great for developing easy to follow dashboards that you can share across your user environment.
Whenever we have an issue, it gets resolved quickly and beats SLAs. Splunk Cloud support is knowledgeable, responsive and quick. We have never had an issue getting what we need when we need it.
August 16, 2019

Data is the new Oil!!

Manan Bhatt | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User
Review Source
Splunk Cloud is being used by our department. It solved many business problem as it delivers Splunk-as-a-Service hosted securely on the public cloud. With this cloud-ready service, one can enjoy all of Splunk Enterprise features without worrying about hosting the infrastructure and without paying the upfront Splunk licensing cost. Splunk Cloud supports all Splunkbase apps including Premium applications (e.g. Enterprise Security, ITSI, etc.) with pre-packaged searches, dashboards, and reports to create the right story from the data with the power of self-serviceability.
  • With Splunk Cloud you get the advantage of moving from POC to Production in a matter of days rather than in months allowing the Business to gain a lot.
  • Takes you away from managing infrastructure/administration, allows saving time & money. Reduce the overall TCO (Total Cost of Ownership)
  • Move from Reactive to Proactive Monitoring
  • Highly secure environment at your finger-tips
  • Splunk Cloud support is increasing a lot now a days and I see no cons other than the price factor to the other compared products. Overall Splunk Cloud is a very good product all together.
  • I can see that Splunk Cloud can still improve in the form of SLA.
  • Splunk Cloud generally lags behind the available Splunk upgrades. They are always one version behind the one available for enterprise.
Very well suited for many business use cases where security, performance, and support are the top-most priority, along with the normal use case of Splunk. One would get very good support if the company is using Splunk Cloud and can solve many business problems like seamlessly allowing end users to store, search, analyze and visualize data from different sources of one’s business or IT infrastructure. Splunk Cloud follows the state-of-the-art cloud ready deployment strategies in line with continuous integration/deployment pipeline which is designed for high availability, efficient change management, and robust architecture.

One shouldn't use Splunk Cloud for learning or testing purpose. Such things can be done or fulfilled by Splunk Enterprise as well and would be way cheaper then Splunk Cloud.
August 16, 2019

Powerful and versatile

Score 9 out of 10
Vetted Review
Verified User
Review Source
Splunk is available to all our teams, and usage is spreading. My team uses it for all the applications we manage, and it lets us log all user events in our mobile application and backend services. The reports it enables also really help with visibility and monitoring. For example, we were able to create a dashboard showing the average amount of time it takes to get through a particular flow in the app, the number of units processed per day in our app, error rates, and a lot more.
  • Powerful query language.
  • Very fast search indexing.
  • Intuitive UI.
  • The query language is well-documented but has a bit of a learning curve.
  • I wish copy/pasting JSON from the logs were easier without going to the completely raw (condensed) form.
Splunk is great for logging and aggregating information across many sources. We are able to attach unique ids to the requests from our mobile app and trace their execution through our backend services. It is also very powerful for creating dashboards and other insights based on our log data. I would even use it for just a single application, just for the search capabilities.
My team has reached out to them on several occasions with various questions, and they were quick to respond and help us solve our problems.
June 22, 2019

Heavy Hitter SIEM!

Chase Palmer, CISSP | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User
Review Source
We use Splunk to centralize and consume all of our server logs, and various other logs, to monitor for interruptions in service, anomalous activity, and other security-related events. Splunk is primarily used by our DevOps and Security teams. Splunk solved an issue of being able to easily and effectively search hundreds of thousands of log entries in an easy to consume format.
  • Splunk is extremely versatile and can consume just about any kind of log out there.
  • Splunk's search function is very powerful, and allows for some very complex search criteria. Narrowing and/or expanding search results is as simple as a click of the mouse.
  • There are many different apps/plugins that can be added to Splunk that provide built-in reporting and alerting on certain kinds of events, meaning you don't have to be an expert to use Splunk.
  • There is a bit of a learning curve to figure out how to initially use it.
  • When SAML is set up, there is no apparent way to log out.
Splunk is not cheap, so Splunk only makes sense for businesses where there are hundreds of thousands of logs a minute, or where manual processes or open source alternatives can't keep up. You will need to have a dedicated person or two in order to configure and manage Splunk on a very regular business, otherwise, you won't be able to reap the full benefits that Splunk can offer.
Jeff Kitchens | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Review Source
Here at CCMSI, we use Splunk Cloud to monitor Active Directory Events. It is primarily used by the IT Systems Team. It has proven to be invaluable to find misconfiguration, excessive usage, improper procedures, and security events. The tool allows me to give Management the information they ask for in a graphical way that shows trends, spikes, and overall usage.
  • Splunk Cloud allows me to search the volumes of information help in Windows Server Logs quickly and accurately.
  • Splunk Cloud allows me to create Dashboards for everyday monitoring of multiple parameters.
  • Splunk Cloud allows me to create and schedule reports for Management on network usage and statistics.
  • The SPL programming language that the queries are built in is not very intuitive.
  • There should be a better repository of pre-built queries for what I would think of as common Active Directory usage monitoring.
  • I would like to see more free training/familiarization information made available.
I find that Splunk Cloud is well suited for tracking user logins, Server Reboots, failed login attempts, account lockouts, and sorting these items by host or user. We often trace failed user logins to someone having cached credentials on an endpoint which can result in locked accounts that drive the Help Desk ticket volume up unnecessarily.