Splunk Cloud

Splunk Cloud is suited for organisations that have a lot of data from many different data sources and you would like them to be in one tool. It's excellent for splitting data and searching through the different indexes of data.
If you only have one data source (syslog from network devices for example) I would say it is less appropriate and would be overkill.

Splunk Cloud support is sorely lacking unfortunately. The portal where you submit tickets is not very good and is lacking polish. Tickets are left for days without any updates and when chased it is only sometimes you get a reply back. I get the feeling the support team are very understaffed and have far too much going on. From what I know, Splunk is aware of this and seem to be trying to remedy it.

I will highly recommend this software because using Splunk Cloud has helped us become more proactive about handling our security concerns and better manage our environment. It is one of the finest security software that is easy to use and also provides analytics. It has excellent features like creating dashboard security and managing features etc. So you must give it a try once!

Splunk Cloud is good for application monitoring/alerting, data analysis and root cause analysis. For organizations that would like use Splunk but do not want to hire someone to operate or maintain it, this is the best solution.

From a cost perspective, it's not the cheapest one in the market.

If you have a smaller team that can't have a dedicated Splunk admin to manage the indexers, clusters, search heads, etc, Splunk Cloud is good because you have them manage it.

If you want to see the data instead of dig for it, Splunk is helpful for providing the visualizations that speak to the data.

Looking for the needle in the haystack is what Splunk excels at. When you have 300 servers all producing logs you need to look at it can be a very daunting task. Splunk allows you to add all of these logs into a central repository to search across all systems. It also helps you find how many times an error is happening and how widespread it is very quickly. I have yet to find an area where Splunk cannot help with searching and obtaining meaningful data from servers and network equipment.

Splunk Cloud is easy to use for having a central Security and monitoring solution. It does not have a huge learning curve, though you should spend some time to learn the basics.

There is plenty of community-driven support, which is always a very good thing to have. Getting support from your peers worldwide means answers can be very quick, even quicker than official support channels.

Splunk Cloud has been great for our security environment and helping us becoming more proactive at addressing security concerns. For us, it has great transparency in terms of cost and allows for good scalability as we right-size our environment. It is great for developing easy to follow dashboards that you can share across your user environment.

Whenever we have an issue, it gets resolved quickly and beats SLAs. Splunk Cloud support is knowledgeable, responsive and quick. We have never had an issue getting what we need when we need it.

Very well suited for many business use cases where security, performance, and support are the top-most priority, along with the normal use case of Splunk. One would get very good support if the company is using Splunk Cloud and can solve many business problems like seamlessly allowing end users to store, search, analyze and visualize data from different sources of one’s business or IT infrastructure. Splunk Cloud follows the state-of-the-art cloud ready deployment strategies in line with continuous integration/deployment pipeline which is designed for high availability, efficient change management, and robust architecture.

One shouldn't use Splunk Cloud for learning or testing purpose. Such things can be done or fulfilled by Splunk Enterprise as well and would be way cheaper then Splunk Cloud.

Splunk is great for logging and aggregating information across many sources. We are able to attach unique ids to the requests from our mobile app and trace their execution through our backend services. It is also very powerful for creating dashboards and other insights based on our log data. I would even use it for just a single application, just for the search capabilities.

My team has reached out to them on several occasions with various questions, and they were quick to respond and help us solve our problems.

Splunk is not cheap, so Splunk only makes sense for businesses where there are hundreds of thousands of logs a minute, or where manual processes or open source alternatives can't keep up. You will need to have a dedicated person or two in order to configure and manage Splunk on a very regular business, otherwise, you won't be able to reap the full benefits that Splunk can offer.

I find that Splunk Cloud is well suited for tracking user logins, Server Reboots, failed login attempts, account lockouts, and sorting these items by host or user. We often trace failed user logins to someone having cached credentials on an endpoint which can result in locked accounts that drive the Help Desk ticket volume up unnecessarily.