Filter Ratings and Reviews
Filter 49 vetted Splunk Cloud reviews and ratings
Reviews (1-9 of 9)
January 16, 2020
Splunk Cloud - Excellent product with steep learning curve
Splunk Cloud is used by the IT department for the majority of the devices that can produce logs. It was initially purchased as a syslog aggregate but has evolved into much more than that now. It addresses the question of log retention and security investigation. It will eventually be expanded to be used across the wider business.
- Searching through logs/data
- Data ingestion
- Documentation for add-ons and apps
- Support for Splunk Cloud
October 12, 2019
Splunk Cloud is a great solution for SIEM
Splunk Cloud is being used by our IT security operation and our DevOps team. It is being used similarly to a SIEM for aggregating log data and running analysis on it for generating alerts. It replaced Sumo Logic which was producing too many poor alerts and was not as robust of a solution. It supports our SOC well, and it makes our security team's job much easier. We are also using it in DevOps as a pilot for APM.
Splunk Cloud is being used by our department. It solved many business problem as it delivers Splunk-as-a-Service hosted securely on the public cloud. With this cloud-ready service, one can enjoy all of Splunk Enterprise features without worrying about hosting the infrastructure and without paying the upfront Splunk licensing cost. Splunk Cloud supports all Splunkbase apps including Premium applications (e.g. Enterprise Security, ITSI, etc.) with pre-packaged searches, dashboards, and reports to create the right story from the data with the power of self-serviceability.
- With Splunk Cloud you get the advantage of moving from POC to Production in a matter of days rather than in months allowing the Business to gain a lot.
- Takes you away from managing infrastructure/administration, allows saving time & money. Reduce the overall TCO (Total Cost of Ownership)
- Move from Reactive to Proactive Monitoring
- Highly secure environment at your finger-tips
- I can see that Splunk Cloud can still improve in the form of SLA.
Splunk is available to all our teams, and usage is spreading. My team uses it for all the applications we manage, and it lets us log all user events in our mobile application and backend services. The reports it enables also really help with visibility and monitoring. For example, we were able to create a dashboard showing the average amount of time it takes to get through a particular flow in the app, the number of units processed per day in our app, error rates, and a lot more.
- Powerful query language.
- Very fast search indexing.
- Intuitive UI.
- The query language is well-documented but has a bit of a learning curve.
- I wish copy/pasting JSON from the logs were easier without going to the completely raw (condensed) form.
January 17, 2020
A solid security and monitoring tool
We use Splunk for a part of the business. More specifically, for the less critical machines. For the critical ones, we have a big SIEM with limited licenses. Having Splunk for the rest of the environment does save some money, and they do not need the same management as the critical ones.
- Ease of use.
- There is not a big learning curve.
- It could be cheaper.
We use Splunk to centralize and consume all of our server logs, and various other logs, to monitor for interruptions in service, anomalous activity, and other security-related events. Splunk is primarily used by our DevOps and Security teams. Splunk solved an issue of being able to easily and effectively search hundreds of thousands of log entries in an easy to consume format.
- Splunk is extremely versatile and can consume just about any kind of log out there.
- Splunk's search function is very powerful, and allows for some very complex search criteria. Narrowing and/or expanding search results is as simple as a click of the mouse.
- There are many different apps/plugins that can be added to Splunk that provide built-in reporting and alerting on certain kinds of events, meaning you don't have to be an expert to use Splunk.
- There is a bit of a learning curve to figure out how to initially use it.
- When SAML is set up, there is no apparent way to log out.
March 15, 2019
Splunk Cloud: Find the needle in your haystack of data
Splunk is used by just about every person in our company, from sales, to support, and from dev to operations. It has been adopted at all levels of our organization. We use Splunk to monitor build deployments, support tickets but most especially for operations and finding problems with servers and systems. We have many TVs setup in our Network Operations Center showing various aspects of our infrastructure. Splunk cloud is simply where our data is stored and searched.
- Excellent tool for correlating logs from hundreds of servers and digging into events for a specific time period.
- Based on issues found Splunk allows for simple and complex monitoring to alert when the same event or problem is seen again.
- Advanced dashboard tools allow for unique and creative perspectives on how to display data in ways relevant to each department in our organization.
- Some of their more advanced features, like ITSI, Machine Learning, or Security Analytics, can be very challenging to setup and configure.
- Splunk Cloud support has been a challenge in the past. They are getting better, but they have had problems responding in a timely manner to issues.
- These are only some minor observations of things I have had to deal with. In general, Splunk is a solid product that is fantastic to use.
Here at CCMSI, we use Splunk Cloud to monitor Active Directory Events. It is primarily used by the IT Systems Team. It has proven to be invaluable to find misconfiguration, excessive usage, improper procedures, and security events. The tool allows me to give Management the information they ask for in a graphical way that shows trends, spikes, and overall usage.
- Splunk Cloud allows me to search the volumes of information help in Windows Server Logs quickly and accurately.
- Splunk Cloud allows me to create Dashboards for everyday monitoring of multiple parameters.
- Splunk Cloud allows me to create and schedule reports for Management on network usage and statistics.
- The SPL programming language that the queries are built in is not very intuitive.
- There should be a better repository of pre-built queries for what I would think of as common Active Directory usage monitoring.
- I would like to see more free training/familiarization information made available.
July 13, 2018
Splunk Cloud, good for cloud-first companies.
We recently implemented it in our organization, mainly for security monitoring and to provide visibility into our cloud infrastructure and various providers. We are bringing in data to better identify anomalies, events of interest, and indicators of compromise.
- Integration with Okta for IAM-related security events and monitoring.
- Integration with AWS for CloudTrail and CloudWatch logs
- Integration with Mimecast for email monitoring and integration
- Deploying apps require a support ticket and can have a long turnaround time.
- Making changes to conf files requires a ticket and if it's not through an approved process, then Puppet will reset it to what it was previously
- Custom apps have to be very well written to make it through the approval process.
Splunk Cloud Scorecard Summary
Feature Scorecard Summary
About Splunk Cloud
Splunk Cloud Technical Details
| Operating Systems: | Unspecified |
|---|---|
| Mobile Application: | No |