Splunk Enterprise

Score8.6 out of 10

564 Reviews and Ratings

What is Splunk Enterprise?

Splunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.

Categories & Use Cases

Product Demos

Centralized event and log data collection
Effectiveness of real-time centralized event and log data collection
Category average: 8.9
Custom dashboards and workspaces
dashboards that can be customized to meet the needs of specific groups
Category average: 8.7
Reporting and compliance management
Ease and quality of reporting and compliance functions
Category average: 8.5

Rules-based and algorithmic detection thresholds
Effectiveness of manually-established rules and algorithmically-determined detection thresholds
Category average: 8.3
Behavioral analytics and baselining
How effectively activity and behavior baselines are established and maintained
Category average: 8.6
Response orchestration and automation
Quality of built-in response orchestration and automation in Next-Gen SIEM
Category average: 8.4

Most Frequent Users

Top 3 industries using Splunk Enterprise.

Based on HG Insights installation data

View all Reviews

#1 most frequent

Professional, Scientific, and Technical Services

28.0%

552 installations of 1,969

“It is our central security monitoring and log analysis platform.”
— Information Security Analyst, Quantum Flairs (Mid-sized Companies)

#2 most frequent

Finance and Insurance

11.0%

216 installations of 1,969

“Splunk enterpirse serves as a central hub for machine-generated data across entire organization.”
— zOS Performance & Capacity analyst, UBS (Enterprises)

#3 most frequent

Information

10.6%

208 installations of 1,969

“Splunk Enterprise is used for overall machine log collection, transform the data for better analysis and then use them for various analytical capabilities like dashboarding, monitoring, alerting and reporting.”
— Manager, Vodafone India (Enterprises)

Pros

Robust data parsing and field extraction from diverse log sources
Powerful search and querying functionalities for large datasets
Customizable dashboards and visualizations for system health monitoring

Cons

High total cost of ownership due to ingest-based licensing model
Dashboard and UI usability considered outdated by some users
Performance challenges when handling very large datasets or deployments

Sandrah Gill

Information Security Analyst in Information Technology at Quantum Flairs (51-200 employees)

Use Cases and Deployment Scope

We engaged Splunk Enterprise to not only provide visibility across our infrastructure but also to do so in real time. It is our central security monitoring and log analysis platform. It ingests logs from multiples sites and converts the into organized metrics, according to priority; making it easier for us to correlate events, analyze the data and hunt threats.

Pros

Data visualization.
Ingestion of logs and indexing metrics
Data centralization and accessibility
Correlation of events across multiple sources.

Cons

It is rather slow when dealing with a lot of data.
SPL queries can be complex.

Return on Investment

Improved incidence response and management. All data is centralized and put in order of priory, incase of an incident we receive alerts which allow us to deal with it fast.
Faster queries and searches through large data sets.
Powerful threat detection.

Usability

Other Software Used

CrowdStrike Falcon, Microsoft Sentinel

Philip Phan

Engineer in Engineering at Undisclosed (10,001+ employees)

Use Cases and Deployment Scope

We use this to monitor user log ins, user actions on workstations. if our networking services are online. We have dashboards that were created to show this. We also use it to manage device certificates and to see if they are expired. We use it to monitor network traffic. We also use it for threat detection.

Pros

the dashboard customizability
AI tools
insider threat detection

Cons

The search feature of Splunk,
How to turn off and turn on Splunk
The set up complexity of Splunk
Splunk language can be simplified

Return on Investment

Splunk has had a positive return of investment
Saved us 5+ hours on manual certificate data logging

Usability

Other Software Used

Red Hat Certificate System, Cisco 5520 Wireless Controller, Cisco 5000 Series Enterprise Network Compute System (ENCS 5000)

Allen Monroy

cyber systems engineer in Engineering at N?A (51-200 employees)

Use Cases and Deployment Scope

we use it to monitor real live threats and allows us to provide insight into our data and be able to analyze it in real time. it allows for requirements to be met and for certain events and people actions to be audited. The best use case is to allow for insider threat to be detected further enhancing our security posture of the network.

Pros

analyze traffic
Insider Threat Detection
Real time traffic and parse information to a readable format

Cons

Splunk language is a little hard to learn maybe make it more usable friendly
include an AI tool that helps with creating dashboard and actually helping enhance and use Splunk better and to assist with writing search strings
assist with the peo

Return on Investment

insider threat
allowed for requirements to be met
allows for easy inegration

Usability

Damanpreet Singh

Software Developer in Information Technology at Airbus (10,001+ employees)

Use Cases and Deployment Scope

I use Splunk Enterprise to monitor logs from our servers and also application logs. We monitors those logs to keep a check on the server and application health (e.g., create an email alert if CPU usage is more than the threshold defined). Also, we have built many custom dashboards to display the keys metrics for applications/infrastructure.

Pros

collecting logs from servers
parsing machine logs very well
Build custom dashboards with visualizations

Cons

Support for third-party visualizations in dashboard studio.
More AI features in Enterprise version
More robust parsing for nested json data

Return on Investment

improved the monitoring process
Custom dashboard provides solution to apply specific company logics
Faster threat detection

Usability

Other Software Used

Zabbix, Palantir Foundry, GitHub

Jerry Martinez

Network Infrastructure Manager in Information Technology at Nusenda FCU (501-1000 employees)

Use Cases and Deployment Scope

I feel we are missing out on other things that it can do to help with our network.

Pros

It is able to take log and put them into a great dashboard
provide loads of info

Cons

Help us with network monitoring

Return on Investment

It helps out our cyber team but I would like to use it for our networking team

Usability

SolarWinds Loggly

LogRhythm NextGen SIEM Platform

Splunk Enterprise

What is Splunk Enterprise?

Categories & Use Cases

Product Demos