Splunk Enterprise Security

In our organization, Splunk Enterprise Security (ES) is the central Security Information and Event Management (SIEM) platform that consolidates telemetry across the enterprise, spanning network infrastructure, cloud services, endpoints, Kubernetes environments, identity systems, and critical applications. As part of the Cisco family, Splunk continues to evolve with deep integrations into Cisco threat intelligence (e.g., Talos) and network telemetry, enhancing both detection fidelity and operational efficiency.

• Cost and licensing.

Arcsight by OpenText

Cisco Secure Network Analytics, Cisco Catalyst Center, SDWAN|Link

We use Splunk for Security Logs. We basically monitor all Client logs whenever they use their cards.

• It is hard to estimate considering it's not been a year that I've been working in the company, but it has for sure definitely helped to keep us reliable, trustworthy and secure in an indirect way. All of these help the bank I work for financially as well.

Cisco Duo, Cisco Secure Access, Tenable Cloud Security

Splunk Enterprise Security is used as the primary SIEM solution in my company, used by tens of SOC users for the detection and investigation of suspicious activities

• Splunk Enterprise Security support tens of SOC operators to track and investigate hundreds of security events every day.
• The SOC is a critical activity. Splunk Enterprise Security is one of if not the best solutions that makes it possible, and at scale

Elastic Security and RSA Access Manager (Discontinued)

Splunk Enterprise

I use the product to help monitor, analyze and potentially mitigate certain security issues that may come up. This includes acting as a secondary for escalations and looking at some alerts. I also use it to action on data that may be of use to our organization. It is helpful to organize alerting and easy to take action.

• Fast MTTD but no specific numbers
• Excellent integration with other tools so we don't have to pay for an additional service

Microsoft Sentinel

CrowdStrike Falcon, Carbon Black App Control

Between our warehouse systems, fleet tracking, logistics portals and cloud apps, there's a flood of data every second. Splunk ES is the connector that pulls all that into one view. The company handles freight for a couple of government clients. We are therefore required to prove that all access and data transfers are monitored. Splunk's audit dashboards make that less painful

• It saves the company millions by avoiding disruptions across logistics
• My crew and I respond to threats so much faster with Splunk

Microsoft Sentinel

Splunk SOAR, TeamViewer