Skip to main content
TrustRadius
Splunk Enterprise

Splunk Enterprise

Overview

What is Splunk Enterprise?

Splunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.

Read more

Learn from top reviewers

Splunk enterprise stable solution

Rating: 7 out of 10
January 5, 2024
Vetted ReviewVerified User
Splunk Enterprise is used in the company by the IT department. Mainly to monitor security events on process-relevant systems where the degree of security must be as high as po...
Continue reading
Verified user
Administrator
Splunk Enterprise2 years of experience

Great if you have the money

Rating: 7 out of 10
October 24, 2023
Vetted ReviewVerified User
We use Splunk Enterprise as a SIEM and a separate pool to use for medical record auditing. The SIEM catalogues information from multiple courses to provide efficiency and secu...
Continue reading
Verified user
Analyst
Splunk Enterprise8 years of experience

Splunk Enterprise Rocks !!

Rating: 8 out of 10
June 17, 2022
IncentivizedVetted ReviewVerified User
We use Splunk Enterprise to do various types of monitoring across organizations using a clustered environment with distributed indexers, search heads, UF, and HFW i.e. Applica...
Continue reading
Verified user
Professional
Splunk Enterprise3 years of experience

Real-time smart meters

Rating: 9 out of 10
August 17, 2021
IncentivizedVetted ReviewVerified User
Splunk is being using to track the status of electric utility smart meters which record customer energy usage. Smart meters send power outage & restoration notifications w...
Continue reading
Verified user
Professional
Splunk Enterprise2 years of experience

Splunk Enterprise in the Cloud empowers me as an analyst

Rating: 9 out of 10
August 9, 2021
IncentivizedVetted ReviewVerified User
Splunk Enterprise is the basis for our log correlation and analysis. We're using it primarily for IT Security, and occasionally to assist with operations was helpful. It is th...
Continue reading
Allan Crittenden Edwards
Analyst - Information Technology
Security Analyst
Eastern Michigan University
Splunk Enterprise8 years of experience

Robust IT Operations and SIEM Management Solution

Rating: 10 out of 10
July 20, 2021
IncentivizedVetted ReviewVerified User
Splunk Enterprise is used by our Infrastructure and Enterprise Monitoring Team and Security Teams to monitor our infrastructure. Monitoring is enabled for the overall health o...
Continue reading
Verified user
Consultant
Splunk Enterprise2 years of experience

Great for almost anything

Rating: 9 out of 10
July 19, 2021
IncentivizedVetted ReviewVerified User
We use this across our different departments for security, app performance monitoring, host monitoring, data intelligence, correlation, alerting and much more. It's a Swiss Ar...
Continue reading
Verified user
Engineer
Splunk Enterprise5 years of experience

Security/Data Analytics Solution That Comes with SIEM Capabilities

Rating: 10 out of 10
April 29, 2021
IncentivizedVetted ReviewVerified User
Splunk Enterprise is being used by mostly IT Department. [It's] being used to monitor security monitoring purpose[s] along with [business-relevant] use case monitoring.
Continue reading
Verified user
Engineer
Splunk Enterprise1 year of experience

Splunk leads the pack

Rating: 9 out of 10
April 14, 2020
IncentivizedVetted ReviewVerified User
Splunk is our one stop shop for all log data. We send logs from everything from servers, routers, firewalls, switches, sans and applications there to be analyzed and reviewed ...
Continue reading
Verified user
Engineer
Splunk Enterprise4 years of experience

One Splunk to rule them all!

Rating: 10 out of 10
March 12, 2020
Vetted ReviewVerified User
Splunk Enterprise is used across the whole department in our organization for Security information and event management. It improves our security aspect of the assets by coll...
Continue reading
Ahmet Fatih IRKLI
Engineer - Information Technology
Cyber Security Specialist
TUBITAK
Splunk Enterprise2 years of experience

Splunk Enterprise review

Rating: 7 out of 10
March 6, 2020
IncentivizedVetted ReviewVerified User
Currently our bank has different departments with their own Splunk infrastructure. We are currently building a larger infrastructure to incorporate all departments to join thi...
Continue reading
Verified user
Technician
Splunk Enterprise2 years of experience

Splunk Enterprise - Log collection & aggregation

Rating: 10 out of 10
February 29, 2020
IncentivizedVetted ReviewVerified User
Splunk was initially purchased to be our replacement for our syslog server, but it has grown into much much more and this is because of how easy it is to get logs into Splunk ...
Continue reading
Fraser Clark
Administrator - Information Technology
Network Engineer
People's Postcode Lottery
Splunk Enterprise2 years of experience

Won't you take me to Splunkytown

Rating: 9 out of 10
February 29, 2020
IncentivizedVetted ReviewVerified User
We're using Splunk Enterprise to assist us with IT Operations and IT Security. We came to look at Splunk because when I entered the company I found over 500 devices with no ce...
Continue reading
Verified user
C-Level Executive
Splunk Enterprise3 years of experience

Excellent product for our cybersecurity team

Rating: 9 out of 10
February 27, 2020
IncentivizedVetted ReviewVerified User
Splunk Enterprise has been used by our Cybersecurity Department for almost five years to be the single dashboard for our Security Incident and Event Monitoring. On top of that...
Continue reading
Verified user
Vice-President
Splunk Enterprise4 years of experience

Splunk Enterprise: A powerful, but expensive tool

Rating: 10 out of 10
February 26, 2020
IncentivizedVetted ReviewVerified User
Splunk Enterprise is used as a repository for all our server and network infrastructure logs. This allows us to go to one place to review logs and potentially find a relations...
Continue reading
Verified user
Technician
Splunk Enterprise2 years of experience
Log in with LinkedIn to see content from your network

Awards

Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards

Reviewer Pros & Cons

View all pros & cons
Verified User
Administrator in Information Technology
Industrial Automation Company, 11-50 employees
Verified User
Analyst in Information Technology
Hospital & Health Care Company, 1001-5000 employees
Return to navigation

Pricing

View all pricing
Splunk Enterprise

Splunk Enterprise

N/A
Unavailable

What is Splunk Enterprise?

Splunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.

Entry-level set up fee?

  • No setup fee

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services

Would you like us to let the vendor know that you want pricing?

46 people also want pricing

Alternatives Pricing

Sumo Logic

Sumo Logic

$3
Per GB Logs
What is Sumo Logic?

Sumo Logic is a log management offering from the San Francisco based company of the same name.

Blumira

Blumira

$12
per month per user
What is Blumira?

Blumira’s cloud SIEM platform offers both automated threat detection and response, enabling organizations of any size to more defend against cybersecurity threats in near real-time. It's goal is to ease the burden of alert fatigue, complexity of log management and lack of IT visibility.

Return to navigation

Product Demos

Splunk Incident Review Demo

YouTube

Splunk Threat Intelligence Demo

YouTube

Splunk Enterprise Security | Splunk Enterprise Installation | Splunk Training | Edureka

YouTube
Return to navigation

Features

Security Information and Event Management (SIEM)

Security Information and Event Management is a category of security software that allows security analysts to look at a more comprehensive view of security logs and events than would be possible by looking at the log files of individual, point security tools

7.5
Avg 7.8
Return to navigation

Product Details

What is Splunk Enterprise?

Splunk Enterprise enables users to find out what is happening in a business and take meaningful action. It automates the collection, indexing and alerting of machine data that's critical to operations, so that users can uncover the actionable insights from data — no matter the source or format. Leverage artificial intelligence and machine learning for predictive and proactive business decisions.

Splunk Enterprise Integrations

Splunk Enterprise Competitors

Splunk Enterprise Technical Details

Operating SystemsUnspecified
Mobile ApplicationNo

Frequently Asked Questions

Splunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.

SolarWinds Loggly and LogRhythm NextGen SIEM Platform are common alternatives for Splunk Enterprise.

Reviewers rate Incident indexing/searching highest, with a score of 9.

The most common users of Splunk Enterprise are from Enterprises (1,001+ employees).
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(471)

Community Insights

TrustRadius Insights are summaries of user sentiment data from TrustRadius reviews and, when necessary, 3rd-party data sources. Have feedback on this content? Let us know!

Valuable Log Gathering and Summarization: Users have expressed positive opinions about Splunk's ability to gather and summarize log messages from multiple sources. Many reviewers find this feature valuable, as it allows them to easily access and analyze log data in a centralized location without the need for manual aggregation.

Simplicity and Advanced Search Capabilities: Splunk's reporting functionality is highly regarded by users for its simplicity and advanced search capabilities. Several reviewers appreciate how easy it is to use Splunk's reporting features, while also being able to perform complex searches that provide detailed insights into their data.

Effective Web Traffic Catching and Dashboards: The effectiveness of Splunk in catching web traffic and providing helpful dashboards is another aspect praised by users. Many reviewers highlight how Splunk's web monitoring capabilities enable them to track website activity effectively, while the intuitive dashboards allow for quick visualization and analysis of important metrics.

Confusing User Interface: Some users have reported that the user interface in Splunk can be perplexing, leading to difficulties in quickly performing tasks and navigating the software.

Limited Integration with Excel: Users have expressed their desire for improved integration between Splunk and Excel when it comes to creating reports and dashboards. They feel that better connectivity and seamless data transfer would enhance their workflow.

Steep Learning Curve: Several users have mentioned the complexity of Splunk's architecture, requiring a dedicated team of engineers to effectively manage and optimize its performance. This steep learning curve can pose challenges for new users who may need additional time and resources to fully grasp the intricacies of the platform.

Based on user reviews, the following recommendations emerged for using Splunk:

  • Ensure the correct subscription: Users emphasized the importance of having the correct subscription for Splunk to avoid login issues and fully utilize its features. They recommend careful planning of the deployment and learning as much as possible before implementing a large installation.

  • Thoroughly investigate anomalies: While Splunk's great dashboards for troubleshooting are praised, users advise against relying solely on system alerts generated by Splunk. They suggest continuing to investigate any anomalies and carefully setting up sources and background data in Splunk.

  • Utilize Splunk's log analysis capabilities: Many users recommend Splunk as a valuable tool for log analysis and improving the quality of current processes. They find it helpful for debugging integration issues and consider it suitable for large-scale applications/systems. Users appreciate its ability to connect to individual boxes and view multiple logs simultaneously.

It should be noted that some users suggest that there may be better and cheaper alternatives for small to medium-sized businesses, while others propose improvements to the search result UI and pricing structure to attract more users in the industry.

Reviews

(1-25 of 37)
Companies can't remove reviews or game the system. Here's why

Splunk enterprise stable solution

Rating: 7 out of 10
January 05, 2024
Verified User
Vetted Review
Verified User
Splunk Enterprise
2 years of experience
Use Cases and Deployment Scope
Splunk Enterprise is used in the company by the IT department. Mainly to monitor security events on process-relevant systems where the degree of security must be as high as possible. Monitoring and rapid response helps reduce downtime of vital systems.
Pros and Cons
  • Ingest data and present it in a easy to read and process format
  • Correlation
  • Analysis and presentation of data
  • Ease of operation and maintenance compared to other solutions of its kind
  • Easier to implement and maintain than other solutions
Likelihood to Recommend
It will be suitable for large organizations. Easier to train users and scales well. Unfortunately, it will be too expensive for small businesses and enterprises.It is a consistent solution. By combining multiple tools from the same company, you can get a stable environment.My experience shows that it is not the most flexible solution on the market. Before selecting a SIEM solution, gather requirements and choose a solution according to your needs. If your organization has standard needs, Splunk will not be a bad choice.

Splunk Enterprise Rocks !!

Rating: 8 out of 10
Incentivized
June 17, 2022
Verified User
Vetted Review
Verified User
Splunk Enterprise
3 years of experience
Use Cases and Deployment Scope
We use Splunk Enterprise to do various types of monitoring across organizations using a clustered environment with distributed indexers, search heads, UF, and HFW i.e. Application Monitoring of various ETL tools such as Mulesoft, Airflow, Stream sets, etc REST API Monitoring Database monitoring HEC monitoring
Pros and Cons
  • Act as a Search Head, Indexer and Forwarder
  • Have full features to install Add-Ons
  • Is On-Prem, so we have full control on created lookups on file system
Likelihood to Recommend
This is best suited for limited and known scaling of nodes and where we don't want data to flow outside the organization otherwise we can switch to Splunk Cloud for better automatic scaling where scaling need is unknown but has an overhead of data to be encrypted

Splunk Enterprise in the Cloud empowers me as an analyst

Rating: 9 out of 10
Incentivized
August 09, 2021
Use Cases and Deployment Scope
Splunk Enterprise is the basis for our log correlation and analysis. We're using it primarily for IT Security, and occasionally to assist with operations was helpful. It is the basis of our SIEM, Splunk Enterprise security. We pull in events from a wide variety of data sources. The ability of Splunk to ingest and normalize just about any sort of data is one of its strongest points.
Pros and Cons
  • Gets data from anywhere
  • Variety of supported alert types
  • Real-time insights
Likelihood to Recommend
Splunk is well suited almost anywhere an Enterprise can afford it. It does require some technical chops to support an on-prem installation, but less so with a Cloud subscription. If it involves data there is a good chance that is possible with Splunk. In particular, it is a great base for Security use cases, especially for disparate and non-standard data sources.

Splunk Enterprise review

Rating: 7 out of 10
Incentivized
March 06, 2020
Verified User
Vetted Review
Verified User
Splunk Enterprise
2 years of experience
Use Cases and Deployment Scope
Currently our bank has different departments with their own Splunk infrastructure. We are currently building a larger infrastructure to incorporate all departments to join this centralized infrastructure with Splunk Enterprise. As Splunk is used for log analyzing, it is used for reports on different metrics built from logs collected from different servers. We try to consolidate the logs and put results onto a more centralized data center set as well.
Pros and Cons
  • Log analyzing.
  • Reports.
  • Forecast (ML model).
Likelihood to Recommend
Splunk is good for log analyzing from enterprise level of applications on different logs and consolidating results as reports. We can use such data to make forecasts for future trends if issues would occur more or less frequently.

Setup and maintenance would not be easy, so always plan ahead. Also always do health check for stability on some of the Splunk components such as indexers and HFs.

Splunk Enterprise - Log collection & aggregation

Rating: 10 out of 10
Incentivized
February 29, 2020
FC
Fraser Clark
Network Engineer
People's Postcode Lottery (Gambling & Casinos, 201-500 employees)
Vetted Review
Verified User
Splunk Enterprise
2 years of experience
View profile
Use Cases and Deployment Scope
Splunk was initially purchased to be our replacement for our syslog server, but it has grown into much much more and this is because of how easy it is to get logs into Splunk and the flexibility of what can be done with those logs.
We are now using it as a security tool, ingesting logs from lots of different sources and even our cloud platforms.
Currently it is just our IT team that use Splunk.
Pros and Cons
  • Dashboards/visualisations.
  • Can ingest any type of data.
  • Flexibility with filtering, etc.
Likelihood to Recommend
Splunk is excellent in most situations where log collection and aggregation is needed. It can work as a small scale syslog server and be built on from that.
The obvious wall is the cost of the product and for that reason I would say smaller businesses would not be suited to this as there are free solutions that could bridge this gap.

Won't you take me to Splunkytown

Rating: 9 out of 10
Incentivized
February 29, 2020
Verified User
Vetted Review
Verified User
Splunk Enterprise
3 years of experience
Use Cases and Deployment Scope
We're using Splunk Enterprise to assist us with IT Operations and IT Security. We came to look at Splunk because when I entered the company I found over 500 devices with no centralized logging in any way, no ability to pinpoint problems across the whole organization whether historic or predictable and things like this. Splunk is helping us deliver a predictable, robust operation of our infrastructure instead of reacting to problems and working to find just what was affected and when.

We believe we can apply Splunk to other data, in time, specifically aiding the company with analyzing financial information, but this is not yet an active project.
Pros and Cons
  • Fast, efficient
  • Solid community of experts and training materials
  • Ingests data from many sources, with a large number of partner relationships
Likelihood to Recommend
Splunk Enterprise is well-suited for any requirement to aggregate vast sums of data, no matter how structured or unstructured, and search across it all at speed, or report on it with visualizations, etc.

It's not suited for scenarios where you want to report on a single set of data, say, in a traditional way, for example, a typical scheduled report out of a finance system.

Excellent product for our cybersecurity team

Rating: 9 out of 10
Incentivized
February 27, 2020
Verified User
Vetted Review
Verified User
Splunk Enterprise
4 years of experience
Use Cases and Deployment Scope
Splunk Enterprise has been used by our Cybersecurity Department for almost five years to be the single dashboard for our Security Incident and Event Monitoring. On top of that, we are also using the Enterprise Security, and it helps us to focus on the most notable events that need to be followed up asap.
Pros and Cons
  • Central dashboard for all logs
  • Enterprise Security
Likelihood to Recommend
Splunk Enterprise is very well suited for correlating all the logs that need to be monitored and to be analyzed. It has performed very well with a vast amount of logs data. Furthermore, Splunk Enterprise can be pumped in and do parsing for numerous security device logs.
However, it needs certain technical skills to be able to correlate the logs and do the query in the Splunk Enterprise.

Splunk Enterprise: A powerful, but expensive tool

Rating: 10 out of 10
Incentivized
February 26, 2020
Verified User
Vetted Review
Verified User
Splunk Enterprise
2 years of experience
Use Cases and Deployment Scope
Splunk Enterprise is used as a repository for all our server and network infrastructure logs. This allows us to go to one place to review logs and potentially find a relationship between different systems with specific issues. For example, seeing failed login attempts to our switches and learning that a server was using old credentials.
Pros and Cons
  • Robust collection of plugins to support specific applications
  • Relatively easy to use
  • Strong and helpful support
Likelihood to Recommend
If the organization is looking for a powerful SIEM solution and has the budget, then I would recommend Splunk Enterprise. Using the tool can be as simple or as complicated as you want it. My only hesitation will be the complexity of implementation. For smaller organizations, it shouldn't be an issue, but larger ones may find it challenging to follow Splunk Enterprise's best practices for implementation.

Using Splunk in Educational Sectors

Rating: 9 out of 10
Incentivized
November 22, 2019
Verified User
Vetted Review
Verified User
Splunk Enterprise
4 years of experience
Use Cases and Deployment Scope
Splunk Enterprise has been used across University of Minnesota as one of our IT monitoring and alerting tools. This has been a big help for our user base to provide timed email alerts as well as monitoring all of the threshold parameters we set up. We have a dedicated admin to make sure the Splunk agents have been deployed and configured across all the client tools.
Pros and Cons
  • Timely alerting
  • Sharing with end users automatically
  • Less impact
Likelihood to Recommend
It is very easy to configure on Oracle Databases as well as on MSSQL/Window servers to monitor the pre-configured threshold.

A real-time monitoring system

Rating: 10 out of 10
Incentivized
November 16, 2019
JD
Johann Davila
System Administrator
Happy Money (Financial Services, 201-500 employees)
Vetted Review
Verified User
Splunk Enterprise
1 year of experience
View profile
Use Cases and Deployment Scope
Splunk is used by our Engineering Department. Splunk has been a valuable and useful tool for our company to monitor errors occurring at all times. We love the real-time monitoring system that helps us detect errors and get the right people to handle them when needed to get things back up and running.
Pros and Cons
  • Love the real-time monitoring system.
  • Easy to use.
Likelihood to Recommend
It is well suited with real-time monitoring and notifications sent when issues occur. It has been very helpful to monitor issues that applications are having so that we can get the right team to address these issues to get the company back up and running to continue business as normal.

Great tool for digging deep in to the back-end and to monitor the front-end

Rating: 8 out of 10
Incentivized
November 05, 2019
PB
PAULIUS BUCINSKAS
Analyst Digital Site Health
Western Union (Financial Services, 10,001+ employees)
Vetted Review
Verified User
Splunk Enterprise
3 years of experience
Use Cases and Deployment Scope
Splunk Enterprise tool is being used across our Digital department. Using this tool we are able to search and analyze event logs of our customer sessions. We can see the error trends of our Digital Services. Set up alerts for multiple KPIs and create dashboards for monitoring the health of our Digital products.
Pros and Cons
  • Captures multiple different information about a customer and his/her session.
  • Intuitive and informative search options.
  • Option to set up precise alerts for different KPIs.
Likelihood to Recommend
When needed to search for some specific event information triggered by end-user or by any other service, Splunk Enterprise tool can give that information and by reviewing the log of the event you can find a lot of needed information that could help you to find the solution or resolve the issue on the spot.

Splunk, a great tool!

Rating: 8 out of 10
May 21, 2019
Verified User
Vetted Review
Verified User
Splunk Enterprise
3 years of experience
Use Cases and Deployment Scope
Splunk is being used by the entire organization for searching and reporting and to analyze the logs and entire organization’s data. Splunk is a great tool to work on. It helps in finding various threats inside and outside the organization. Five stars.
Pros and Cons
  • Versatile
  • Intelligent
  • Reporting
  • Searching
  • Log analysis
Likelihood to Recommend
Splunk is the best tool to work on if there is a need for analyzing the logs and the organization’s inside data. The way employees use search engines and browse for their personal use they can be caught easily. Also, if there are some outside threats within the company you can analyze those by setting up alerts.

Splunk Enterprise - all your logging needs under one roof

Rating: 9 out of 10
Incentivized
March 12, 2019
Verified User
Vetted Review
Verified User
Splunk Enterprise
8 years of experience
Use Cases and Deployment Scope
Splunk is an excellent logging platform, allowing for short and long term log storage with top tier indexing and searching capabilities. We have deployed Splunk to aggregate all logs and act as a central logging platform throughout the company. This helps us solve operational issues by providing a centralized log monitoring platform to be used by our operations group. It also helps solve regulatory issues by being the central logging platform with strict access controls as well as tiered storage and archiving capabilities.
Pros and Cons
  • Tight access control via a variety of mechanisms to restrict users to specific logs.
  • Solves regulatory controls by providing access control and archival storage capabilities.
  • Provides a quick mechanism to search across multiple logs for issues between systems.
Likelihood to Recommend
Splunk is an excellent central logging system. For companies concerned about the cost, you can combine Splunk with an open-source logging engine such as rsyslog and only ingest the logs you need to search. Splunk is an excellent tool for handling web and systems logging and can help quickly identify issues in both.

Excellent tool for analyzing logs

Rating: 10 out of 10
Incentivized
February 28, 2019
Verified User
Vetted Review
Verified User
Splunk Enterprise
4 years of experience
Use Cases and Deployment Scope
Splunk Enterprise is used to monitor both Prod as well as all our lower environments. It is used for analyzing logs and tracing transactions. We write Splunk queries and create dashboards for monitoring several Key Performance Indicators. We first analyze metrics over a particular period of them to understand the trend and then set up alerts on these metrics for threshold violations.
Pros and Cons
  • Simplifies analyzing of big logs finds and helps in finding issues faster.
  • Splunk Alerts are great to be notified of possible issues so that necessary actions can be taken to avoid it from becoming a problem to our end users.
  • Dashboard reports can be scheduled to be generated and share with key stakeholders.
Likelihood to Recommend
Simplifies analyzing of big logs finds and helps in finding issues faster. Splunk Alerts are great to be notified of possible issues so that necessary actions can be taken to avoid it from becoming a problem to our end users. Dashboard reports can be scheduled to be generated and share with key stakeholders.

Monitor your monitors...

Rating: 8 out of 10
Incentivized
December 14, 2018
Use Cases and Deployment Scope
Splunk is used for application logs monitoring and system health checks for production environment and performance environment.
Pros and Cons
  • Best tool to do log monitoring and creating intuitive dashboards and charts
  • Best for setting up alerting for application logs
Likelihood to Recommend
For anything related to the application backend logs and monitoring, it's very appropriate to use, based on which we can create various dashboards / charts. For server health / monitoring, Splunk logs are not very helpful. It completely relies on log statements, if statement is not formatted in standard format, and it gives inaccurate results.

We've tried the rest and now we're back on Splunk!

Rating: 9 out of 10
Incentivized
December 12, 2018
Verified User
Vetted Review
Verified User
Splunk Enterprise
3 years of experience
Use Cases and Deployment Scope
Splunk is our dumping ground for our logs. We use Splunk to pump the monitoring and statistical logs to, whether for analysis, storage, or for debugging purposes. The main problem it solves is that we have many systems that live in different places, and having one centralized repository for our logging helps us with correlation of bugs to specific times, and monitoring how different infrastructure interacts.
Pros and Cons
  • Handles inputs from many different sources.
  • Very easy queries.
  • Dashboard support.
Likelihood to Recommend
We've tried the rest, and Splunk Enterprise seems to be the best solution for dumping our logs when you have either a multi-cloud or multi-product solution. It is great for having a centralized logging platform for multiple users to access and allows you to manage your data in many different indexes and control access to those indexes.

Splunk, a revolutionary analytics tools for the new age IT professional

Rating: 8 out of 10
Incentivized
December 10, 2018
Use Cases and Deployment Scope
Splunk Enterprise is used by the organization to primarily analyze data. It looks at data generated by various on-premise systems and provides meaningful insights out of them. Many advanced features like custom reporting are used by business analysts on a regular basis to determine the course of action. Last but not least, it is also used to execute daily support tasks like log analysis.
Pros and Cons
  • Data Analytics
  • Reporting
  • Indexing search data
  • Searching machine-generated data at realtime to forecast trends
Likelihood to Recommend
Splunk is an excellent analytical tool and if SPL is mastered correctly, it can be very powerful too and much more efficient than competing tools. It can be easily used by Business Analysts to get real-time insights if reports are set up for them. However, when it comes to monitoring systems, a lot of configurations are required, and that makes it not the ideal one-stop solution.

Great tool to handle all your server and network monitoring needs

Rating: 9 out of 10
Incentivized
August 10, 2018
MO
Matt Overton
VP, Senior Project Manager
Regions Financial Corporation (Banking, 10,001+ employees)
Vetted Review
Verified User
Splunk Enterprise
1 year of experience
View profile
Use Cases and Deployment Scope
We use Splunk Enterprise across the entire company to collect log data that allows us to see up/down times of servers and applications. We have customized Splunk a good bit and it is one of the main tools we rely to monitor our server environment and troubleshoot issues when an app/server is down or having errors.
Pros and Cons
  • Monitoring of log data to gauge server status and health
  • Dashboards that allows us to view data about servers in our environment
  • MOnitoring for fraud/cyber security threats and risks
Likelihood to Recommend
Splunk does a great job of collecting and monitoring machine data. We have use it to reduce fraud/cyber crime loses and we have been able to see a measurable return since using the product for this purpose. It is very extensible so you can continue expanding what the tool does over time. There is added expense with this, but it may be worth it in the end.

Splunk is a great tool for helping make sense of logs

Rating: 9 out of 10
Incentivized
March 28, 2018
RS
Ryan Stasel
IT Operations Manager
University of Oregon: School of Journalism and Communication (Higher Education, 1001-5000 employees)
Vetted Review
Verified User
Splunk Enterprise
5 years of experience
View profile
Use Cases and Deployment Scope
I'm using Splunk to aggregate logs from various servers and devices within my department. While I don't interact with it daily, or even weekly a lot of times, I do use it heavily when faculty or staff come to me asking when users were logged in, when there are any questionable incidents on websites, etc.
Pros and Cons
  • Log aggregation is extremely well done. Whether sending it logs over Syslog, mounting log directories over NFS, or using their log forwarding service.
  • Searching. I'm an amateur at best when searching and aggregating logs. The reporting functionality is amazing.
Likelihood to Recommend
Honestly, I can't think of an instance where Splunk isn't well suited for a task. They offer a free license that will handle up to 500MB/day, which unless you're logging against AD, or Exchange, is probably plenty to trial the software. There are examples where I've grabbed a copy for home to help troubleshoot issues with my home network and the network devices supported sending to a Syslog server.

The only issue most users are going to have is cost once you start figuring out the amount of data you're going to be aggregating, the licensing costs can get rather steep.

Splunk Enterprise Review

Rating: 10 out of 10
Incentivized
March 21, 2018
LH
Larry Helms
Professional Services Engineer
ScienceLogic (Information Technology and Services, 201-500 employees)
Vetted Review
Verified User
Splunk Enterprise
4 years of experience
View profile
Use Cases and Deployment Scope
Splunk is mainly used to log analysis and alerting of events, both business and technical events
Pros and Cons
  • Business event alerting
  • Technical Event alerting
  • Graphing of information found in the data
Likelihood to Recommend
It is best used for both business data analysis, reporting and graphing. But it also does well when alerting on events. Users, however, mistakenly assume that alerting can be/is real-time. Unfortunately, even though indexing is very fast, it can take some time to index and then issue alerts. This is NOT a problem if you properly train users about what to expect and how to properly use the tool.

Proactive log monitoring with Splunk Light

Rating: 8 out of 10
Incentivized
March 02, 2018
PG
Pooja Gada
Engineering Tech Lead
Qventus, Inc (Hospital & Health Care, 51-200 employees)
Vetted Review
Verified User
Splunk Enterprise
2 years of experience
View profile
Use Cases and Deployment Scope
Splunk Light is used by the engineering team. The main use case it targets - is proactive log monitoring. We wanted to integrate a system, which does log monitoring(application + system logs) and send us alerts if the system identifies errors or warning. Additionally, the solution needed to be HIPAA compliant. So instead of Splunk Enterprise or Splunk Cloud, we ended up choosing Splunk Light, as we can manage the infra on our own.
Pros and Cons
  • Real-time + Scheduled alerts - i-e you can set up alerts which are actively monitoring your logs
  • Pretty good response time for search results. With our key/value logging, Splunk makes it blazing fast to query the data.
  • Dashboards provide insights into historical data
  • Love how Splunk indexes all of the data and provides keys to search on
Likelihood to Recommend
Splunk light is awesome for anyone wanting to do proactive monitoring. It is also really well suited for insights into data with dashboards. Splunk light might not be a great choice if you do not want to manage the infrastructure on your own.

Splunk will make your job easier!!

Rating: 10 out of 10
Incentivized
November 13, 2017
EK
Eric Krueger
Operations/Systems Manager
Crowell Systems (Computer Software, 51-200 employees)
Vetted Review
Verified User
Splunk Enterprise
5 years of experience
View profile
Use Cases and Deployment Scope
We currently have evaluated and are deploying Splunk Enterprise to replace our older SIEM device. This will allow us to monitor our critical systems and allow for scalability as we continue to grow. Using this product has saved us time and money as it is used across our whole company's three locations. The flexibility and tools offered with Splunk make our jobs easier. Also, there are great forums and a cool wiki for best practices using Splunk.
Pros and Cons
  • Monitoring is made easy and putting out reports for upper management is a breeze.
  • With Splunk analytics we are better able to track our employees usage of systems for auditing purposes.
  • Checking on performance through Splunk's monitoring makes our management of resources a lot easier and resources are put where needed most.
Likelihood to Recommend
Splunk Enterprise meets all of our needs under one platform. The cost savings along without sacrificing functionality have made our choice to go with Splunk an easy decision. The functionality and cost savings alone have made upper management happy to deploy this system in our environment and the return on this investment has paid for itself.

Splunk for new users

Rating: 9 out of 10
Incentivized
September 14, 2017
Verified User
Vetted Review
Verified User
Splunk Enterprise
2 years of experience
Use Cases and Deployment Scope
Splunk is being used extensively in our technology department. Many applications use Splunk to monitor business activity, system resources, exceptions/failures, and to overall system status. Splunk addresses more technology-related problems but it does provide the business greater transparency into the applications which in turn gives both the business and the developer's peace of mind.
Pros and Cons
  • SPLUNK has a quick learning curve and can be easily self-taught. For example, there are plenty of resources available such as tutorials and search tools. There is really no prerequisite for learning how to use Splunk.
  • SPLUNK Enterprise provides plenty of useful documentation and user support which makes it easy for anyone to learn and start using SPLUNK in a very short period of time. There are also examples and user feedback that is helpful if you need more advanced implementations.
  • SPLUNK is very powerful, yet simple. For instance, you can set up a dashboard in one day provided you have admin rights and access to the data you want to Splunk.
Likelihood to Recommend
Splunk is well suited for applications or companies that process and store large data. Some of these applications may be legacy but as long as you can retrieve this data, then you can use Splunk to transform this data into meaningful reports or dashboards. In addition, Splunk is great for a 24/7 monitoring operations tool that can be set up to send alerts for production support. Splunk is less suited for applications that may already have a GUI because the Splunk features would be less superior than what a graphical user interface could provide in terms of features and customization.

Splunk in a production environment is a must-have today

Rating: 10 out of 10
Incentivized
August 31, 2017
VM
Viktor Mulac
Senior Consultant
A.T. Kearney (Management Consulting, 1001-5000 employees)
Vetted Review
Verified User
Splunk Enterprise
1 year of experience
View profile
Use Cases and Deployment Scope
Production line quality monitoring and searching for patterns, leading to outages. Usually scan and fix tasks, finding an event, that leads to an outage.

Two main ways of using Splunk prevail: ad-hoc analysis, and monitoring and alerting.

In some applications with two production lines, Splunk connected directly to the controllers and monitored data in real time. In other applications, we analyzed logs from 5 systems, among others application server logs, database server logs, production line measuring PCs. In total 5 systems had to communicate and an error on DB server sometimes caused outages on the production line. Splunk helped to find patterns in these incidents. We then set up a monitoring app to provide early indication of a potential upcoming outage.
Pros and Cons
  • Parsing huge amounts of data, structuring data, or at least helping to find a structure
  • Very good performance.
  • Very good graphical representation of data, findings, report creation
Likelihood to Recommend
Trained analyst, with e.g. python knowledge, regular expressions knowledge, etc. will do his tasks quite quickly.

In the beginning, when starting to learn Splunk, you have to deal with tons of error messages, (mostly resolved by Google discussions).

Splunk - Visibility into What's Really Going on in Your Network

Rating: 10 out of 10
Incentivized
April 17, 2017
Verified User
Vetted Review
Verified User
Splunk Enterprise
2 years of experience
Use Cases and Deployment Scope
Splunk is being used to capture logs from all Windows, Linux, and firewall devices in our enterprise. Currently it is being used by the IT infrastructure department only, but our hope is to make it available to other departments to follow trends in our business. Splunk addresses the issue of visibility into the network. It actually gives IT professionals access to view what is taking place on the network, and it provides something to look at in order to address issues occurring behind the scenes.
Pros and Cons
  • It gathers logs very well from almost all machine types - most SIEM related products don't do this quite as well.
  • It provides visuals to the user, giving you the ability to transform logs into visual charts (e.g. pie charts, graphs, tables, etc.).
  • Splunk is very quick in reporting and alerting on anomalies. There is little delay.
Likelihood to Recommend
In a corporate environment, especially in a financial sector, I would actually go with a product like RSA Security Analytics. But that is not necessarily the rule of thumb and is not the case for all financial companies. In higher ed, for example, I recommend Splunk because of the ability to monitor trends of students that can help them to get better grades, help the university to grow, and streamline registration processes.
Return to navigation