Splunk Enterprise

I use Splunk Enterprise to monitor logs from our servers and also application logs. We monitors those logs to keep a check on the server and application health (e.g., create an email alert if CPU usage is more than the threshold defined). Also, we have built many custom dashboards to display the keys metrics for applications/infrastructure.

• improved the monitoring process
• Custom dashboard provides solution to apply specific company logics
• Faster threat detection

Zabbix, Palantir Foundry, GitHub

Splunk is our primary observability and log aggregation platform in the datacenter.

It centralizes logs from multiple systems, supports incident investigation, and provides dashboards and alerts for operational monitoring.

We also use it to analyze Tufin usage statistics and track security policy management activity.

• great observability
• takes some time to configure dashboads, but provides a good visibility

Cisco Application Centric Infrastructure (Cisco ACI) and Cisco Meraki SD-WAN

In our organization, we use Splunk Enterprise for Logs from various devices.

• Splunk Enterprise has an awesome impact on our organization's overall business objectives.

In our organization, We use Splunk Enterprise for some specific uses cases on a bespoke basis for customers

Manage/maintain a large scale Splunk platform to provide analytical and security needs of the organization. Currently it provides a single pane of window for our security teams to build their threat/risk modeling at the same time integrating with other software to triage security incidents. Besides our developers leverage it for triaging purposes, along with leadership to make decisions based on data points available.

• Licensing cost is high
• Support has been real bad over the years, and seems to get even worse

Elastic Security and Datadog

Datadog, Anthropic Claude, Slack, Google Cloud Platform