Splunk: a review
May 14, 2014
Splunk: a review
Score 8 out of 10
Overall Satisfaction with Splunk
Splunk is used across our entire organization as a centralized location for all of the various data elements that we use to track performance of our internal systems and client facing interactions.
- Splunk is great at quickly finding the insights you need to start an analysis
- Once you understand the query syntax, Splunk is very easy to use.
- Great alert monitoring.
- Splunk lacks the ability to create professional looking customer facing reports.
- Steep learning curve.
- Large queries are slower than a more traditional DB.
- Quickly diagnose potential problems with our servers
- Easy ad-hoc reports for different clients
I wasn't involved with the initial decision to use Splunk, so I'm not aware of other alternatives. We are currently looking at moving away from Splunk with our client facing reporting and transitioning to a more traditional database tool. Splunk will still be used to monitor more internal processes.
I'm not the final decision maker, but I think Splunk is excellent at what it does well (monitor operational performance). As a reporting tool, it is not ideal. It's great at being able to put together ad-hoc searches and look at different slices of the data but not at creating automated client-facing reports.
Splunk is very well suited for monitoring IT systems. It allows you to have almost real-time access to data as it is being generated. This allows for extremely useful alert monitoring. As a customer facing tool, which is not a standard use-case, Splunk is slightly lacking. You can set-up many reports with the data you need, but they have a technical feel that is not suited for some external clients.