1. Home
  2. Security Information and Event Management (SIEM) Software
  3. Splunk Enterprise Reviews
  4. User Review of Splunk Enterprise
Splunk- a great product
May 15, 2014

Splunk- a great product

Richard Wilbert, MBA | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User

Software Version

Enterprise 4 and 5

Modules Used

  • Base

Overall Satisfaction with Splunk

Splunk is being used as an aggregator of our log data to produce reports for activity and audit and to monitor file access. The capabilities of Splunk streamline the level of effort needed to produce reports for auditors. Additionally, it can be setup to monitor file access which can indicate a data breach attempt as an example.
  • Splunk is great for visualizing your data in a format that can indicate trends.
  • Splunk can help you determine root cause and assimilate dissimilar data sources in a consistent manner.
  • Splunk can help you find "the needle in the haystack" problems without having to log into many different devices.
  • Splunk can be setup to look for symptoms that may cause issues in your environment and either alert report or trigger an action.
  • Maybe wizards to help you walk through different tasks might help the beginner.
  • Helps our prospects better understand how to visualize our log data.
  • Helps define a complementary product.
  • Helps sell our product to higher levels in the organization due to the visulaization of reports.
I have used base syslog, which does not have the parse capabilities and Arcsight which has major limitations. Splunk is easy to roll out and very easy to evaluate. The interface is very intuitive and there are a lot of Splunk apps for different devices and technologies which makes the rollout and ROI time faster. Also, the SE's at Splunk are awesome.
The use cases for Splunk continue to grow. I leverage it in the sales cycle and to demo security. That is only the tip of the iceberg for this product. If I had more time, I would experiment wiith many other use cases and become more proficient at the coding.
It is very well suited for large environments that have sensitive data or have a lot of devices. It is also well suited for IT management that likes pretty pictures of how their environment is running. It is very suitable for companies that spend too much of their IT engineers' time on audits, compliance and reporting to groups outside of IT.