Overall Satisfaction with Splunk
Splunk is currently being used on our JBOSS Fuse ESB/SOA environment within our department. We have three teams constantly using Splunk for development, QA testing and Operations Support. Splunk has dramatically reduced the QA testing/validation times and has also helped reduce the amount of time spent on operational support. Having instant access to production logs and metrics has greatly reduced time spent gathering and manually analyzing log information. Splunk has ultimately reduced the amount of software tools needed to analyze, gather and validate operational metrics of our entire stack of software. One stop shop.
- Operational out of the box. No need to spend days setting up and configuring an application to ingest and analyze data.
- Web UI is fluid and flows easily.
- Additional applications available for integration with Splunk, and most are free.
- Enterprise Solution that can be up and running in a couple of hours.
- Enterprise license that fluctuates between license pools, having the ability to grab more space from unused pools.
- Ability to stop forwarders from indexing data via web console.
- Archiving of old indexed data could be refined. Current process is bit hard to understand with the different buckets and max times.
- Faster trouble shooting times in production.
- Instant reporting of environmental status.
- Granular data metrics.
- BearTail grep, Lumberjack and Logstash
Splunk offers a simple out of the box setup. The enterprise installation was completed in less than four hours. Pricing for Splunk is high, but the benefits far out way the price impact. Other tools were good but did not offer the various types of integration. Support for the Splunk tool is outstanding; it has a strong community base; sales reps constantly check in and work with Splunk engineers to fine tune special requests or needs.