Splunk running strong
December 14, 2015

Splunk running strong

Steven Brice | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User

Overall Satisfaction with Splunk

Splunk is currently being used on our JBOSS Fuse ESB/SOA environment within our department. We have three teams constantly using Splunk for development, QA testing and Operations Support. Splunk has dramatically reduced the QA testing/validation times and has also helped reduce the amount of time spent on operational support. Having instant access to production logs and metrics has greatly reduced time spent gathering and manually analyzing log information. Splunk has ultimately reduced the amount of software tools needed to analyze, gather and validate operational metrics of our entire stack of software. One stop shop.
  • Operational out of the box. No need to spend days setting up and configuring an application to ingest and analyze data.
  • Web UI is fluid and flows easily.
  • Additional applications available for integration with Splunk, and most are free.
  • Enterprise Solution that can be up and running in a couple of hours.
  • Enterprise license that fluctuates between license pools, having the ability to grab more space from unused pools.
  • Ability to stop forwarders from indexing data via web console.
  • Archiving of old indexed data could be refined. Current process is bit hard to understand with the different buckets and max times.
  • Faster trouble shooting times in production.
  • Instant reporting of environmental status.
  • Granular data metrics.
Splunk offers a simple out of the box setup. The enterprise installation was completed in less than four hours. Pricing for Splunk is high, but the benefits far out way the price impact. Other tools were good but did not offer the various types of integration. Support for the Splunk tool is outstanding; it has a strong community base; sales reps constantly check in and work with Splunk engineers to fine tune special requests or needs.
Splunk has helped us create some amazing operational dashboards. We now have instant view-ability into our message flows and route traffic. We see errors before they happen. QA is able to create use cases that can be consistently applied in many different testing scenarios. Developers are able to see production logs without having to worry about access issues or non availability into production environments.

Splunk Enterprise Feature Ratings

Centralized event and log data collection
Event and log normalization/management
Deployment flexibility
Integration with Identity and Access Management Tools
Custom dashboards and workspaces
Host and network-based intrusion detection