Splunk for log collection, indexing, analysis & dashboarding
December 14, 2018

Splunk for log collection, indexing, analysis & dashboarding

Anonymous | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User

Overall Satisfaction with Splunk Enterprise

Splunk is used in our enterprise to analyze monitoring and analytics data. We have thousands of micro services and APIs in our organization. All these APIs emit log data that is used to aggregate and analyze using Splunk. It also helps in end-to-end tracking of flows and data across services, in troubleshooting errors, and in generating metrics. Splunk is also used generating and configuring alerts.
  • Used for indexing and collecting machine data and log data from APIs.
  • This data is used to generate graphs, alerts, metrics that is useful to business, technology and operations.
  • It is data source agnostic and is used to log API, batch, db and log data. It runs on AWS for us.
  • The only con might be that it is much costlier than an open source system like ELK (Elastic Logstash Kibana).
  • Splunk has been used as a one-stop-shop for log collection, indexing, alerting, analytics and dashboarding
  • Splunk is a costly software however ROI on our engineering and operations is huge.
  • Negative could only be its high licensing costs. It might not be a viable option for all companies.
We have also used ELK (Elastic Logstash Kibana) with some benefits, but Splunk is way better than ELK.
We also use AWS CloudWatch for Lambdas that are written in AWS. However CloudWatch is not a replacement for Splunk.
We use Splunk heavily for log data collection, indexing for analysis, and monitoring our APIs 24x7. It is very easy for developers to generate indexes on unstructured data and easy for operations folks to create graphs of this data.

Splunk Enterprise Feature Ratings

Centralized event and log data collection
9
Correlation
10
Event and log normalization/management
9
Deployment flexibility
7
Integration with Identity and Access Management Tools
9
Custom dashboards and workspaces
10