Splunk-ing across the Enterprise
Updated February 18, 2020

Splunk-ing across the Enterprise

Daniel Garrett | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User

Overall Satisfaction with Splunk Enterprise

Splunk is utilized for creation of dashboards and log queries across many areas.

Pros

  • Quick log queries across different types of infrastructure
  • Adaptable dashboards for digesting large amounts of continuous data
  • Easy access and sharing of information via URL links

Cons

  • Building Splunk queries can be comber some without intricate knowledge of Splunk and the applications involved
  • Dashboard duplication for different areas can be difficult
  • Capturing all necessary data from cloud platforms is not always straightforward
  • Decrease of MTTR in the course of operational activity
  • Decrease of time spent finding pertinent log data
  • Greater visibility and translation of metrics in many areas
It’s not a true comparison as Splunk is focused on log data related to applications whereas ExtraHop is capturing network traffic and network metrics.
Real-time and historical log research is a glowing achievement for Splunk. Splunk is also quite effective at dashboard creation and presentation with high level or more granular investigation possible.

Splunk Enterprise Feature Ratings

Security Information and Event Management (SIEM)
8.2
Centralized event and log data collection
9
Correlation
9
Event and log normalization/management
7
Deployment flexibility
8
Integration with Identity and Access Management Tools
7
Custom dashboards and workspaces
9

Comments

More Reviews of Splunk Enterprise

  1. Home
  2. Security Information and Event Management (SIEM) Software
  3. Splunk Enterprise Reviews
  4. User Review of Splunk Enterprise