Item: Splunk Enterprise
Rating: 8
Author: Verified User

Use Cases and Deployment Scope

Splunk is being used by the entire organization for searching and reporting and to analyze the logs and entire organization’s data. Splunk is a great tool to work on. It helps in finding various threats inside and outside the organization. Five stars.

Pros and Cons

Versatile
Intelligent
Reporting
Searching
Log analysis

Costly
Needs training to work on
Needs hands on experience to get used to

Return on Investment

Able to analyze data more effectively.
Capture data and threats more efficiently.
By using data models, it makes the Splunk system easy to learn.

Alternatives Considered

Logger (formerly HPE Arcsight Logger), Arcsight Enterprise Security Manager (formerly HP Arcsight) and ArcSight Investigate

Splunk is the most intelligent tool I have ever worked on. It gives you hands-on experience on how logs actually look like. You can go through entire organization data at once using this tool. Also, by the use of data models, it's become so easy to use and work on.

Other Software Used

IBM Resilient Incident Response Platform, IBM Control Desk, Jira Service Desk, JIRA Software

Likelihood to Recommend

Splunk is the best tool to work on if there is a need for analyzing the logs and the organization’s inside data. The way employees use search engines and browse for their personal use they can be caught easily. Also, if there are some outside threats within the company you can analyze those by setting up alerts.

Splunk, a great tool!

Overall Satisfaction with Splunk Enterprise