Great Tool, I Really Like Working With
February 18, 2022

Great Tool, I Really Like Working With

Phótis Deligiánnis | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User

Overall Satisfaction with Splunk Enterprise Security (ES)

I use it mainly for configurations, onboardings, and maintenance. Moreover, users ask for dashboards/alerts/reports creation and troubleshooting.

Pros

  • Monitoring
  • Security
  • Troubleshooting
  • Graphs/Dashboards

Cons

  • Automation in configuration
  • Faster mean time to detect
  • Faster mean time to respond
  • Increased cost
Definitely, it is part of our monitoring tools and we have great plans and projects to still achieve in the future.
That is my personal opinion. Things are going well, but there is always room for improvement.
Difficult to choose, each one has pros and cons. Splunk has the best interface, QRadar has strong capabilities but ES is free.

Do you think Splunk Enterprise Security delivers good value for the price?

Not sure

Are you happy with Splunk Enterprise Security's feature set?

Yes

Did Splunk Enterprise Security live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Splunk Enterprise Security go as expected?

Yes

Would you buy Splunk Enterprise Security again?

Yes

IBM Security QRadar, Elastic Security (Elastic SIEM + Elastic Agent, formerly endgame), Tanium
I really believe Splunk Enterprise Security (ES) is a great tool for security monitoring. There are nice features like SOAR Phantom which give you amazing capabilities. Moreover, I believe it provides amazing opportunities for troubleshooting within an organization that keeps logs and monitors everything that is happening.

Splunk Enterprise Security Feature Ratings

Security Information and Event Management (SIEM)
8.4
Centralized event and log data collection
9
Correlation
8
Event and log normalization/management
8
Deployment flexibility
7
Integration with Identity and Access Management Tools
9
Custom dashboards and workspaces
9
Host and network-based intrusion detection
8
Log retention
8
Data integration/API management
8
Behavioral analytics and baselining
9
Rules-based and algorithmic detection thresholds
8
Response orchestration and automation
8
Reporting and compliance management
9
Incident indexing/searching
9

Comments

More Reviews of Splunk Enterprise Security

  1. Home
  2. Security Information and Event Management (SIEM) Software
  3. Splunk Enterprise Security Reviews
  4. User Review of Splunk Enterprise Security