Splunk Enterprise Security is a great product overall.
March 09, 2022

Splunk Enterprise Security is a great product overall.

Mary Shwartz | TrustRadius Reviewer
Score 4 out of 10
Vetted Review
Verified User

Overall Satisfaction with Splunk Enterprise Security (ES)

in addition to providing log management, Splunk Enterprise Security is also being utilized to build correlations and establish use cases. The primary goal of the solution is to offer the Incident Response Team a single pane of glass through which they can monitor associated events from many sources and respond to threat occurrences more quickly!

Pros

  • Correlation searches
  • Security-related applications
  • Notable events

Cons

  • Machine learning functionality
  • price
  • To be honest, a premium solution like Splunk doesn't give premium help, thus I've submitted tickets to Splunk Support for these kinds of problems.
  • Deployment flexibility
  • Log retention in a 4% more
  • Reporting and compliance management
I think so, too! Enterprise Security, in my opinion, can only be as good as the data it is fed. A fully functional and reliable SIEM product requires a lot of preparatory effort. A business of any size can benefit from Enterprise Security's ability to adapt to its needs. Your security demands will be met as long as the organization you're working with can give the required resources and data
As far as I'm concerned, they're responsible and always ready to assist with any inquiries or problems. They also use their expertise to help current customers handle issues that could have a ripple effect on other consumers. I strongly propose that your Professional Services Team make your environment ready.
  • Splunk Application Performance Monitoring (APM)
In addition to providing log management, Splunk Enterprise Security is also being utilized to build correlations and establish use cases. The primary goal of the solution is to offer the Incident Response Team a single pane of glass through which they can monitor associated events from many sources and respond to threat occurrences more quickly!

Do you think Splunk Enterprise Security delivers good value for the price?

No

Are you happy with Splunk Enterprise Security's feature set?

No

Did Splunk Enterprise Security live up to sales and marketing promises?

Yes

Did implementation of Splunk Enterprise Security go as expected?

Yes

Would you buy Splunk Enterprise Security again?

Yes

For a wide range of businesses, Splunk Enterprise Security could be a good choice. When it comes to money, data is worth more than gold now that we're in the age of data. Splunk Enterprise Security lets you work with Splunk to be alerted to interesting or important events. If a company has enough money to hire a full team (more than one person), I think any company will enjoy what Splunk Enterprise Security has to offer. In the long run, Enterprise Security is more of a cost to keep your data safe.

Splunk Enterprise Security Feature Ratings

Security Information and Event Management (SIEM)
7.4
Centralized event and log data collection
5
Correlation
9
Event and log normalization/management
5
Deployment flexibility
8
Integration with Identity and Access Management Tools
9
Custom dashboards and workspaces
5
Host and network-based intrusion detection
8
Log retention
9
Data integration/API management
5
Behavioral analytics and baselining
8
Rules-based and algorithmic detection thresholds
9
Response orchestration and automation
9
Reporting and compliance management
5
Incident indexing/searching
9

Comments

More Reviews of Splunk Enterprise Security

  1. Home
  2. Security Information and Event Management (SIEM) Software
  3. Splunk Enterprise Security Reviews
  4. User Review of Splunk Enterprise Security