Item: Splunk Enterprise Security (ES)
Rating: 6
Author: Verified User

Use Cases and Deployment Scope

Splunk Enterprise Security (ES) is our monitoring tool of choice. To keep track of the health of my project's servers, services, and applications, I'm implementing a Fire application. All apps in the development, testing and production environments are monitored for logs and certificates expiration. When an error happens on our server due to OS patching, we use this tool to get a clearer picture of what happened. It features a variety of dashboards to suit various needs. If a problem develops during the course of daily activities, we export records of warning and error for further investigation.

Pros and Cons

3rd party security logs
Integration & Deployment
Infra

Try to be more specific in your query messages.
Creating dashboards for multiple projects at the same time is difficult.
Managing those accounts necessitates a significant amount of education and training.

Return on Investment

Improved command of security incidents
Reduced downtime
Efficiency in terms of the amount of time it takes to detect and respond to internal and external threats.

Security Analytics

Splunk Enterprise Security has unquestionably revolutionized the way security operations are carried out, and data-driven insight has transformed the way things are done from getting lost in logs to interactive, actionable insights that make life easier for both operations and business with minimal downtime.

Scalability

This has become the norm! In this day and age, having this kind of capability where scalability does not pose a problem is a big plus. With Splunk Enterprise Security's platform-wide functionality, businesses of all sizes can work more efficiently.

Key Insights

Do you think Splunk Enterprise Security (ES) delivers good value for the price?

Yes

Are you happy with Splunk Enterprise Security (ES)'s feature set?

Yes

Did Splunk Enterprise Security (ES) live up to sales and marketing promises?

Yes

Did implementation of Splunk Enterprise Security (ES) go as expected?

Would you buy Splunk Enterprise Security (ES) again?

Yes

Likelihood to Recommend

Splunk Enterprise Security (ES) is well-suited to obtaining the best performance from a server farm. It may be difficult for a non-technical person to get started with the ES platform. However, for someone who has previously used it, it is simple to use. The license model, on the other hand, is adaptable as we grow and our resource needs to increase exponentially.

If you're a developer, stay safe with splunk

Overall Satisfaction with Splunk Enterprise Security (ES)