Item: Splunk Enterprise Security (ES)
Rating: 9
Author: Verified User

Use Cases and Deployment Scope

The SOC uses Splunk Enterprise Security as its SIEM at the heart of its security monitoring software. Having all your security records in one place, integrated with smart information, allows you to meet customer, regulatory and physical security requirements through a single pane of glass. Standardize information and language when addressing security concerns.

Pros and Cons

It has Defense against the threat.
It has a powerful machine learning.
It is stable , fast and full protective.

Dashboard is not so good.
The RAM consumption can be improved.
It is difficult for new users.

Return on Investment

The license fee for Splunk Enterprise Security seems to be higher than before.
It takes less time for search.
It has good service delivery.

Scalability

Splunk Enterprise Security (ES) detects malware and all anomalies, can't be lost, and controls your account based on company-assigned permissions, so you can permanently monitor your account and avoid the risk of unauthorized access. Splunk doesn't offer the best dashboard customization, nor is it easy to use, but I think it's a tool that keeps everything organized and keeps track of your entire complex security system.

Key Insights

Do you think Splunk Enterprise Security (ES) delivers good value for the price?

Yes

Are you happy with Splunk Enterprise Security (ES)'s feature set?

Yes

Did Splunk Enterprise Security (ES) live up to sales and marketing promises?

Yes

Did implementation of Splunk Enterprise Security (ES) go as expected?

Yes

Would you buy Splunk Enterprise Security (ES) again?

Yes

Likelihood to Recommend

If you have knowledge of Splunk, then ES is very suitable for SOC. The optimization of ES is better. ES can adapt to new threats, but it requires considerable care and maintenance. ES is not a good substitute for SOC which cannot be modified or extended. In some cases, a Managed Security Service Provider can help.

Powerful software for security and minimize the threats.

Overall Satisfaction with Splunk Enterprise Security (ES)