Splunk Enterprise Security is one of best solution Splunk has provided.
June 17, 2022

Splunk Enterprise Security is one of best solution Splunk has provided.

Shilpi Jain | TrustRadius Reviewer
Score 7 out of 10
Vetted Review
Verified User

Overall Satisfaction with Splunk Enterprise Security (ES)

We use Splunk Enterprise Security to manage threat connect and other security-related issues, as security is the backbone of any industry.WE also used to address akamai, malicious email, and other network-related threats. This is really helpful to address PCI content and is easy to include or exclude or monitor particular email IDs or websites that may be suspicious.

Pros

  • Threat Connect
  • PCi compliance
  • Akamai

Cons

  • may be more in PCI compliance
  • and more in malicious emails
  • MTTR
Definitely, Without a security enterprise, we can't think of maintaining the level of security that we have today. We are kind of more dependent on the Splunk Enterprise Security search head for risk-based alerting and analytics. This has taken us to next level already.
We are able to cover all the cases we have got in the past but still, there is a lot of scope for improvement as day by day cybercrime is increasing and going to the next level.
We have both of these instances in our organization.

Do you think Splunk Enterprise Security delivers good value for the price?

Yes

Are you happy with Splunk Enterprise Security's feature set?

Yes

Did Splunk Enterprise Security live up to sales and marketing promises?

Yes

Did implementation of Splunk Enterprise Security go as expected?

Yes

Would you buy Splunk Enterprise Security again?

Yes

Splunk Enterprise Security search head works so well for threat connect and Paul alto networks along with monitoring incidents and dashboards are working great. We would like to see more AI for help in the detection of suspicious mail activity as day by day these kinds of activities are increasing so if there will be more scanning with the help of AI that would be more helpful.

Splunk Enterprise Security Feature Ratings

Security Information and Event Management (SIEM)
5.1
Centralized event and log data collection
6
Correlation
6
Event and log normalization/management
5
Deployment flexibility
5
Integration with Identity and Access Management Tools
6
Custom dashboards and workspaces
5
Host and network-based intrusion detection
5
Log retention
5
Data integration/API management
5
Behavioral analytics and baselining
4
Rules-based and algorithmic detection thresholds
4
Response orchestration and automation
4
Reporting and compliance management
6
Incident indexing/searching
6

Comments

More Reviews of Splunk Enterprise Security

  1. Home
  2. Security Information and Event Management (SIEM) Software
  3. Splunk Enterprise Security Reviews
  4. User Review of Splunk Enterprise Security