Item: Splunk Enterprise Security (ES)
Rating: 9
Author: Verified User

Use Cases and Deployment Scope

Splunk Enterprise Security is being used in our company to quickly detect security issues and respond to internal and external attacks. The security department is currently working on exploring all use cases for ES. Splunk is widely used for all types of monitoring, detecting issues, threats, security, cybercrime, DDOS, etc.

Pros and Cons

Good graphical UI to learn and detect threat and perform quick recovery action.
ES is very useful in detecting security issues in enterprise infrastructures such as devices, systems, and applications.
Using AI and ML features to detect anomalies and trigger alerts to NOC.

Limited use cases, need to be expanded and include all the other use cases in the ES to detect security issues.

Return on Investment

Definitely, ES helps in reducing MTTD and MTTR, with the help of ES overall detection method, we could save a lot of time in issue detection and correction.

Scalability

Very flexible and easy to deploy ES SW on the cloud and on-premises.

Key Insights

Do you think Splunk Enterprise Security (ES) delivers good value for the price?

Not sure

Are you happy with Splunk Enterprise Security (ES)'s feature set?

Yes

Did Splunk Enterprise Security (ES) live up to sales and marketing promises?

Yes

Did implementation of Splunk Enterprise Security (ES) go as expected?

I wasn't involved with the implementation phase

Would you buy Splunk Enterprise Security (ES) again?

Yes

Likelihood to Recommend

Splunk ES helps my team to detect threats and issues in real-time, drill down to detail issues helped in investigating the root cause, and solve problems quickly. Our team relies on Splunk logs analysis and Machine learning for early detection and correction. ES is one of the tools we are currently exploring all use cases and trying to build some dashboard for overall monitoring of all technologies nodes.

Splunk Enterprise security is a powerful tool to explore

Overall Satisfaction with Splunk Enterprise Security (ES)