Splunk Enterprise Security is a must! | TrustRadius

Use Cases and Deployment Scope

I am a security analyst and so I use it on a day to day basis to triage and troubleshoot alerts and security incidents in my organization. We have several dozen data sources going to our Splunk environment and then we build correlation alerts for them

Pros and Cons

Data detail
Timeline
Charts and data presentation
Data correlation

Third party app support
Simplify management
More automation

Return on Investment

Faster incident response time
Compliance
Audits
Executive dashboards

Scalability

6

I think deployment wise it works but could use some simplification processes

Alternatives Considered

Active Roles from One Identity and Amazon S3 (Simple Storage Service)

Splunk is way better. Support is awesome too

Key Insights

Do you think Splunk Enterprise Security (ES) delivers good value for the price?

Yes

Are you happy with Splunk Enterprise Security (ES)'s feature set?

Yes

Did Splunk Enterprise Security (ES) live up to sales and marketing promises?

Yes

Did implementation of Splunk Enterprise Security (ES) go as expected?

Yes

Would you buy Splunk Enterprise Security (ES) again?

Yes

Other Software Used

Microsoft Defender for Cloud, Qualys Cloud Platform, Digital Guardian

Likelihood to Recommend

Incident response, security event correlation, security posture analysis and preparation, presentation