Item: Splunk Enterprise Security (ES)
Rating: 10
Author: Verified User

Use Cases and Deployment Scope

I work for big organization and large infrastructure .Splunk Enterprise Security (ES) helps alot in security prospective and to chase threats and vulnerability detection, critical traffic detection firewall device Based on the risk score we can get incident notification and we can evaluate based on suggestions .SOC analyst best siem tool and good progress

Pros and Cons

Threat detection
Security
Vulnerability

Use case
Pre defined Data models
End point frame works
Data loss protection use cases and framework

Return on Investment

service-level agreements (SLAs) between a customer and a service provider or vendor
The longer it takes to repair or recover from an issue, the more downtime a business experiences Lost produ tivity

Scalability

The main hectic thing is to buy this product which is more cost
But stability and productivity and customer satisfaction
It can deploy onpremis or cloud ,both ways are flexible
Large scale of environments can handle and inorder to reduce resource cost and give great results ,high satisfaction while handling the things
Automatic risk based alerts will help to reduce resources

Alternatives Considered

Gurucul UEBA and Gurucul SIEM

These two really helps in better way and low cost and high productivity. Automatic detection ML help you to detect many ways and create cases based on risk score
GRS UBA helps to protect organization from data ,via sharing through emails and USB s .
Gurucu product license once purchased they will devolp accordingly and monthly touch base sessions

Key Insights

Do you think Splunk Enterprise Security (ES) delivers good value for the price?

Yes

Are you happy with Splunk Enterprise Security (ES)'s feature set?

Yes

Did Splunk Enterprise Security (ES) live up to sales and marketing promises?

Yes

Did implementation of Splunk Enterprise Security (ES) go as expected?

Yes

Would you buy Splunk Enterprise Security (ES) again?

Yes

Other Software Used

IntSights Cyber Intelligence, from Rapid7, Gurucul Risk Analytics (GRA), Gurucul SIEM

Likelihood to Recommend

Splunk Enterprise Security (ES) protects company's infrastructure and we'll detected and automated alerts based on programmed alerts which is mainly threshold risk score Predefined use cases will help you to protect cloud environment and soc analysts can easily jump into them and enable them as they want Correlation methods will give you more exposure to track different ways to identify and get resolutions .

Secure with Splunk Enterprise Security (ES)

Overall Satisfaction with Splunk Enterprise Security (ES)