Monitor log and alert quickly with the speed of Splunk Light
February 23, 2020

Monitor log and alert quickly with the speed of Splunk Light

Johanes Siregar | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User

Software Version

Splunk Light (legacy)

Overall Satisfaction with Splunk Enterprise

Splunk Light is being used by our Operational and Maintenance team for transaction logging and event monitoring. It was the right solution for our organization since our IT internal policy stipulates that any solution which interacts with our subscriber's activity data must be deployed on-premise. Moreover, since we only have a handful of O&M team, Splunk Light is a lot more convenient to deploy and manage.
  • Splunk Light is perfect for standalone on-premise deployment.
  • Mainly works well for a small team
  • Scalability might be an issue
  • A small limit on the number of the user also poses a challenge for large team collaboration.
  • The procurement process was easier because the low cost of the license was easier to justify.
  • Helps a lot on 'Slicing and Dicing' logs data to retrieve insight promptly.
Splunk Light is lighter and less flexible compared to Splunk Cloud and Splunk Enterprise. However, it is also the most effective option for new or small organizations with a tight budget. Both Splunk Light and Splunk Enterprise are deployed on-premise while Splunk Cloud, as the name suggests, deployed on-cloud. In terms of Scalability and flexibility, Splunk Light also trailing at the last place, compared to Splunk Enterprise and Splunk Cloud.

Do you think Splunk Enterprise delivers good value for the price?


Are you happy with Splunk Enterprise's feature set?


Did Splunk Enterprise live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Splunk Enterprise go as expected?


Would you buy Splunk Enterprise again?


Splunk Light is perfect to be used by a small organization or a team within a large organization with internal IT policy which required any solution must be deployed within the organization's premise. It performs very well for event log monitoring and alerting purpose. It is also relatively quick to deploy and easy to manage.

Splunk Enterprise Support

Splunk Light support is limited to free Community Support and access to basic supports. The Base Support Program only covers online case submission and status. There is no 24/7 direct or phone access to advance global support team. Moreover, It does not provide any Service Level Agreement (SLA) on response and resolution time. However, for a non-mission critical or time-sensitive usage which requires high availability service the Base Support is already sufficient.