Splunk Log Observing again.
January 24, 2025

Splunk Log Observing again.

Anonymous | TrustRadius Reviewer
Score 7 out of 10
Vetted Review
Verified User

Overall Satisfaction with Splunk Log Observer

The leading scope for using Splunk is log parsing and proactive monitoring. Combining logs from multiple sources, discerning trends for display on dashboards, and acting on specific triggers (errors, etc.).

Pros

  • Querying over multiple sources.
  • There are a lot of ad hoc possibilities, including clearly structured query language.
  • Creating dashboards and shareable reports.

Cons

  • You can use table-like functionality to generate dashboards, but these queries are heavy on the system.
  • It could be easier to give insight into what type of line parsing is used for specific documents in a company-managed environment and/or show ways to gain the insights needed.
  • I would like to see ways to anonymize specific data for shared reports without pre-formatting this in a dashboard on which reports could be based.
  • It has helped us figure out where specific errors occurred, leading to fewer downtimes on incidents.
  • It has provided insights into multiple teams and multiple platforms.
  • Due to its pricing model, we did have to balance data intake versus impact and traceability on the development and production environments, which was a bit of a hassle.
I give it this rating because the usability is high, the options are plenty, and it's very scalable.
To be honest, Datadog is very similar to Splunk and LogScale to a lesser degree, but it is just as good if you don't need too complex observability. Grafana is still growing and might reach the same level soon.

Do you think Splunk Observability Cloud delivers good value for the price?

No

Are you happy with Splunk Observability Cloud's feature set?

Yes

Did Splunk Observability Cloud live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Splunk Observability Cloud go as expected?

Yes

Would you buy Splunk Observability Cloud again?

No

The query language is relatively easy and flexible when looking into an application's problems. These queries can then be used for alerts, reports, and dashboards. I believe Splunk is a platform that can help a system grow into its proactive application management, using incidents to add insights as needed without trying to work out every scenario in advance.

Comments

More Reviews of Splunk Observability Cloud

  1. Home
  2. Observability Tools
  3. Splunk Observability Cloud Reviews
  4. User Review of Splunk Observability Cloud