Item: Splunk On-Call
Rating: 10
Author: Verified User

Overall Satisfaction with Splunk On-Call

Use Cases and Deployment Scope

My organization currently uses Splunk On-Call in conjunction with Splunk Enterprise to manage our on-call team and incident response. Additionally, I have setup numerous integrations between Splunk On-Call and other software tools such as ServiceNow. With these integrations we can quickly and easily use Splunk On-Call to monitor our environment and deploy remediation when problems arise.

Pros and Cons

Pros

Easily assign work/tickets between multiple users
Supports a wide variety of software integrations
Easy to manage scheduling tool
As part of the Splunk toolset, provides detailed levels of data analysis at our engineers fingertips

Cons

Integrations dependent on updates being applied in a timely manner
Dependent on Splunk licensing model which can be a hurdle depending on data ingest amounts
Not ideal in an airgapped network environment

Most Important Features

Easy scheduling and incident assignment
Quick access to relevant logs
Integration support for various other tools we use
User friendly UI

Return on Investment

Greatly reduced incident response time
Reduces overhead from managing on-call schedule
Enabled numerous teams to meet SLAs that were previously unmet

Key Insights

Do you think Splunk On-Call delivers good value for the price?

Yes

Are you happy with Splunk On-Call's feature set?

Yes

Did Splunk On-Call live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Splunk On-Call go as expected?

Yes

Would you buy Splunk On-Call again?

Yes

Other Software Used

Splunk Enterprise, Tableau Desktop, ServiceNow DevOps

Likelihood to Recommend

Splunk On-Call has proved to be a great help in incident response within my organization. With the scheduling and assignment feature it is never in question which engineer is tasked with each assignment/incident. Being able to quickly and easily access all relevant logs greatly expedites incident resolution time. I would argue that the larger the environment and incident volume, the more important a tool such as this will prove to be.

Comments

Please log in to join the conversation

Resolving Incidents with Splunk On-Call