Resolving Incidents with Splunk On-Call
December 27, 2022

Resolving Incidents with Splunk On-Call

Anonymous | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User

Overall Satisfaction with Splunk On-Call

My organization currently uses Splunk On-Call in conjunction with Splunk Enterprise to manage our on-call team and incident response. Additionally, I have setup numerous integrations between Splunk On-Call and other software tools such as ServiceNow. With these integrations we can quickly and easily use Splunk On-Call to monitor our environment and deploy remediation when problems arise.
  • Easily assign work/tickets between multiple users
  • Supports a wide variety of software integrations
  • Easy to manage scheduling tool
  • As part of the Splunk toolset, provides detailed levels of data analysis at our engineers fingertips
  • Integrations dependent on updates being applied in a timely manner
  • Dependent on Splunk licensing model which can be a hurdle depending on data ingest amounts
  • Not ideal in an airgapped network environment
  • Easy scheduling and incident assignment
  • Quick access to relevant logs
  • Integration support for various other tools we use
  • User friendly UI
  • Greatly reduced incident response time
  • Reduces overhead from managing on-call schedule
  • Enabled numerous teams to meet SLAs that were previously unmet

Do you think Splunk On-Call delivers good value for the price?

Yes

Are you happy with Splunk On-Call's feature set?

Yes

Did Splunk On-Call live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Splunk On-Call go as expected?

Yes

Would you buy Splunk On-Call again?

Yes

Splunk On-Call has proved to be a great help in incident response within my organization. With the scheduling and assignment feature it is never in question which engineer is tasked with each assignment/incident. Being able to quickly and easily access all relevant logs greatly expedites incident resolution time. I would argue that the larger the environment and incident volume, the more important a tool such as this will prove to be.