Highly powerful SIEM tool with Endless Capabitlies
Updated July 06, 2022
Highly powerful SIEM tool with Endless Capabitlies

Score 10 out of 10
Vetted Review
Verified User
Overall Satisfaction with Splunk SOAR
We used Splunk SOAR as a log aggregating platform that connects our Splunk tool and connects all the application that provides ingress and egress connections inside and outside the organization. We use this part of our log onboarding platform, a company-wide program that is used to enable logging on all the applications that are being used with donor security metrics.
Pros
- Security Orchestraction
- Custom Playbooks
- Integration to Cloud Applications
Cons
- Access Control Issues
- On-Prem Hosting Capabilities
- Lesser Workflow
- Easy Turnaround time for Detection and Preventions
- Automation capabilities saved times.
- Better exposure to reports.
Highly dependent upon the automation capabilities that Splunk provided. Used Alerts, Alarm, Auto Triage to a great extent, friendly on automation scripts that allowed us to add a lot of custom scripts, that allowed us to automate a lot of processes, mostly on the log monitoring project. This is not just involved custom email or generation of reports but highly compressed tasks such as custom workflows that require high manual intervention were also automated.
Do you think Splunk SOAR delivers good value for the price?
Yes
Are you happy with Splunk SOAR's feature set?
Yes
Did Splunk SOAR live up to sales and marketing promises?
Yes
Did implementation of Splunk SOAR go as expected?
Yes
Would you buy Splunk SOAR again?
Yes
Comments
Please log in to join the conversation