Splunk Enterprise reviews

Splunk is easy to use, also non technical persons can also use and create their dashboards. Easy to implement and very easy to use the query language, the documentation is also sufficient

We cannot setup the alerts for realtime. we only us it for logging and not for metrics. the maintenance of the dashboards are very time offering.

Splunk Enterprise has powerful search capabilities and customizable dashboards.

The learning curve for setting up queries can be steep, and the pricing can be high for smaller teams.

Splunk is a great tool for cyber security professionals wanting to build out their security infrastructure.

There are other options out there that doesn't require as much configuration.

It helped me enormously in my job as IT INC Management including detailed reports and alerting any necessary information.

It has a somewhat complex paring curve and there are no simple tutorials or parallel design of tutorials for new managers

The saying "you only get out what you put in" is rather apt when utilising Splunk as a SIEM tool - i.e. the more logs / data you can feed into the solution the better the results. Ingesting multiple log files from numerous systems / applications is essential when reviewing security incidents and ensures everything is in one place.

For all that is good with Splunk, the costs are rather high and could force Customers to other solutions unless they make themselves more competitive in the pricing market

The product has a ton of Features. Everything what you Need when working with logs is already implemented

Due to the rich set of capabilities regarding, searching, transforming and vizualzing data it‘s sometimes quite tricky to find all necessary query commands

Data visualization is very clear and easy to use.

The possible to share with many people data and dashboards.

Splunk Enterprise is a great tool for security analytics, IT operations, and business intelligence. I especially like the way it can help me identify potential threats and improve our IT infrastructure.

The pricing for Splunk Enterprise may be out of reach for some small businesses.

Easy to install agents on servers, it can parse any form of data easily, Splunk can detect anomalies quite easily and the UBEA feature is amazing.

The cost of this solution is high, and customer service is bad. Apart from that Splunk SPL language is difficult to learn.

Data visualization, Analytics skills with AI-powered and can handle data in TB/per day without any interruptions in services. Live dashboards, developing use-cases and their capabilities (correlation).

complex architecture and efficient skills are required, financial is also not feasible for small and medium customers. no inbuilt query builders for beginners to understand the platform.

Provides a single location for collecting and analyzing logs. Provides ease of use for non-technical users, but powerful features for security and IT. There is an add-on/app for anything you could imagine.

Some documentation is vague, and when certain things don't work, it can be difficult to find out a solution to the problem.

I love its versatility to handle different kinds of data. While monitoring our internal data, Splunk Enterprise saved a lot of code with its real-time data monitoring and logs analysis feature.

With the growth of the data, costs grew intensively which was out of the budget for our startup company. Initially setting up Splunk was complex as we were new to this.

The easy of setup and integration makes this one of my favorites As well as the real time dashboard

Not much i don't like yet, but maybe the interface can do with an update

Powerful and versatile data mining tool with excellent integration capabilities.

Challenging initial setup and learning curve, particularly with query language and high cost.

With Splunk Enterprise, it is easy to investigate, detect and remediate threats on devices and endpoints on our network.

It was full of technical overheads when we were customizing Splunk Enterprise features.

The system is highly intuitive to use. It is faster than other solutions I've used on the market and has a huge library of 3rd party plugins to get more from the system. It is easy to create scheduled searches, dashboards, reports etc. but there are a number of additional plugins (at an extra cost) to help with security, single pane of glass and metric collection.

It offers challenges for a decentralized working model. Where Splunk is centrally managed, it is easy to ensure that best practices are maintained. Where the system is opened up for an entire department to utilize and on-board their logs, it becomes more difficult. However, with some creative thinking and good process, this issue can be overcome.

They have a robust platform that I have used for monitoring and analytics. There are a lot of options and customization available when using it.

Because there is so much customization and options available, it can be complicated to learn.

Dashboards feature is amazing, I use it much. Alerts and queries are easy to set up. Mostly it works fast so it's kind of Dev friendly so it's easy to onboard the new guys

Alerts should have a better way to manage it. There should be a way to promote alerts to different environments - so we will be able to set the Dev/Stg/Prod
Sometimes some things that we want to do take a while searching on the internet for a solution - they might think how to do it better - maybe some examples or better documentation