Try our new research platform with insights from 80,000+ expert users

Alluvio Aternity vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Alluvio Aternity
Average Rating
8.4
Reviews Sentiment
7.9
Number of Reviews
38
Ranking in other categories
Application Performance Monitoring (APM) and Observability (32nd), Mobile APM (4th), Digital Experience Monitoring (DEM) (6th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
369
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. Alluvio Aternity is designed for Digital Experience Monitoring (DEM) and holds a mindshare of 5.7%, down 8.7% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 8.7% mindshare, down 10.9% since last year.
Digital Experience Monitoring (DEM) Market Share Distribution
ProductMarket Share (%)
Alluvio Aternity5.7%
Nexthink21.8%
ThousandEyes12.9%
Other59.6%
Digital Experience Monitoring (DEM)
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Splunk Enterprise Security8.7%
Wazuh9.3%
IBM Security QRadar6.5%
Other75.5%
Security Information and Event Management (SIEM)
 

Featured Reviews

Caillin Peacock - PeerSpot reviewer
Enables us to be a lot more agile and proactive in troubleshooting endpoint issues thanks to accurate UX scoring
There are many valuable features. If I had to single out one, it would be the UXI score. That's a proprietary Aternity score that tells you how good or bad the experience is for a user on that particular machine, for a particular app. It neatly encapsulates the pain of the user in a single score. It's very easy to find issues and then drill down further into those issues, based on that score. A lot of tools will do a similar thing, but they will do it indirectly and it's not always relevant. The Aternity score is on the money pretty much every time. The Digital Experience Index (DXI) feature is also very valuable. We've incorporated it into the KPIs for our endpoint team. We can use that as a benchmark to improve our goals and our environment, and for ongoing life cycle improvement.
Kyle Vernham - PeerSpot reviewer
Built-in searches and unified data access streamline alert investigation and boosts analyst efficiency
The two features I appreciate the most in Splunk Enterprise Security are the built-in searches, which have been very easy for us to get started with right out of the box, and the fact that it accesses all of our other systems. You can access it as a pane of glass rather than having to search individually. We also have the option to compare our analysts from our service to service. Splunk Enterprise Security helps our SOC team prioritize and investigate high-fidelity alerts more effectively by providing a more in-depth look and the ability to access a lot more of our data. Instead of jumping from several segmented systems, it allows us to have everything brought together in one place. For example, you have to move from our purview to our build system and to Splunk Enterprise Security, and it enables us to streamline that process. The built-in features of Splunk Enterprise Security, which we recently procured, have given us a good starting point and demonstrated the value of the product, providing an easy way to sell it to our company. The ease of getting everything into our purview helps us, and it serves as a good start for the investigation part in one location rather than what we usually have, which is jumping from system to system to system. Splunk Enterprise Security plays a role in our company's strategy to combat insider threats and advanced persistent threats by currently being in its technical test phase. We are still rolling it out, and it should help us find any insider threats based on information that our policy states should not be present in our system. Splunk Enterprise Security's risk-based alerting (RBA) has impacted our alert volume and analyst productivity because we've got many different systems feeding into it. However, it has helped to make it easier for our analysts to go through a set of events rather than 100 alerts. RBA allows us to streamline the process and customize it for our analysts. When it comes to leveraging Splunk Enterprise Security's dashboards and visualizations to communicate security posture to executives, it's pretty straightforward for any type of information. The visualization is easy to understand, but I haven't had any direct conversations with our executives.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"While it also provides desktop metrics, the main thing we use it for is monitoring our applications."
"The most valuable feature for us is trend analysis, particularly with device-help type of events and computer help events, such as blue screens, application errors, and application crashes."
"The application response time. That's what our business has been having a problem with."
"Being able to proactively identify issues on user systems."
"The ability to quickly utilize the dashboard to gather information is valuable from a DXI perspective."
"The user experience it provides is the most valuable feature for us."
"The two most valuable features for us are its abilities to validate the customer experience and to measure performance before and after upgrades."
"All of it, but it depends on who the end user is. The folks that support the applications, like the signatures that we've developed, it gives them feedback on their application performance."
"Splunk's interface is user-friendly, and it has apps and add-ons for most applications. We can easily normalize the data to make it readable and understand the logs. We easily get all the field extractions and enrichment done by using the apps and add-ons. This helps us understand the application logs because the raw data is useless unless we extract some useful information from it. These add-ons make it so much easier."
"Low barrier to start searching with the ability to normalize data on the fly."
"The features of Splunk Enterprise Security that I appreciate the most are its flexibility and scalability."
"The breadth of the data sources that Splunk can ingest data from is broad and deep and it does an exemplary job at handling structured data."
"The data analysis part is good in Splunk, which is something that I like the most. It is also quite easy to use. Its dashboards, visualizations, and analytics are good."
"The most valuable feature is the custom dashboard feature."
"Splunk Enterprise Security's value lies in its ability to collect and analyze security logs, providing insightful dashboards."
"The best features I've experienced over the past six years with Splunk Enterprise Security are the ability to create use cases and the flexibility to customize searches and use cases based on our specific requirements."
 

Cons

"They've additionally added some great color coding, but they need to explain better and drive down further on the meanings of this workflow."
"It all comes in pretty nice looking charts and things, but we have a hard time pulling out hard data, which is usually what you'll need if you're trying to be actionable."
"The thing that I think most companies like ourselves would want would be an easier way to customize custom scripts."
"I can see the location and computer model and I can see a bunch of different attributes. But one thing I can't see is the Internet Explorer version."
"Potentially, the one thing that could probably help with better levels of enterprise adoption is around creating the application monitoring signatures. That process can be a little bit difficult. If one thing could be simplified a little bit, it would be the application monitoring signature creation process."
"The licensing model doesn't suit the market we are in and has room for improvement."
"The dashboards and navigatability of the platform could use improvement. It often takes five or six clicks to drill down to exactly what you want to see."
"When it comes to what is called creating signatures, it's not easy for a non-coding person for desktop applications. You need to run the recording and you need to have some exposure and knowledge. That is an area where they can improve. For web applications, they have the Web Activity Creator and that's an awesome and easy tool. Anybody can use it and capture the signatures. With the desktop applications it's a little more cumbersome and difficult."
"The CIM model is the method Splunk uses to normalize data and categorize its important parts, but it is quite complex."
"An area of improvement would be the licensing of the solution. They need a free license, which would allow faster lead times."
"Its reporting can be improved. That's the only complaint I have heard. I don't need the reporting part, but I know that other people in the organization need it."
"We do have to educate developers on how to not blow it up. It is a little to easy to write an expensive query and overly stress the system. This could be improved."
"Considering the contract thing and the whole legal area, it takes forever to get the contracts signed and to be able to agree to the terms and conditions for my company as well as for Splunk's team."
"The incident response technique should be available out of the box. That isn't as available as we would expect."
"We are planning to do certifications, and there are many features, such as risk-based score and score detection, where the current training doesn't provide visibility to the analyst. They should offer training based on the features we use."
"The GUI could be improved to include some of the capabilities that other BI solutions have. The layout is a little restrictive where you can’t resize all the panels to exactly how you would like them without tweaking some XML code."
 

Pricing and Cost Advice

"The pricing is reasonable for the value that it gives because it does allow you to measure the cost ramifications of direct productivity loss for spends in both your infrastructure and on endpoints."
"Our management squeezed Aternity pretty hard on the pricing, in my opinion a little too much. I advise negotiating for sure, but I do think it left kind of a sour taste in Aternity’s mouth that we were being so pushy despite the fact that we were only purchasing a small number of licenses."
"In my opinion they are asking a lot for their SaaS solution, but I also know that that's the direction they're going... The current, on-prem solution is probably a fair price."
"You have to purchase it for 12 months, which is an issue because a lot of our customers are on a per-user-per-month type billing. There are a few additional costs. A lot of customers only get the essential licenses, and then they get what they call the application add-ons on top. They have to pay depending on how many customers and applications they want to monitor."
"The pricing is fair."
"It is definitely a premium solution; it is not an inexpensive product. We have to ensure that we are getting the most out of it in order to justify the cost. However, it is not cheap, especially when you want to install it on all your endpoints."
"Regarding cost, compared to other solutions, Aternity is pretty low. It's definitely lower-cost than others that we looked at, like Nexthink."
"Pricing is a bit high. Don't take that as the "be all, end all"."
"I've heard Splunk is often preferred over other options, but the cost can be prohibitive for smaller organizations."
"Pricing is probably its weakest spot. As compared to some competitors, Splunk is really expensive."
"It is expensive. I work for multiple clients. I am working for more than five clients, but most of the clients are switching from Splunk to Sentinel because of the cost. Even though Sentinel is very limited, clients are moving to Sentinel."
"It's more expensive than the other tools, but it's worth it. Every penny is worth it."
"Splunk is not a cheap solution and the license is billed annually."
"Although Splunk is an expensive product, it is designed to be utilized across your organization in order to maximize your ROI and lower your TCO."
"I have no opinion on pricing."
"From what I have seen so far, Splunk has multiple cost models. The one that we are using is pretty good when it comes to ingesting data into the environment. It has worked out pretty well."
report
Use our free recommendation engine to learn which Digital Experience Monitoring (DEM) solutions are best for your needs.
872,837 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
24%
Government
10%
Manufacturing Company
9%
Computer Software Company
8%
Financial Services Firm
14%
Computer Software Company
14%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise4
Large Enterprise32
By reviewers
Company SizeCount
Small Business110
Midsize Enterprise50
Large Enterprise257
 

Questions from the Community

What is your experience regarding pricing and costs for Aternity?
The solution's price is pretty comparable to the industry.
What needs improvement with Aternity?
Technology changes every six months, and improvements are necessary. The integration of AI agents could enhance these tools further, replacing traditional agents and plugins.
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

Aternity, Workforce APM, Aternity Frontline, Riverbed SteelCenter Aternity
No data available
 

Overview

 

Sample Customers

Maersk, SwissRe, Travis Perkins, Michelin, National Instruments, Simmons & Simmons, Lighthouse Guild
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about Alluvio Aternity vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
872,837 professionals have used our research since 2012.