Palantir Foundry vs Splunk Enterprise Security comparison

Cancel
You must select at least 2 products to compare!
Palantir Logo
880 views|458 comparisons
84% willing to recommend
Splunk Logo
3,677 views|2,990 comparisons
92% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Palantir Foundry and Splunk Enterprise Security based on real PeerSpot user reviews.

Find out in this report how the two IT Operations Analytics solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Palantir Foundry vs. Splunk Enterprise Security Report (Updated: March 2024).
771,157 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The solution provides an end-to-end integrated tech stack that takes care of all utility/infrastructure topics for you.""It's scalable.""Palantir Foundry is a robust platform that has really strong plugin connectors and provides features for real-time integration.""The ease of use is my favorite feature. We're able to build different models and projects or combine different projects to build one use case.""The solution offers very good end-to-end capabilities.""The interface is really user-friendly.""Live video sessions enhance the available documentation and allow you to ask questions directly.""It is easy to map out a workflow and run trigger-based scripts without having to deploy to another server."

More Palantir Foundry Pros →

"The solution's newly developed dashboard is pretty amazing.""The most valuable feature is the incident dashboard, and the extensive use of correlation searches, which isn't available with a standard Splunk search package. This feature is important to me because it enables SOC analysts to do their job more efficiently and be able to investigate or mediate incidents at a faster pace.""Splunk is a user-friendly solution.""We were able to create a catalog of dashboards and have a holistic view at all levels. We could understand our business much better. Real-time errors, which were buried in emails before now, surfaced up on dashboards.""It's better than IBM, in my opinion, because it's an independent entity.""It has a big user base, so the community is useful.""It helps streamline troubleshooting and log analysis.""In the past we used the different application to collect logs. We used SurfWatch and VMware to do so. But, we found that the Splunk has more capacity to do more in less time. They provide a aster speed to index all the events , and this is a huge asset."

More Splunk Enterprise Security Pros →

Cons
"The data lineage was challenging. It's hard to track data from the sources as it moves through stages. Informatica EDC can easily capture and report it because it talks to the metadata. This is generated across those various staging points.""Difficult to receive data from external sources.""They do not have a data center in Europe, and we have lots of personally identifiable information in our dataset that needs to be hosted by a third-party data center like Amazon or Microsoft Azure.""The frontend capabilities of Palantir Foundry could be improved.""It requires a lot of manual work and is very time-consuming to get to a functional point.""Compared to other hyperscalers, Palantir Foundry is complex and not so user-intuitive.""Some error messages can be very cryptic.""It would be helpful to build applications based on Azure functions or web apps in Palantir Foundry."

More Palantir Foundry Cons →

"I feel as though a major focus of upcoming releases should be set on Machine Learning, Predictive Analytics, and I would enjoy to see more security focused add-ons and apps developed by the vendor.""I feel the solution to be too slow.""The GUI could be improved to include some of the capabilities that other BI solutions have. The layout is a little restrictive where you can’t resize all the panels to exactly how you would like them without tweaking some XML code.""The monitoring aspect of Splunk could be improved. We have to do some queries to get as much information as CrowdStrike or other solutions provide. If you run a big query, you will see a delay. That is the only concern we have because it will take some time if you query large data sets.""Enterprise security: Splunk must work on clarifying the solution to customers and explain how to gain more from it.""It would be great if I could have a certain dialogue box in Splunk that uses innovative AI tools like ChatGPT, which are available now in the tech department.""Its search or filtering capability is nice, but it can be improved. It is currently a bit complicated, and it should be simplified. If we can write the search filter in a more simplified way, it would be better.""Being a SIEM solution with a centralized dashboard, we would like to have more options to customize it."

More Splunk Enterprise Security Cons →

Pricing and Cost Advice
  • "Palantir Foundry has different pricing models that can be negotiated."
  • "It's expensive."
  • "The solution’s pricing is high."
  • More Palantir Foundry Pricing and Cost Advice →

  • "Pricing and licensing is quite expensive. But for the value the product provides, it seems at par in the market."
  • "Although Splunk is an expensive product, it is designed to be utilized across your organization in order to maximize your ROI and lower your TCO."
  • "It is not cheap."
  • "Splunk Enterprise becomes extremely expensive after the 20GB/month license."
  • "You will eat up whatever you purchase quickly. The level of insights that Splunk empowers is addictive."
  • "Splunk licensing model might seem expensive but with all the gain in functionalities you will have compared to traditional SIEM solutions I think it’s worth the price."
  • "Pricing is pretty fair."
  • "While licensing can be a concern, there are ways to reduce the licensing costs including filtering some events."
  • More Splunk Enterprise Security Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which IT Operations Analytics solutions are best for your needs.
    771,157 professionals have used our research since 2012.
    Comparison Review
    Vinod Shankar
    Questions from the Community
    Top Answer:Palantir Foundry is a robust platform that has really strong plugin connectors and provides features for real-time integration.
    Top Answer:The solution's pricing is high. Compared to other hyperscalers, Palantir Foundry is complex and not so user-intuitive. There could possibly be a little bit of overhead concerning the maintainability… more »
    Top Answer:Palantir Foundry is being used for multiple hybrid cloud integrations in one of the services we provide for an existing US-based customer. It's all about getting together data from Azure and Amazon… more »
    Top Answer:For tools I’d recommend:  -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also,… more »
    Top Answer:It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log… more »
    Top Answer:Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we… more »
    Ranking
    5th
    Views
    880
    Comparisons
    458
    Reviews
    12
    Average Words per Review
    595
    Rating
    7.6
    1st
    Views
    3,677
    Comparisons
    2,990
    Reviews
    69
    Average Words per Review
    930
    Rating
    8.4
    Comparisons
    Learn More
    Overview

    Palantir Foundry is an enterprise data management platform offering comprehensive tooling for working with big data. Because it is an operating system made for modern enterprises, it is highly available and a continuously updated platform.

    Palantir Foundry is a fully managed SaaS platform that spans from cloud hosting and data integration to flexible analytics, visualization, model-building, operational decision-making, and decision capture. It equips technical and non-technical users to make data-driven operational decisions.

    Palantir Foundry includes tools to integrate data of any scale, format, or structure, and also has granular, flexible access controls for individual datasets. In addition, it has an open, modular architecture with multiple RESTful APIs, it has native applications for developing machine learning and artificial intelligence, it provides sophisticated data science applications for users of all technical abilities, and much more.

    Palantir Foundry Features

    The most valuable Palantir Foundry features include:

    Security, flexibility, interoperability, easy deployment, built-in role classification, purpose-based access controls, interoperable architecture, model integration, AI modeling tools, ontology, custom workflows, team-specific applications, self-serve analytics, lineage system, operational application building, 200+ data connectors, data versioning, change management framework, sand decision orchestration, and custom dashboard and report building tools.

    With Palantir Foundry You Can:

    • Accelerate development & operations
    • Collaborate globally
    • Save time on security
    • Reduce costs

    Palantir Foundry Benefits

    Some of the many Palantir Foundry benefits include:

    • Modular: Because Palantir Foundry is modular, it can integrate with existing infrastructure.

    • Granular governance: Robust data governance controls help ensure seamless compliance, auditability, and security.

    • Secure data sharing: The security infrastructure allows you to share data securely, within organizations and with chosen partners.

    • Rapid integration: Palantir Foundry can rapidly integrate models and data from data platforms into an operational ontology, and can also fuel existing data platforms.

    • Stand-alone deployment: Palantir Foundry can be deployed standalone and can provide all necessary capabilities for data connection, data integration, and model building.

    • Prevent lock-in: The data and model integration suites are designed to prevent lock-in, and assume that tools will be interoperating with Palantir Foundry as an organization grows.

    • No SQL necessary: Users do not have to use SQL queries or employ engineers to write strings in order to search petabytes of data. With Palantir Foundry, natural language is used to query data and results are returned in real-time.

    • Excellent data integration: Palantir Foundry provides secure, scalable, and resilient integration of all data sources.

    • Availability: The Palantir platform uses DNS routing, gateways and elastic load balancing to ensure availability. Dedicated accounts and virtual resources are used on a per customer basis.

    • Multiple metrics types: The Palantir platform provides hundreds of metrics. Some include average session length, drop-off rate, number of logins per user, number of accounts, and search speed.

    Reviews from Real Users

    PeerSpot users like Palantir Foundry because it has many advantages:

    “It is user-friendly, good automation, and allows you to do a better job of data governance.” - Associate, Inhouse Consulting at a pharma/biotech company

    “Works seamlessly with good end-to-end capabilities and the capability to scale.- Wallace H., Sr. Director at a tech services company




    Splunk Enterprise Security is a SIEM, log management, and IT operations analytics tool. The solution provides users with the ability to secure their information and manage their data in the cloud, data centers, or other applications. Splunk Enterprise Security also offers visibility from different areas, levels, and devices, rather than from a single system, thus, providing its users with flexibility. Splunk Enterprise Security can monitor data and analyze, detect, and prevent intrusions. This benefits users as it provides alerts to possible intrusions, helps users to be proactive, and reduces risk factors. 

    Full visibility across your environment

    Break down data silos and gain actionable intelligence by ingesting data from multicloud and on-premises deployments. Get full visibility to quickly detect malicious threats in your environment.

    Fast threat detection

    Defend against threats with advanced security analytics, machine learning and threat intelligence that focus detection and provide high-fidelity alerts to shorten triage times and raise true positive rates.

    Efficient investigations

    Gather all the context you need and initiate flexible investigations with security analytics at your fingertips. The built-in open and extensible data platform boosts productivity and drives down fatigue.

    Open and scalable

    Built on an open and scalable data platform, you can stay agile in the face of evolving threats and business needs. Splunk meets you where you are on your cloud journey, and integrates across your data, tools and content.

    Sample Customers
    Merck KGaA, Airbus, Ferrari,United States Intelligence Community, United States Department of Defense
    Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
    Top Industries
    REVIEWERS
    Computer Software Company33%
    Pharma/Biotech Company11%
    Healthcare Company11%
    Non Tech Company11%
    VISITORS READING REVIEWS
    Manufacturing Company12%
    Financial Services Firm11%
    Computer Software Company10%
    Government7%
    REVIEWERS
    Computer Software Company20%
    Financial Services Firm15%
    Government9%
    Energy/Utilities Company8%
    VISITORS READING REVIEWS
    Financial Services Firm15%
    Computer Software Company14%
    Government9%
    Manufacturing Company7%
    Company Size
    REVIEWERS
    Small Business17%
    Midsize Enterprise42%
    Large Enterprise42%
    VISITORS READING REVIEWS
    Small Business17%
    Midsize Enterprise11%
    Large Enterprise72%
    REVIEWERS
    Small Business31%
    Midsize Enterprise11%
    Large Enterprise57%
    VISITORS READING REVIEWS
    Small Business19%
    Midsize Enterprise13%
    Large Enterprise68%
    Buyer's Guide
    Palantir Foundry vs. Splunk Enterprise Security
    March 2024
    Find out what your peers are saying about Palantir Foundry vs. Splunk Enterprise Security and other solutions. Updated: March 2024.
    771,157 professionals have used our research since 2012.

    Palantir Foundry is ranked 5th in IT Operations Analytics with 13 reviews while Splunk Enterprise Security is ranked 1st in IT Operations Analytics with 240 reviews. Palantir Foundry is rated 7.6, while Splunk Enterprise Security is rated 8.4. The top reviewer of Palantir Foundry writes "The data visualization is fantastic and the security is excellent". On the other hand, the top reviewer of Splunk Enterprise Security writes "It has a drag-and-drop interface, so you don't need to know SQL or Java to construct a query ". Palantir Foundry is most compared with Azure Data Factory, Palantir Gotham, SAP Data Services, AWS Glue and Mule Anypoint Platform, whereas Splunk Enterprise Security is most compared with Wazuh, Dynatrace, IBM Security QRadar, Elastic Security and Microsoft Sentinel. See our Palantir Foundry vs. Splunk Enterprise Security report.

    See our list of best IT Operations Analytics vendors.

    We monitor all IT Operations Analytics reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.