Share your experience using Amazon Detective

We use Coralogix to analyze our log metrics. We were looking for an enhanced tool to help us secure our real-time data.

We have integrated Coralogix with Slack and other tools, which has helped us receive real-time alerts. We don't have to constantly monitor the tool because it generates alerts and pushes them to us, providing notifications on Slack. This enhancement has strengthened our security, fulfilling our need when searching for such a tool. 

Numerous data monitoring tools are available, but Coralogix somehow fine-tunes our policies and effectively supports our teams. This SaaS platform utilizes machine learning for behavioral analysis of logs, yielding the results we need. For instance, there was a scenario where we received extension logs that were difficult to interpret. However, we obtained the analysis with the help of the product.

Almost all the features we currently use in our product subscription are important to us. Regarding alerting or incident management, incident alert mapping, and suppression rules, we utilize almost all the features available on Coralogix. Additionally, we are sending all the logs, such as app logs, EPC flow logs, etcetera.

Nowadays, tools are often divided into modules. It would be helpful if Coralogix could integrate the main modules that any organization requires into a single subscription. It would streamline the process for organizations like ours.

Merging some of the modules into a single subscription would be beneficial. Nowadays, modules are often separated, so if an organization needs additional modules after subscribing to one, they may have to purchase another subscription. Combining the availability module with tracing metrics or other relevant modules would be beneficial.

I rate the platform's stability a nine out of ten.

I rate the platform's scalability an eight.

We did contact the technical support team when we encountered a deployment issue with Cloudflare. They assisted us promptly and provided helpful answers within the expected time frame.

Before adopting Coralogix, we relied on open-source solutions, but they needed to meet our needs effectively. It led us to explore and eventually invest in a commercial product.

The platform has a reasonable cost. I rate the pricing a three out of ten.

We also evaluated Palo Alto and other Palo Alto products as potential solutions. We opted for Coralogix over Palo Alto because its subscription plan offered better visibility and more features.

The alerting feature in Coralogix, integrated with Slack, has helped your team respond to incidents more quickly and effectively. We haven't experienced any incidents since implementation. Still, during the POC phase, the alerting feature proved to be prompt and reliable, assisting your team in promptly addressing potential issues.

It provides visualization tools that facilitate data analysis. These tools are available directly on the dashboard.

I recommend analyzing their organization's use case and scenario for new users. They should compare it with other tools to see if it suits their needs. If they find it suitable, then they should proceed with it. However, they should be prepared for the possibility that the tool may only suit some organizations. In our case, it worked well in pricing, scenario, and overall performance, so we opted to use it.


I rate it a nine out of ten.

We use Splunk Enterprise Security to teach our students about security awareness in a more positive way. We can show them how these tools work and the benefits they bring. This will help them understand the importance of using Splunk Enterprise Security, not just for our clients, but for ourselves as well.

The Splunk dashboards are user-friendly.

I would rate Splunk's threat topology an eight out of ten. The threat topology provides a complete map so we can investigate security incidents quickly.

To effectively utilize Splunk for malicious activity analysis, a comprehensive understanding of the different event types and their functionalities is crucial. This involves examining specific events associated with potential malware, such as changes in system behavior. By gaining clear visibility into these events, we can identify the malware's goals within our environment and stop it.

Splunk helps us detect threats within three minutes.

We realized the benefits of Splunk within eight months. Splunk Enterprise Security helped secure our environment faster than other security solutions.

Splunk has helped reduce our alert volume.

The Splunk queries are valuable. There are a lot of query options available in Splunk compared to Sumo Logic.

It is difficult to monitor multiple cloud environments using Splunk.

I would like the ability to view logs for specific instances and not have to pull the logs for the entire Cloud environment in Splunk.

As the number of environments monitored by Splunk increases, the resource demands also grow, potentially slowing down the system.

Splunk's threat intelligence system gets a seven out of ten. There are frequent delays in updates, which can take up to three months for Splunk to make available.

I have been using Splunk Enterprise Security for one year.

I would rate the stability of Splunk Enterprise Security ten out of ten.

The resilience is good. I have not faced any issues.

I would rate the stability of Splunk Enterprise Security nine out of ten.

The technical support team is good.

Positive

The initial setup is straightforward. Splunk provides wonderful documentation to help with the deployment.

Splunk Enterprise Security is priced lower than competitors.

Splunk Enterprise Security is a good choice for startup companies because of the lower cost.

I would rate Splunk Enterprise Security nine out of ten.

Maintenance is required to address the false positive alerts.

I recommend Splunk Enterprise Security to others.