Try our new research platform with insights from 80,000+ expert users

Amazon OpenSearch Service vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 16, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Amazon OpenSearch Service
Ranking in Log Management
21st
Average Rating
7.6
Reviews Sentiment
7.2
Number of Reviews
12
Ranking in other categories
Application Performance Monitoring (APM) and Observability (22nd), Search as a Service (3rd)
Splunk Enterprise Security
Ranking in Log Management
2nd
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
371
Ranking in other categories
Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

As of November 2025, in the Log Management category, the mindshare of Amazon OpenSearch Service is 2.7%, up from 1.1% compared to the previous year. The mindshare of Splunk Enterprise Security is 7.5%, down from 8.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Market Share Distribution
ProductMarket Share (%)
Splunk Enterprise Security7.5%
Amazon OpenSearch Service2.7%
Other89.8%
Log Management
 

Featured Reviews

SK
Handling complexities challenges with data processing while visualizations enhance monitoring and debugging
In terms of data handling capabilities with Amazon OpenSearch Service, they can be complex and managing data in comparison to other SIM solutions is a major drawback, as it is very hard to handle the data. We definitely want Amazon to optimize the data handling aspect, as ElasticSearch is the parent of OpenSearch. If Amazon makes changes in OpenSearch, it would be very useful for us, making it more user-friendly with simple buttons to perform tasks.
reviewer1469784 - PeerSpot reviewer
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"They have the good documentation in the help text and that is the reason the Amazon is the perfect solution in the current market."
"The stability of the product is good."
"This service already sorts data like vectors. They have classified the storage pre-defined."
"The business analytics capabilities are the most important feature it provides."
"The initial set up is very easy...We really appreciate Amazon!"
"It enables us to efficiently search and retrieve our event data, offering us a versatile approach to locate specific information within these logs."
"Regarding valuable features of the solution, we found with the process, which we have used in both cases where we used the solution that while you're seeing the streaming of data, you can analyze in the initial phase what sort of data you are streaming and whether it is valuable."
"I would definitely recommend Amazon OpenSearch Service to other professionals due to its fast and reliable search capabilities."
"The most valuable aspect of the solution is the dashboard. It's very intuitive."
"The alerts are very effective."
"The integration and plugin availability are nice; the AI module is also great."
"It is the best tool if you have a complex environment or if data ingestion is too huge."
"The ability to identify risks as they come in is quite good."
"Splunk has machine learning which is a valuable feature."
"I like the ease with which dashboards can be created."
"It is very scalable."
 

Cons

"One improvement I would like to see is support for auto-scaling."
"There is a problem with the database. Amazon only provides the hosting to run our applications bias, but there is no option to manage the database within the Elasticsearch product."
"Amazon Elasticsearch can improve the bullion in the near search and the ease of integration with Kibana. Additionally, there could be more flexibility in the configuration and documentation."
"In terms of data handling capabilities with Amazon OpenSearch Service, they can be complex and managing data in comparison to other SIM solutions is a major drawback, as it is very hard to handle the data."
"The price is fair yet leans towards the expensive side. I'd rate it five out of ten with respect to capabilities vs. cost."
"I want to see a new feature in Amazon Elasticsearch Service that allows users to create default filters for filtered levels."
"The configuration should be more straightforward because we had to select a lot of things."
"We faced documentation challenges during integration after migrating from Elasticsearch to Amazon OpenSearch Service. Better documentation on integration, query handling, and a more user-friendly UI could enhance the product."
"Its pricing model and integration with third-party services can be improved. We had faced an issue with integration. The alerting feature is currently not available with Splunk, but it is definitely available with Datadog and PagerDuty. They should include this feature. A few dashboards in Splunk look quite old and are not that modern. They aren't bad, but improving these dashboards will definitely make Splunk more attractive and usable. I read in a few blog posts that there were a few security incidents related to Splunk agents. So, it can be made more secure."
"Some of the queries are difficult to run and have room for improvement."
"There is a learning curve in order to start using machine learning. We have been trying to do it for three years, and we have not managed anything. It is too complex."
"We will receive alerts only for the administrators and deployment servers, but not for all servers."
"It is very complicated to write your own correlation rules without the help of Splunk support."
"We don't have SOAR products from Splunk. I believe that's an important piece."
"Splunk can improve regex/asset analysis as we do not want to crawl until it is done."
"The Enterprise Security app could be improved. We have had trouble with it working from the first day."
 

Pricing and Cost Advice

"Compared to other cloud platforms, it is manageable and not very expensive."
"You only pay for what you use."
"There is a community edition available and the price of the commercial offering is reasonable."
"The solution is not expensive, but priced averagely, I will say."
"It is quite expensive."
"I am fine with the licensing, but in terms of the cost, it is expensive for the data that we have. We have an open discussion with our account rep about this."
"The price is comparable."
"In terms of pricing, I believe Splunk is unreasonably costly for the majority of mid and small-sized companies."
"Further reductions would be fantastic, and I believe that more and more people would flock to it."
"Splunk Enterprise Security is expensive."
"From what I have seen so far, Splunk has multiple cost models. The one that we are using is pretty good when it comes to ingesting data into the environment. It has worked out pretty well."
"The licensing model can be expensive, but the value it provides is significant."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
873,808 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
12%
Manufacturing Company
10%
Government
8%
Financial Services Firm
14%
Computer Software Company
13%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise2
Large Enterprise2
By reviewers
Company SizeCount
Small Business109
Midsize Enterprise50
Large Enterprise260
 

Questions from the Community

What do you like most about Amazon OpenSearch Service?
We retrieve historical data with just a click of a button to move it from cold to hot or warm because it's already stored in the backend storage
What is your experience regarding pricing and costs for Amazon OpenSearch Service?
I would consider the pricing as a six based on how much data we are handling; if we handle minimal data, it's cheap, but for large data, it becomes costly. Our clients usually pay between $1,000 to...
What needs improvement with Amazon OpenSearch Service?
In terms of data handling capabilities with Amazon OpenSearch Service, they can be complex and managing data in comparison to other SIM solutions is a major drawback, as it is very hard to handle t...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

Amazon Elasticsearch Service
No data available
 

Overview

 

Sample Customers

VIDCOIN, Wyng, Yellow New Zealand, zipMoney, Cimri, Siemens, Unbabel
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about Amazon OpenSearch Service vs. Splunk Enterprise Security and other solutions. Updated: November 2025.
873,808 professionals have used our research since 2012.