Try our new research platform with insights from 80,000+ expert users

AppNeta by Broadcom vs Splunk Enterprise Security comparison

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

AppNeta by Broadcom
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
17
Ranking in other categories
Network Monitoring Software (36th), Cloud Monitoring Software (27th), Digital Experience Monitoring (DEM) (9th), DX NetOps (3rd)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.6
Number of Reviews
315
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

AppNeta by Broadcom and Splunk Enterprise Security aren’t in the same category and serve different purposes. AppNeta by Broadcom is designed for DX NetOps and holds a mindshare of 18.5%, down 19.0% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 9.4% mindshare, down 12.1% since last year.
DX NetOps
Security Information and Event Management (SIEM)
 

Featured Reviews

Cliff Chapman - PeerSpot reviewer
Excellent support, easy configuration, and a reliable tool to know what the problem is and where the problem is
They should try and make diagnostics run a bit quicker. When the problem occurs on a network, AppNeta runs automatic diagnostics on the end-to-end path. The path it was testing only to the destination, it now runs the same test to all of the devices and all the intermediate devices. Depending on the number of intermediate devices, it can take several minutes to run. If we're trying to find or diagnose a problem that only lasts two or three minutes, it may be that the diagnostics is still running by the time the problem is cleared. The only thing, which I have also mentioned to AppNeta in the past, is that there should be much faster and much more lightweight diagnostics, which can be completed within 30 seconds or one minute, rather than in 5 to 10 minutes. Currently, when we have short-duration problems, we use a different tool, but we only use that different tool for short-duration problems. With AppNeta, as long as the problem exists for more than a few minutes, such as within 10 to 15 minutes, we can normally tell where the problem is. However, most of the problems that we deal with are intermittent. They're very rarely a permanent condition that needs to be addressed. That makes it more difficult to troubleshoot. We would look to see at least two or three events and hope they show the same results to raise our confidence that we've actually found the problem, rather than just a problem.
ROBERT-CHRISTIAN - PeerSpot reviewer
Has many predefined correlation rules and is brilliant for investigation and log analysis
It is very complicated to write your own correlation rules without the help of Splunk support. What Splunk could do better is to create an API to the standard SIEM tools, such as Microsoft Sentinel. The idea would be to make it less painful. In ELK Stack, Kibana is the query language with which you can search log files. I believe Splunk has also a query language in which they search their log files, but once you have identified the log file that you want to use for further security correlation, you want to very quickly transport that into your SIEM tool, such as Microsoft Sentinel. That is something that Splunk could make a little bit less painful because it is a lot of effort to find that log file and forward it. An API with Microsoft Sentinel or a similar SIEM tool would be a good idea.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The main feature that we use is what they call Delivery, which is the testing of network paths end-to-end."
"Delivery and experience are valuable. The usage in terms of the traffic application captures and other similar things is also valuable."
"A lot of times one of the AppNeta transactions showed that there is an issue, whereas everything seemed to be working properly. Once we dug into it, we realized that it really was highlighting a problem that otherwise we would not have seen."
"The solution's technical support is very good."
"The product helps us understand networks and user experience. It helps us to understand the issues."
"We get complete, hop-by-hop visibility into the internet and we can know how much latency is taking place from one hop to another. That way, we know whether a particular hop belongs to the ISP, or that it is something owned by our own client's office, or is something to do with the SaaS network."
"This solution helps prove that, if we move to cloud, we'll still be as effective as we are on-premises."
"The reporting aspect is good and it does what I need it to do."
"The most valuable feature is the custom dashboard feature."
"There are quite a lot of things that we find useful. Splunk agents are useful and good. Its UI is quite impressive."
"The most valuable aspect of the solution is the dashboard. It's very intuitive."
"I very much enjoy Splunk's robust search nature, which enables me to find the data I want within the data I have."
"We used it to create a custom anomaly detection data model to monitor the activity of our back-end services on an hourly basis relative to the past three months of activity."
"My customer was integrated with many third-party credentials and other threat sources as well. The integration part was seamless and easy. The rates for allocating valuable information and IOCs from different sources are also good."
"The ability to ingest different log types from many different products in our environment is most valuable."
 

Cons

"Having to deal with configuring the end devices using a USB stick is a bit cumbersome. It would be nice if there was a better way of handling that."
"I think some of the product's documentation has shortcomings and needs improvement."
"They should try and make diagnostics run a bit quicker. When the problem occurs on a network, AppNeta runs automatic diagnostics on the end-to-end path. The path it was testing only to the destination, it now runs the same test to all of the devices and all the intermediate devices. Depending on the number of intermediate devices, it can take several minutes to run. If we're trying to find or diagnose a problem that only lasts two or three minutes, it may be that the diagnostics is still running by the time the problem is cleared. The only thing, which I have also mentioned to AppNeta in the past, is that there should be much faster and much more lightweight diagnostics, which can be completed within 30 seconds or one minute, rather than in 5 to 10 minutes."
"AppNeta by Broadcom needs to add more features to its dashboards. It also needs to work on providing out-of-the-box reports."
"Cloud monitoring could be better. That's one of the biggest pain points for me. I have shared this feedback with them multiple times, but they're limited to some extent. That's one area where I've seen a problem."
"I would like to see some advanced dashboard features. It could also be integrated with third-party tools. For example, an integration with a reporting solution would be helpful. Out-of-the-box, there are few dashboards or reports. What it does have is useful, but there should be additional dashboards."
"Instead of integrating with other people, they should expand their interior capabilities."
"The product's price may be an area of concern where improvements are required."
"I think the machine learning should be emphasized. Now, it's really important to analyze Big Data, data mining. A SIEM solution, like Splunk, needs an improved data mining solution, artificial intelligence."
"It is a good product, but the Achilles heel for a lot of organizations is the cost model for it because it gets expensive. That's because the model is based on how much data it processes a day, which can be prohibitive, especially if you have a lot of data. A lot of customers may not be ready for the sticker shock on how to fully leverage the product. I realized that the reason for that is that when it was originally designed, it was kind of like a big data modeling application. If they want to have a bigger customer base, they can come out with subsets of their product that are focused on specific things and have different pricing models. It may help with the cost."
"The solution could improve by making it more business analysis oriented. The way it is now is designed more for developers."
"We had an instance when Splunk failed and it took us a couple of days to recover."
"It takes time to train people."
"Sometimes, there is latency in the logs."
"When files are absent, troubleshooting becomes difficult, and performance issues inevitably arise."
 

Pricing and Cost Advice

"We typically don't get involved in the commercial side, but the list price is probably something like $3,000 for a small probe. However, that gives all of the features that the probe can do, whether or not you use them. In the old days, up until two or three years ago, each of the separate features was a separately licensable module so that you could add things that you wanted, and you didn't have to add things that you didn't want. They've changed all that now, and everything the probe can do is a part of the base license."
"It's worth the money."
"AppNeta by Broadcom is not expensive."
"The small probe is probably around $3,000 and the very large probe that they make for massive data centers might be $50,000 or $60,000. It's a subscription model, so the payment is per year."
"I find the solution's price to be fairly good."
"I inherited this from a different version, and I haven't yet gone through a renewal because we had purchased three years upfront. So, to me, that still remains to be seen. Once it comes up for renewal, we'll see what happens. Especially because now it is Broadcom, it is going to change anyway."
"Broadcom software is always a little expensive because they provide quality."
"Splunk should be able to integrate with other product using the free version."
"Pricing and licensing are quite high compared to other tools or SIEM tools, but the features justify it."
"It is expensive. I work for multiple clients. I am working for more than five clients, but most of the clients are switching from Splunk to Sentinel because of the cost. Even though Sentinel is very limited, clients are moving to Sentinel."
"It is quite expensive."
"Splunk is expensive based on our current requirements, but it's obviously worth what we pay."
"Splunk can be an expensive solution. It all depends on how we configure the alerts and the events from the endpoints. You can save some money if you do that correctly. If not, it becomes an expensive solution."
"The licensing is good, but the pricing absolutely needs some work. It is very high."
"The pricing can be better. We are already considering Elastic because Splunk is too expensive. You have to pay based on per-day ingestion. There should be a more flexible model for the use cases where one day you have a huge amount, and on other days, it is quite less."
report
Use our free recommendation engine to learn which DX NetOps solutions are best for your needs.
860,632 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Computer Software Company
44%
Financial Services Firm
12%
Manufacturing Company
9%
Real Estate/Law Firm
5%
Computer Software Company
14%
Financial Services Firm
14%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What open source tool can one use to measure bandwidth from one's upstream service provider?
One I am looking closely at is AppNeta. They have an appliance that can digest the flow and do a better job than Netflow. The other one we are using is ExtraHop. This has both a Datacenter Hig...
What do you like most about AppNeta?
The product helps us understand networks and user experience. It helps us to understand the issues.
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Overview

 

Sample Customers

Ebay, Citrix, National Instruments, Marriott, AT&T, Bon-Ton, McDonald's, Netflix, PayPal, Uber, QAD
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.