Try our new research platform with insights from 80,000+ expert users

Avantra vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Avantra
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
5
Ranking in other categories
Application Performance Monitoring (APM) and Observability (58th), SAP Service Providers (15th), Server Monitoring (32nd), IT Infrastructure Monitoring (62nd)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
375
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. Avantra is designed for SAP Service Providers and holds a mindshare of 1.9%, down 3.7% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 7.4% mindshare, down 10.0% since last year.
SAP Service Providers Market Share Distribution
ProductMarket Share (%)
Avantra1.9%
Accenture SAP Services11.8%
Deloitte SAP Services11.5%
Other74.8%
SAP Service Providers
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Splunk Enterprise Security7.4%
Wazuh7.3%
IBM Security QRadar5.6%
Other79.7%
Security Information and Event Management (SIEM)
 

Featured Reviews

Mani Velayudhan - PeerSpot reviewer
Manager, SAP Basis at The Scotts Miracle-Gro Company
Useful automation capabilities, scales well, and simple implementation
We are currently exploring automation options for various areas, and Avantra should consider implementing automation for change request management, an area they have not yet ventured into. While Avantra is currently excelling in monitoring and system refreshes, there is scope for improvement in automating change request management. In addition to primarily focusing on SAP, Avantra currently performs kernel patches which are core SAP patches. However, exploring more into OS patching could be another potential area for Avantra to expand its automation capabilities. Looking ahead to future releases, I would like to see more advanced automation features. As a long-term goal, I am considering the possibility of automating SAP system upgrades. While this would not be an easy feat, advancements in technology may make it feasible in the future. Overall, a key feature I hope to see in future releases is increased automation capabilities.
reviewer1469784 - PeerSpot reviewer
Senior Manager at a financial services firm with 10,001+ employees
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of Avantra is automation. The reduction of manual work and having them automated is one of the top reasons why I would use it."
"You can customize alerts based on need."
"It's very easy to manage and use."
"We have created a few custom use cases for Splunk that have helped us detect threats faster. For example, we set up endpoint-related data models and specialized setups for various scenarios. It's more efficient than some other products I've used."
"Splunk Enterprise Security is a very useful application to collect all the logs and also to find out the problems."
"The tool drastically reduces SOC overhead. Its integration with our tool suite is great and helps us correlate events. The solution is also a lot faster than our standalone instances."
"I would assess the stability and reliability of Splunk Enterprise Security as generally good, with very few downtime, crashes, and performance issues."
"I appreciate the integrations with the SOAR architectures and the expandability that can be used throughout the entire ecosystem of Splunk Enterprise Security."
"The feature that I have found most valuable with Splunk is the ability to sift through a bunch of data very quickly."
"We have found all the features useful. However, the dashboarding and logging have been very helpful. Additionally, the log analysis does a great job."
"Splunk RBA or risk-based alerting definitely made our lives a lot easier; we went from hundreds of alerts having to be triaged a day, that generally could be false positives or just noise, and bubble them into one overall alert that we can look at on a per-day basis and see what's rising to the top and respond faster, have a higher rate of true positives and find evil a lot quicker."
 

Cons

"We are currently exploring automation options for various areas, and Avantra should consider implementing automation for change request management, an area they have not yet ventured into. While Avantra is currently excelling in monitoring and system refreshes, there is scope for improvement in automating change request management. In addition to primarily focusing on SAP, Avantra currently performs kernel patches which are core SAP patches. However, exploring more into OS patching could be another potential area for Avantra to expand its automation capabilities."
"The dashboard needs to improve."
"The machine-learning is lacking and should be improved."
"The training was mostly sales-focused, like how to monitor your sales. It was hard to then come back from doing the training and try to switch it to a cybersecurity focus because all the training we did was sales oriented. The basic training didn't really touch on any kind of cybersecurity use cases or anything like that. That would have been great to see in the training."
"Could be more user friendly."
"A problem that we had recently had was we licensed it based on how much data you upload to them every day. Something changed in one our applications, and it started generating three to four times as many logs and. So now, we are trying to assemble something with parts of the Splunk API to warn ourselves, then turn it off and throttle it back more. However it would be better if they had something systematically built into the product that if you're getting close to your license, then to shut things down."
"Sometimes talking through email isn't the most effective method, as they go through troubleshooting steps we've already taken, which requires additional back-and-forth communication."
"The prices are complicated as we operate in a small third-world country."
"It can be tough to get a hold of somebody in technical support depending on the complexity of the issue."
"You can run a script from an event, but it needs many clicks to run that integration, which could be made easier."
"Splunk Enterprise Security has not helped reduce our alert volume."
 

Pricing and Cost Advice

Information not available
"It would be nice if the pricing were cheaper. However, we did purchase it."
"Pricing is pretty fair."
"Some of the insights that we have obtained as a part of using Splunk have greatly helped us in increasing our revenue in terms of selling our products."
"Free Splunk license for PoCs on personal machines and the ability to scale the PoC to an enterprise level app."
"Pricing is probably its weakest spot. As compared to some competitors, Splunk is really expensive."
"Splunk Enterprise Security is priced lower than competitors."
"It is pretty straightforward and based on the sizing. If I compare it with other competitors, it makes sense."
"I am not personally involved with the pricing of the solution."
report
Use our free recommendation engine to learn which SAP Service Providers solutions are best for your needs.
879,889 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
12%
Manufacturing Company
11%
Aerospace/Defense Firm
6%
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
9%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business109
Midsize Enterprise50
Large Enterprise264
 

Questions from the Community

Ask a question
Earn 20 points
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Overview

 

Sample Customers

Migros, Strauss, Migros, LAM research, Deloitte, Deloitte, Kiewit
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about Avantra vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
879,889 professionals have used our research since 2012.