AWS Auto Scaling vs Splunk Enterprise Security comparison

Application Performance Monitoring (APM) and Observability

Download the complete report

Helped 860,825 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AWS Auto Scaling

Average Rating

8.8

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Application Performance Monitoring (APM) and Observability (15th)

Splunk Enterprise Security

Average Rating

8.4

Reviews Sentiment

7.6

Number of Reviews

315

Ranking in other categories

Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. AWS Auto Scaling is designed for Application Performance Monitoring (APM) and Observability and holds a mindshare of 0.2%, up 0.1% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 9.4% mindshare, down 12.1% since last year.

Application Performance Monitoring (APM) and Observability

Security Information and Event Management (SIEM)

Featured Reviews

Mbula Mboma

AWS Cloud Re-Start Program Specialist at Orange RDC (Congo)

Boosts deployment efficiency with seamless automatic scaling capabilities

My primary use case for Auto Scaling is mainly to deploy applications at scale Auto Scaling has made the deployment of applications more efficient, allowing us to manage traffic and maintain performance as user counts increase. Auto Scaling is a cool feature that works well and its automatic…

Read full review

ROBERT-CHRISTIAN

CTO at kyndryl

Has many predefined correlation rules and is brilliant for investigation and log analysis

It is very complicated to write your own correlation rules without the help of Splunk support. What Splunk could do better is to create an API to the standard SIEM tools, such as Microsoft Sentinel. The idea would be to make it less painful. In ELK Stack, Kibana is the query language with which you can search log files. I believe Splunk has also a query language in which they search their log files, but once you have identified the log file that you want to use for further security correlation, you want to very quickly transport that into your SIEM tool, such as Microsoft Sentinel. That is something that Splunk could make a little bit less painful because it is a lot of effort to find that log file and forward it. An API with Microsoft Sentinel or a similar SIEM tool would be a good idea.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"AWS Auto Scaling is cost-effective and very useful for businesses."

"The most valuable feature of the solution is that it scales automatically without manual intervention based on the metrics we provide."

"It can scale."

"The product provides self-healing features."

"The tool gives you the flexibility to scale up and grow. The solution is also fast to deploy."

"The most valuable feature is the ability to select a minimum amount of active servers so that a new server automatically launches if one fails."

"It efficiently handles traffic, ensuring we are not running expenses and the infrastructure is strong enough to handle the load."

"The various scaling options available, such as step scaling, are particularly useful."

More AWS Auto Scaling pros

"It's better than IBM, in my opinion, because it's an independent entity."

"My customer was integrated with many third-party credentials and other threat sources as well. The integration part was seamless and easy. The rates for allocating valuable information and IOCs from different sources are also good."

"Scalability-wise, the tool is awesome since you can add or reduce your resources in an easy way."

"The most valuable features include agility and Splunk Enterprise Security's ability to quickly search for alerted items, as well as the capacity to create custom alerts using the SQL language employed by Splunk."

"On the cloud, we are pushing through less than half a petabyte of data. So far, it has been fairly stable because it runs on all the underlying AWS infrastructures."

"The scalability is good."

"I like the ease with which dashboards can be created."

"I really like the user interface and how it works."

More Splunk Enterprise Security pros

Cons

"The setup can be a bit complex in some situations."

"The tool must include AI features."

"The billing and cost optimization of the solution could be improved."

"The speed of the solution must be improved."

"It has latency issues. It depends on the distribution used, whether it's Amazon Linux, Windows Linux, etc. Occasionally, there are latency issues, which might lead to slower performance."

"Flexibility in configuring the workload is missing in AWS Auto Scaling."

"The solution's infrastructure scalability and elasticity could be improved."

"The product’s pricing needs improvement."

More AWS Auto Scaling cons

"I think the machine learning should be emphasized. Now, it's really important to analyze Big Data, data mining. A SIEM solution, like Splunk, needs an improved data mining solution, artificial intelligence."

"The threat detection library needs to increase the frequency at which the playbooks are updated."

"In the next release, they should include machine learning-based rules that would streamline the process of finding anomalies."

"The monitoring aspect of Splunk could be improved. We have to do some queries to get as much information as CrowdStrike or other solutions provide. If you run a big query, you will see a delay. That is the only concern we have because it will take some time if you query large data sets."

"If you have to do your own stuff, such as customized charts, it is a little bit more work, but once you're familiar with the Splunk query language, you can pretty much do whatever you want. In terms of features, it should probably have the features that other competitors provide."

"The tool itself is very difficult to configure. It's great for its number of inputs, for the different types of systems devices, and things that it could collect information from. To actually make good use of it, you need a fairly dedicated team of people that have some reasonably good programming or modeling skills to be able to do the things that you need to do with it. Whereas a lot of the other tools are better packaged for that, and so require a lot less training and a lot less dedication."

"We had an instance when Splunk failed and it took us a couple of days to recover."

"The Enterprise Security app could be improved. We have had trouble with it working from the first day."

More Splunk Enterprise Security cons

Pricing and Cost Advice

"AWS Auto Scaling's price is high."

"AWS Auto Scaling is a pay-per-use and pay-as-you-use service."

"AWS Auto Scaling is a cheap solution."

"The product is expensive."

"The pricing is good. I have not had any customers that have complained about the price."

"The product has moderate pricing."

"AWS Auto Scaling is an expensive solution."

"Free Splunk license for PoCs on personal machines and the ability to scale the PoC to an enterprise level app."

"It can be expensive, especially the licensing costs. However, there is added value in what it can do, not just log aggregation."

"The price of Splunk Enterprise Security is high."

"I think that most of the log analytics solutions are expensive and I'm not sure if it's worth it."

"It is expensive, but it is a good tool. It is worth the cost."

"The Splunk Enterprise Security license is expensive."

"Pricing is probably its weakest spot. As compared to some competitors, Splunk is really expensive."

"Splunk is not a cheap solution and the license is billed annually."

More Splunk Enterprise Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.

See recommendations

860,825 professionals have used our research since 2012.

Comparison Review

Vinod Shankar

Manager, Enterprise Risk Consulting at Deloitte & Touche

Feb 26, 2015

HP ArcSight vs. IBM QRadar vs. McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm

We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…

Read full review

Top Industries

By visitors reading reviews

No data available

Financial Services Firm

14%

Computer Software Company

14%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about AWS Auto Scaling?

The tool's most valuable feature is vertical auto-scaling, which is easy to use. However, most companies now prefer horizontal scaling. I set up the health check integration to monitor CPU usage. W...

What is your experience regarding pricing and costs for AWS Auto Scaling?

The pricing of Auto Scaling is medium range, neither high nor low.

What needs improvement with AWS Auto Scaling?

It is sometimes very critical to deploy on AWS since some servers are already running in the background. There are challenges for employees on how to deploy at a given time. It requires a downtime ...

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

What is a better choice, Splunk or Azure Sentinel?

It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...

How does Splunk compare with Azure Monitor?

Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...

OpenText SiteScope vs AWS Auto Scaling

Comparisons

Compared 57% of the time

VMware Aria Operations for Applications vs AWS Auto Scaling

Compared 43% of the time

More AWS Auto Scaling Competitors

IBM Security QRadar vs Splunk Enterprise Security

Compared 8% of the time

Wazuh vs Splunk Enterprise Security

Compared 8% of the time

Dynatrace vs Splunk Enterprise Security

Compared 7% of the time

Datadog vs Splunk Enterprise Security

Compared 6% of the time

Security Onion vs Splunk Enterprise Security

Compared 4% of the time

More Splunk Enterprise Security Competitors

Product Reports

Application Performance Monitoring (APM) and Observability

Download AWS Auto Scaling product report

Splunk Enterprise Security

Download Splunk Enterprise Security product report

Also Known As

AWS Auto-Scaling

No data available

Overview

AWS Auto Scaling monitors your applications and automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost. Using AWS Auto Scaling, it’s easy to setup application scaling for multiple resources across multiple services in minutes. The service provides a simple, powerful user interface that lets you build scaling plans for resources including Amazon EC2 instances and Spot Fleets, Amazon ECS tasks, Amazon DynamoDB tables and indexes, and Amazon Aurora Replicas. AWS Auto Scaling makes scaling simple with recommendations that allow you to optimize performance, costs, or balance between them. If you’re already using Amazon EC2 Auto Scaling to dynamically scale your Amazon EC2 instances, you can now combine it with AWS Auto Scaling to scale additional resources for other AWS services. With AWS Auto Scaling, your applications always have the right resources at the right time.

Amazon Web Services (AWS)

Splunk Enterprise Security is widely used for security operations, including threat detection, incident response, and log monitoring. It centralizes log management, offers security analytics, and ensures compliance, enhancing the overall security posture of organizations.

Companies leverage Splunk Enterprise Security to monitor endpoints, networks, and users, detecting anomalies, brute force attacks, and unauthorized access. They use it for fraud detection, machine learning, and real-time alerts within their SOCs. The platform enhances visibility and correlates data from multiple sources to identify security threats efficiently. Key features include comprehensive dashboards, excellent reporting capabilities, robust log aggregation, and flexible data ingestion. Users appreciate its SIEM capabilities, threat intelligence, risk-based alerting, and correlation searches. Highly scalable and stable, it suits multi-cloud environments, reducing alert volumes and speeding up investigations.

What are the key features?

Comprehensive Dashboards: Provide a holistic view of security operations.
Flexible Data Ingestion: Supports various data sources for better analysis.
Robust Log Aggregation: Centralizes log management for easier monitoring.
Machine Learning Toolkit: Enhances threat detection and prediction capabilities.
SIEM Capabilities: Integrates security information and event management.
Threat Intelligence: Utilizes external information to improve security measures.
Risk-Based Alerting: Prioritizes alerts based on the risk they pose.
Correlation Searches: Identifies and correlates security events effectively.

What benefits or ROI should users look for?

Enhanced Visibility: Improves monitoring across endpoints, networks, and users.
Faster Incident Response: Speeds up identification and resolution of security issues.
Reduced Alert Volumes: Lowers false positives and enhances signal-to-noise ratio.
Scalability: Adapts to growing and changing security needs.
Improved Security Operations: Integrates multiple security facets into one platform.

Splunk Enterprise Security is implemented across industries like finance, healthcare, and retail. Financial institutions use it for fraud detection and compliance, while healthcare organizations leverage its capabilities to safeguard patient data. Retailers deploy it to protect customer information and ensure secure transactions.

Splunk

Sample Customers

Expedia, Intuit, Royal Dutch Shell, Brooks Brothers

Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.

Application Performance Monitoring (APM) and Observability