Try our new research platform with insights from 80,000+ expert users

BMC TrueSight Operations Management vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

BMC TrueSight Operations Ma...
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
50
Ranking in other categories
Application Performance Monitoring (APM) and Observability (23rd), Event Monitoring (2nd), IT Infrastructure Monitoring (28th), Cloud Monitoring Software (19th), AIOps (13th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
318
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. BMC TrueSight Operations Management is designed for IT Infrastructure Monitoring and holds a mindshare of 0.8%, down 1.3% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 9.4% mindshare, down 12.1% since last year.
IT Infrastructure Monitoring
Security Information and Event Management (SIEM)
 

Featured Reviews

Ayobanji Iluyomade - PeerSpot reviewer
The solution is stable and can be used for monitoring and managing events, but it does not provide application or service monitoring features
We are moving from basic monitoring to AIOps, where we can do things like self-healing. We also want to create dashboards for IT and business users to show the status of their services. We have done a couple of demos. I recommend the solution to others. Overall, I rate the product a seven out of ten.
ROBERT-CHRISTIAN - PeerSpot reviewer
Has many predefined correlation rules and is brilliant for investigation and log analysis
It is very complicated to write your own correlation rules without the help of Splunk support. What Splunk could do better is to create an API to the standard SIEM tools, such as Microsoft Sentinel. The idea would be to make it less painful. In ELK Stack, Kibana is the query language with which you can search log files. I believe Splunk has also a query language in which they search their log files, but once you have identified the log file that you want to use for further security correlation, you want to very quickly transport that into your SIEM tool, such as Microsoft Sentinel. That is something that Splunk could make a little bit less painful because it is a lot of effort to find that log file and forward it. An API with Microsoft Sentinel or a similar SIEM tool would be a good idea.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features of the solution are alert management, alert generation, and event management."
"The Event Management is outstanding; still is the most interesting part of the product."
"It provides common administration, and a Single Sign-On Platform with RBAC, which eases the cross launch between multiple tools"
"The initial setup of BMC TrueSight Operations Management was easy."
"We're using native monitoring capabilities for all our server hardware, for visibility for applications, for URLs, for webpage response and accuracy, and for monitoring network throughput in a lot of particular instances. We're using lightweight protocols for pinging, for DNS, for LDAP."
"BMC TrueSight Operations Management is easily scalable."
"The solution provides visibility to our infrastructure, how it is, the resources we are monitoring, and quick updates when it has any problems. We have integrated it with ServiceNow to open instances."
"I like the event management part."
"We can quickly search for almost anything across many log sources in seconds."
"Splunk Enterprise Security comes with 300 pre-deployed use cases that can be easily customized to meet the specific needs of our organization, without the need to purchase additional tools."
"Splunk Enterprise Security is a standard solution providing good customer service and partnership."
"Splunk allows us to find insights that we were not able to with traditional BI tools using ETL​. It allows us to dig into raw events."
"I like the ease with which dashboards can be created."
"The product provides visibility and enables us to correlate data and generate alerts."
"Correlation search, in general, is valuable because it allows us to search multiple data sources easily."
"If you want to understand how it can analyze or find out incidents, the visibility is good."
 

Cons

"BMC's solutions for cloud monitoring (monitoring of AWS and Azure resources) are very poor in stability and customization."
"The solution is a little obsolete."
"Reporting would be an area for improvement in TrueSight... We have almost 800 customers today on TrueSight and just under 10,000 assets. We need to be able to give a customer some information. If the customer's product fails, they'll ask us, "Did it have a problem beforehand?" We have all those events and we know all the problems it had beforehand. We have to be able to give them access to that kind of reporting. That's an enhancement that we need."
"The stability of BMC TrueSight Operations Management needs improvement. My organization's infrastructure is vast and implemented based on BMC recommendations, but the solution needs to be optimized for large-capacity infrastructure."
"The knowledge modules could be more lightweight in size. At present, the installation packages can be quite large."
"I think the ease of deployment needs to be looked at. It would be great if the deployment was faster and easier."
"It's too complex, too many servers are required, there are too many different components in the solution, and a lot of agents are required."
"BMC TrueSight Operations Management could improve the reporting."
"It would be nice to have more advanced UEBA in Splunk Enterprise Security. Additionally, it would be beneficial if they offered more threat intel feeds for free."
"It currently has limited default rules and customizations. If they can concentrate more on the compliance part and the security information part, it would be helpful. The platform part is good, but it requires many features from the security aspect."
"The integration could be a bit better. They charge for certain integrations."
"Technical support needs to be more responsive."
"The solution's case management system could be further improved to make it easier for analysts to manage cases."
"I would like to see more SIEM functionality and a better ticket tool."
"The licensing price is high and has room for improvement."
"I would like more assistance with use cases and help with teaching us how to use it once it's installed."
 

Pricing and Cost Advice

"Consider scalability very carefully: how much you want to monitor and what components are very important. Then, depending on these two things, filter out unwanted metrics or attributes. If you do a good job at filtering the data, then your licensing costs will be manageable."
"The solution is based on endpoints and knowledge models which can be costly."
"We pay license fees of between $150 and $200 per asset. There is an enterprise software license fee, and then you pay a percentage for your maintenance, and then Premier Support. For example, if you buy a two-year license for the product, then the maintenance fee is added to that for two years at X percent a year. Then there's a small fee on top of that for Premier Support..."
"Pricing is very high."
"Pricing is all volume-driven. I think we were paying between $80 and $85 per license. That's per unit, for a perpetual license. You pay it one time and then, every year, you pay 20 percent of that for annual maintenance and support. But now that we've grown, we've purchased tens of thousands of licenses and the cost per license has gone down to something like less than $30..."
"Other products are more expensive than BMC TrueSight."
"The cost depends on the usage."
"It is a relatively inexpensive solution."
"Some of the insights that we have obtained as a part of using Splunk have greatly helped us in increasing our revenue in terms of selling our products."
"Splunk ES is quite expensive compared to some products on the market."
"The pricing is a little bit on the higher side, but looking at what Splunk provides us, it is reasonable."
"Our ROI is high."
"The tool's licensing is good and we haven't received any complaints from the team handling it."
"Splunk Enterprise Security is expensive. I would rate the cost an eight out of ten with ten being the most expensive."
"Splunk is not free."
"I am fine with the licensing, but in terms of the cost, it is expensive for the data that we have. We have an open discussion with our account rep about this."
report
Use our free recommendation engine to learn which IT Infrastructure Monitoring solutions are best for your needs.
861,490 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
26%
Computer Software Company
15%
Manufacturing Company
6%
Government
5%
Financial Services Firm
14%
Computer Software Company
14%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about BMC TrueSight Operations Management?
The solution provides visibility to our infrastructure, how it is, the resources we are monitoring, and quick updates when it has any problems. We have integrated it with ServiceNow to open instances.
What is your experience regarding pricing and costs for BMC TrueSight Operations Management?
Though I have no clue about the tool's actual price, I know that it is astronomical.
What needs improvement with BMC TrueSight Operations Management?
Cost is an issue with BMC TrueSight Operations Management. Though I am not responsible for the budget, I know that it is an expensive tool set when used only for event management. The tool's issue ...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

ProactiveNet, TrueSight Operations Management
No data available
 

Overview

 

Sample Customers

Ensono, Transamerica, Boston Scientific, Park Place Technologies, inContact, TD Ameritrade, PNC Bank
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about BMC TrueSight Operations Management vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
861,490 professionals have used our research since 2012.