Try our new research platform with insights from 80,000+ expert users

Cisco Provider Connectivity Assurance vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Provider Connectivity...
Average Rating
8.8
Reviews Sentiment
6.9
Number of Reviews
24
Ranking in other categories
Application Performance Monitoring (APM) and Observability (45th), Network Monitoring Software (43rd)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.6
Number of Reviews
306
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. Cisco Provider Connectivity Assurance is designed for Application Performance Monitoring (APM) and Observability and holds a mindshare of 0.3%, down 0.3% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 9.5% mindshare, down 12.6% since last year.
Application Performance Monitoring (APM) and Observability
Security Information and Event Management (SIEM)
 

Featured Reviews

Sylvain Germe - PeerSpot reviewer
Highly scalable, responsive support, but lacking new features
This solution is geared towards on-premise setups, and would not be useful if the company plans to move to the cloud within the next two years, such as Google Cloud for example. If the goal is to monitor bandwidth at remote sites and identify performance issues because the network is under the control, this solution is useful. However, if a company primarily uses cloud-based servers and does not manage the internet connection of its remote sites, the solution becomes less useful. I rate Accedian Skylight a seven out of ten. I have a positive opinion of the tool, but it can be challenging to set up. It is also limited in its applicability to certain use cases. I am familiar with the engineers behind the solution and have a good impression of them. However, I am not pleased with the fact that the company removed many features and raised prices after it was acquired by Accedian.
ROBERT-CHRISTIAN - PeerSpot reviewer
Has many predefined correlation rules and is brilliant for investigation and log analysis
It is very complicated to write your own correlation rules without the help of Splunk support. What Splunk could do better is to create an API to the standard SIEM tools, such as Microsoft Sentinel. The idea would be to make it less painful. In ELK Stack, Kibana is the query language with which you can search log files. I believe Splunk has also a query language in which they search their log files, but once you have identified the log file that you want to use for further security correlation, you want to very quickly transport that into your SIEM tool, such as Microsoft Sentinel. That is something that Splunk could make a little bit less painful because it is a lot of effort to find that log file and forward it. An API with Microsoft Sentinel or a similar SIEM tool would be a good idea.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The performance of Accedian Skylight is better than other vendors."
"This solution has helped to improve the interaction between our network, datacenter, and application teams. I have used other tools, but this tool can pinpoint the root cause of my application or network issue in the majority of the cases. So, it helps different divisions or groups in the IT department to troubleshoot together and get an issue resolved. This tool helps a lot in our day-to-day networking application and IT operations."
"One valuable feature we have is real-time monitoring for connection issues."
"The solution’s UI and single pane of glass is good. The new dashboard is modern with its new design. The look of it is not pretty, but it is efficient, which is good. It is user-friendly; you can find what you need on the interface quickly."
"What I like most about Accedian Skylight is that it's a UI application, so using it is easy. I also like that the support for Accedian Skylight is helpful."
"The feature I used to like the most was its ability to decode layer seven protocols, although this is becoming less useful now that encryption is so widespread."
"One valuable feature we have is real-time monitoring for connection issues."
"I think the analytics features are okay. My customer also likes the interface, the GUI, because it's easy to operate."
"Splunk Enterprise Security allows us to create custom dashboards by changing fonts and modifying widgets."
"I can create dashboards to collect and view information in a tabular, graphical format. This feature is important because it helps me understand time-series data over one or two hours."
"We primarily use it to correlate logs throughout the enterprise for both searching and use in investigations."
"It has virtual visualization, and other products do not."
"I very much enjoy Splunk's robust search nature, which enables me to find the data I want within the data I have."
"In the past we used the different application to collect logs. We used SurfWatch and VMware to do so. But, we found that the Splunk has more capacity to do more in less time. They provide a aster speed to index all the events , and this is a huge asset."
"We solve issues that we previously could not since we now have the data."
"Positive features include replication capabilities, software development kits, and the architecture."
 

Cons

"Human resource costs can be high when dealing with connection issues."
"Because of the policies in Vietnam, we cannot connect the system to the Accedian cloud. It would be good if Accedian could provide a local cloud. In the next release, I would like them to focus on improving and adding more reporting features. This will help the operations teams."
"If you want a new version, you go to the website. The hardest part is finding the link, where is that .bin file? Sometimes it's pretty hidden in a document... it's hidden in the release notes or in another file somewhere. And it's usually not on the first page either."
"It needs the possibility to export data because it is not easy to see larger data sets, e.g., for one month. It would be interesting to export data into a PDF or dashboard to keep a history of the situation."
"There should be an option to update and upgrade the solution to the new version without having to re-buy it. I have clients switching to other solutions. The old solution is great, but if you change your license to a new one, you have to almost re-buy it completely."
"The UI interface of Accedian Skylight could improve."
"This solution is expensive compared to some others."
"It's a bit slow. When I execute a query, something general with a short timeframe that covers one month, for instance, and I do not specify the IP source or IP destination, it can take ages because it has to query the whole database."
"The high cost of Splunk Enterprise Security prevented us from using its full capabilities."
"When files are absent, troubleshooting becomes difficult, and performance issues inevitably arise."
"The configuration had a bit of a learning curve."
"The Web Application Firewall will send you too much information because it's more dedicated to security than a normal firewall."
"The product must improve insider threat detection."
"We were inundated with the amount of alerts and alarms that we could get out of it. It is also a resource hog and we didn't have the resources to support it on-prem so we're taking it offline now."
"The user access control could be much more granular, so that the admins can control r/w/x access for specific features of the product like dashboards, etc."
"The CIM model is the method Splunk uses to normalize data and categorize its important parts, but it is quite complex."
 

Pricing and Cost Advice

"The price is competitive overall, depending on the type of customer."
"It provides value and the cost is not huge."
"Pricing is a little bit expensive."
"We understand there's a significant cost difference, but have yet to investigate fully."
"The pricing of Accedian Skylight is really good. The sensors are low cost. Their model to analytics for sensors is by license, endpoint, or session. With the probes for their analytics, if they get deployed virtually, they are free. The licensing is only based on flows. So, you can effectively deploy probes everywhere in your network. Then, if you want to look at a specific type of traffic, you can enter into it with a very low cost license. You can just use things like spam ports, mirrors, TAPs, and aggregators to optimize what sort of traffic you send to these analysis tools. Then, if you want to start looking at more, you can up your licensed as you go. You are not getting forced into expensive appliances or subscription models."
"It's not for free, clearly. But on the other hand, it offers very interesting functionality. We pay around €100,000."
"The solution was previously well-regarded, but after being acquired by Accedian, the prices have significantly increased. This has made it challenging to sell the product due to its high cost. It is an expensive solution."
"The pricing is cheaper than other competing products, which is better for our budgets."
"The solution is costly."
"It's more expensive than the other tools, but it's worth it. Every penny is worth it."
"Splunk Enterprise Security is expensive."
"It can be expensive, especially the licensing costs. However, there is added value in what it can do, not just log aggregation."
"Splunk Enterprise Security's pricing is based on data volume, which generally suits large enterprises."
"While Splunk offers generous developer licenses and obtaining annual licenses is straightforward, the cost is a major consideration."
"The subscription is monthly."
"Price-wise, if you compare QRadar to Splunk for SIEM functionality then they are in the same range but when you integrate SOAR with these solutions, Splunk takes the lead and is more competitive."
report
Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.
849,686 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Computer Software Company
39%
Financial Services Firm
9%
Manufacturing Company
8%
Government
8%
Financial Services Firm
15%
Computer Software Company
14%
Manufacturing Company
8%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What needs improvement with Accedian Skylight?
Human resource costs can be high when dealing with connection issues. I require more tools to file and resolve these issues efficiently.
What is your primary use case for Accedian Skylight?
I had prepared for COC and the client. I work as a vendor for a client using Flow Mount for network performance monitoring. I focus on resolving client-side issues related to Packy Performance and ...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

Accedian Skylight, Accedian SkyLIGHT PVX, SkyLIGHT PVX, SecurActive, Performance Vision
No data available
 

Overview

 

Sample Customers

T-Systems, Thomson Reuters, Bordeaux Metropole, CGI, Citadelle Regional Hospital Center, Lorraine Institute of Oncology, Luxembourg Institute of Health, Groupe BPCE, Group S, Splitpoint, Horus-Net, Audatex, Indexis, Province de Liège, EASI, Spie Batignolles, Faymonville
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about Cisco Provider Connectivity Assurance vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
849,686 professionals have used our research since 2012.