Try our new research platform with insights from 80,000+ expert users

Commvault Cloud vs Rapid7 InsightIDR vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

Backup and Recovery Market Share Distribution
ProductMarket Share (%)
Commvault Cloud6.1%
Veeam Data Platform11.9%
Rubrik6.0%
Other76.0%
Backup and Recovery
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Rapid7 InsightIDR2.5%
Wazuh10.9%
Splunk Enterprise Security9.3%
Other77.3%
Security Information and Event Management (SIEM)
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Splunk Enterprise Security9.3%
Wazuh10.9%
IBM Security QRadar7.2%
Other72.6%
Security Information and Event Management (SIEM)
 

Featured Reviews

Matt Reller - PeerSpot reviewer
Provides extremely fast backup, is easy to manage, and is flexible
Commvault Cloud's automated policies provide the notification we need to ensure our data is secure and managed correctly. Commvault Cloud provides excellent visibility across all of our organization's data. It is extremely important to our organization that Commvault has a unified platform that offers recovery across cloud, on-prem, and SaaS workloads. It has helped our organization improve by simplifying the way we manage our environment. We could not manage the same environment with only half of our current staff. We have yet to find anything in our environment that Commvault does not support. Commvault Cloud's Risk Analysis helps us identify, categorize, and classify sensitive data enabling us to take the appropriate actions to protect it. Commvault does a good job helping us limit our exposure and ensure compliance. Commvault has helped us reduce our data management costs significantly. Compared to Dell Avamar, the costs are vastly different. Commvault is much more cost-effective. We are licensed by capacity, so we don't have to worry about licensing different features. We have all the features that are licensed by capacity. And as far as ongoing support costs and other expenses, they are much lower than what they were with Dell Avamar. Commvault also gives us the flexibility to use any storage we want, while Avamar is tied to the Data Domain, which is not cheap to support. It has helped us reduce our backup time unless we are using Data Domain. This is because we can perform deduplication and compression on the client layer, which reduces the load on the network. We cannot do this with Data Domain. In fact, if we even attempt to perform a quick progress check before sending data to the Data Domain, the system fails completely. We learned this the hard way. We are using many more advanced features in Commvault Cloud than we ever did in Dell Avamar, simply because we had to license each feature separately in Avamar. As a result, we did not perform many backups in Avamar, such as all database backups (DB2, SAP HANA, Oracle, and SQL). These backups were performed outside of Avamar. We are now using Direct Connect agents for all of our databases. This allows us to perform incremental backups, which we could not do with the previous method. As a result, we have reduced our backup times by two-thirds, or even more in some cases. Compared to when we were backing up directly to Data Domain, Commvault is now running our backups ten times faster. This has resulted in a significant reduction in our backup times. Commvault has helped us reduce the RPO. Even in Data Domain, it has reduced our storage times by about half. It has also helped us reduce the threat detection time. We reduced the RTO significantly with Commvault. Commvault has helped us reduce downtime primarily due to the increase in the performance of resources.
Asim Naeem - PeerSpot reviewer
Providing comprehensive insight into alerts while working towards AI enhancement
I definitely recommend Rapid7 InsightIDR. It is becoming better, with improvements being continuously made to the product. Right now, I do not have any advice about Rapid7 for other users because every organization or user has different criteria or multiple use cases, so I refrain from commenting on that. I rate the overall solution seven out of ten.
ROBERT-CHRISTIAN - PeerSpot reviewer
Has many predefined correlation rules and is brilliant for investigation and log analysis
It is very complicated to write your own correlation rules without the help of Splunk support. What Splunk could do better is to create an API to the standard SIEM tools, such as Microsoft Sentinel. The idea would be to make it less painful. In ELK Stack, Kibana is the query language with which you can search log files. I believe Splunk has also a query language in which they search their log files, but once you have identified the log file that you want to use for further security correlation, you want to very quickly transport that into your SIEM tool, such as Microsoft Sentinel. That is something that Splunk could make a little bit less painful because it is a lot of effort to find that log file and forward it. An API with Microsoft Sentinel or a similar SIEM tool would be a good idea.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It has significantly reduced the amount of manual work required to manage our backup operations. We're going from an on-prem to a non-on-prem, we're all doing nonsolutions. So we really can't compare it against anything else."
"It is a stable solution."
"Commvault is a very stable product."
"The backup and restore capabilities are key. The most useful things to us about Commvault, in general, is the breadth of the applications that it can protect as well as the features inside of it, like deduplication and encryption. When people get their data encrypted, Commvault has a way to tell if somebody is being attacked through a cybersecurity threat because their data changes. So, Commvault has what they call honeypot files out there to look to see if anybody is changing these files. Only Commvault knows which files those are, so nobody should be messing with those files. If it changes, then it will alert you to say, "Oh, I potentially have somebody messing with my files." It will alert you to something going on in your environment that probably shouldn't be happening. We deploy that with all our customers so they have this capability as well."
"IntelliSnap and file system backups are valuable features."
"The expanse of the decoys that they have is valuable. They cover everything on the corporate side that you would think of, such as Windows, Linux, and even applications like SAP. They also go into the OT environment and emulate OT devices as well."
"We recommend this product for people who are running the Oracle Virtualization Manager."
"The solution is easy to use and the duplication is quite good."
"If you were on other solutions, you would notice that they use agents from third-party, from open-source, from a native OS, or from other tools. Here, however, it is an agent from Rapid7 itself. This adds to the solution's overall capabilities."
"InsightIDR helps us investigate an environment to discover information about incidents."
"Integration with threat modeling from the Metasploit and InsightIDR repositories."
"The platform offers unlimited storage and agent-based solutions."
"Features for user behavior analytics and the rules for attack review are good."
"The technical support is a solid 10 out of 10 as they take the time to answer any questions or problems which may arise in a reasonable time frame."
"Rapid7 is easy to use and deploy. It is a simple solution and has easy data pulling."
"It improved my organization by building a security alerting program."
"We have a one stop dashboard for health of some of our services where you can click in and it takes you to other dashboards that have custom near real-time metrics that show the application's health."
"The technical support has been very good. They are very responsive and have been helpful."
"The initial setup is pretty straightforward."
"Splunk can extract all kinds of data. There's no limitation on what kind of structured and unstructured data one needs to extract — it can access any kind of data, including machine-generated data."
"The community marketplace is useful; often, you do not need to rely on Splunk Enterprise Security support due to the wealth of online documentation available—Splunk docs are truly beneficial."
"The ability to digest any information and then correlate it in accordance with what you need is valuable. The ability to connect to pretty much everything and bring the information in the same format is also valuable. On top of that, we can use their language in order to create and customize the dashboards, correlations, or analytics that we want to incorporate."
"The graph visualization is the most valuable feature."
"The logs on the solution are excellent."
 

Cons

"I would like them to keep working on the new web interface to migrate out of the old interface because the old interface is a bit complex. It was driving customers away because of the complexity. If they migrate everything (100 percent of the features), this would make the product be perfect."
"Its competitor, Veeam, includes backup and replication in the same product. I don't know if Commvault has it or not, but they should if they don't."
"I think there is room for improvement with the reports. They are a little poor."
"The Java interface is not great. The Command Center interface is far better and it looks nicer, but it doesn't have all the powerful features available in the CommServe/Java console. The place to improve the product is on the management interface level."
"Reduce the complexity for better understanding of the reports. There are a lot of variables in which you can get confused while elaborating on reports."
"It would be a bit unfair to say that it's complex, due to the fact that it supports so many different workloads, however, if there's anything that is a bit of a shortcoming, then it's the fact that there's a bit of complexity involved when dealing with the product."
"Commvault is a rich system that might scare somebody the first time they see it because it feels so huge."
"The solution needs better Office 365 data backup management."
"Cloud risk assessment is one area where I think they need a lot of improvement."
"Inability to get access to compliance reports within the solution."
"The main problem lies in the processes within the client's operating systems."
"It would be useful to import threat intelligence in YARA format along with known incorrect email addresses.​"
"The dashboard is an area that could be simplified."
"They should add more configuration and security features to it."
"InsightIDR's integration with other solutions could be improved. Also, I'd like more control from the portal over what's happening on the endpoint side. For example, when I see an attack on an endpoint, I want to be able to stop it from the portal."
"The solution's XDR agents cannot compete with the XDR solutions out there yet."
". Having a trial version or more training on Splunk would be helpful."
"Having analysts put their notes directly within the investigation feature in the incident review would be beneficial."
"The algorithms customization of Splunk could improve. They have limited algorithms for machine learning support. If they can allow the user to add more machine learning algorithms, such as the ability to choose the algorithm that a user might want. Additionally, they should provide the required libraries for those algorithms, and then analyzes the data for use."
"The solution's case management system could be further improved to make it easier for analysts to manage cases."
"I would like the ability to view logs for specific instances and not have to pull the logs for the entire Cloud environment in Splunk."
"It can be tough to get a hold of somebody in technical support depending on the complexity of the issue."
"The monitoring aspect of Splunk could be improved. We have to do some queries to get as much information as CrowdStrike or other solutions provide. If you run a big query, you will see a delay. That is the only concern we have because it will take some time if you query large data sets."
"The GUI can be improved to include some of the capabilities that other BI solutions have."
 

Pricing and Cost Advice

"It was not very popular because of its previous cost, but they have been working on the pricing, and now anyone can afford to use Commvault. They changed the modeling criteria for their pricing. Previously, there was only the capacity modeling based on your content capacity. In this case, they would give you a license and you would have to pay it. Now, most of the environment is virtualized so you can have the best CPU, VMs, etc. You buy whatever you need and pay for what you need."
"Compared to other competitors and vendors the pricing is fair."
"The price could perhaps be lower as well."
"It would not be affordable for small to medium size organizations."
"If budget allows using the per socket license and not the agent based with per GB counter for Dedup is the way to go."
"Using a subscription-based license has been advantageous."
"The licensing costs are determined on a yearly basis. It might be around $40,000 or $50,000. There are no costs in addition to the standard licensing fees."
"It is a bit more than other products, but when you consider the time savings, it is saving money."
"Licensing is by endpoint and amount of retention time (at least ours is). Default retention was one year, but we are able to push the retention further if needed. There's also a provide-your-own-S3 option for longer retention if you don't want to pay for the additional retention years in your Rapid7 agreement."
"I rate Rapid7 InsightIDR's price a four on a scale of one to ten, where one is cheap, and ten is expensive."
"The pricing and licensing are competitive."
"It is more reasonably priced than other vendors."
"Rapid7 InsightIDR's pricing is reasonable."
"The team is very willing to work with companies. My suggestion is to call the Rapid7 sales department and see how they can help.​"
"The pricing is good, and it is not very expensive."
"It is a reasonably priced solution."
"Splunk Enterprise Security is expensive."
"Splunk's cost is very high. They need to review the pricing. They have to go back and totally readdress the market."
"Truly evaluate the data you want to ingest and go slow. Pulling in data that can provide no use to your mission only wastes data against your license."
"In addition to the licensing fee, there is also a support and maintenance charge."
"Splunk is not free."
"Some of the insights that we have obtained as a part of using Splunk have greatly helped us in increasing our revenue in terms of selling our products."
"While Splunk is more expensive than other solutions, we would still choose it because of its capabilities."
"The pricing is a little bit on the higher side, but looking at what Splunk provides us, it is reasonable."
report
Use our free recommendation engine to learn which Backup and Recovery solutions are best for your needs.
866,744 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
10%
Manufacturing Company
10%
Government
7%
Computer Software Company
14%
Manufacturing Company
8%
Financial Services Firm
7%
Government
7%
Computer Software Company
14%
Financial Services Firm
14%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business57
Midsize Enterprise24
Large Enterprise81
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise5
Large Enterprise6
By reviewers
Company SizeCount
Small Business106
Midsize Enterprise44
Large Enterprise225
 

Questions from the Community

What is your experience regarding pricing and costs for Commvault?
The tool is affordable. I rate the pricing a six out of ten. Implementation requires additional costs because we need...
What needs improvement with Commvault?
Data center backup must be improved. We also want the product to provide us with a cloud-based backup. If we use Micr...
What do you like most about Commvault Complete Data Protection?
IntelliSnap and file system backups are valuable features.
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is a...
What do you like most about Rapid7 InsightIDR?
During simulations or demonstrations, the tool generates alerts, providing details such as the specific application, ...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingest...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitor...
What do you like most about Splunk?
There are a lot of third-party applications that can be installed.
 

Also Known As

Commvault Complete Data Protection, Commvault Backup & Recovery, Commvault HyperScale X, Metallic, ThreatWise
InsightIDR
No data available
 

Overview

 

Sample Customers

Aberdeenshire Council, Acxiom, BAM Group Ireland, Catholic Education Diocese of Parramatta, CI Investments, Clifford Chance, American Municipal Power, American Pacific Mortgage, AstraZeneca, Dongbu Steel, Denver Health, Dow Jones, Emirates Steel, Penn State Health, Prime Healthcare, Sonic Healthcare, Sony Network Communications, TiVO, UCONN Health, The Weitz Company
Liberty Wines, Pioneer Telephone, Visier
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about Veeam Software, Hewlett Packard Enterprise, Commvault and others in Backup and Recovery. Updated: August 2025.
866,744 professionals have used our research since 2012.