No more typing reviews! Try our Samantha, our new voice AI agent.

Datameer vs Splunk Enterprise Security comparison

Why PeerSpot?

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Datameer
Average Rating
7.2
Number of Reviews
4
Ranking in other categories
BI on Hadoop (3rd)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
468
Ranking in other categories
Log Management (1st), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

Datameer and Splunk Enterprise Security aren’t in the same category and serve different purposes. Datameer is designed for BI on Hadoop and holds a mindshare of 15.0%, up 8.1% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 8.2% mindshare, down 9.1% since last year.
BI on Hadoop Mindshare Distribution
ProductMindshare (%)
Datameer15.0%
AtScale Adaptive Analytics (A3)24.2%
JethroData15.8%
Other45.0%
BI on Hadoop
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Splunk Enterprise Security8.2%
IBM Security QRadar5.6%
Wazuh3.8%
Other82.4%
Security Information and Event Management (SIEM)
 

Featured Reviews

it_user357459 - PeerSpot reviewer
Hadoop Developer at a tech services company with 10,001+ employees
It helps to onboard and enrich data quickly as it does not involve writing scripts or queries, but the transformation functions can be more mature.
The most valuable feature are the data transformation functions in the workbook It helps to onboard and enrich data quickly as it does not involve writing scripts or queries. Maintenance is easy. We would like to have more inbuilt connections to different types of sources. The transformation…
Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature are the data transformation functions in the workbook."
"Customer Service: It's very good."
"Datameer has around 400 inbuilt functions that are very useful for any beginner and also it has a good visualization which helps end user to see that how the trend is showing."
"The built-in smart analytic tools are the most valuable features for me."
"Splunk has a wide range of features that customers use to find and analyze all kinds of logs."
"Speeds up root cause analysis and can help identify issues that your organization never realized were occurring."
"Splunk allows us to customize processing and dashboards, which helps us take care of our customers' needs."
"AI in Splunk Enterprise Security improves the accuracy, and the AI feature has helped me reduce false positive alerts, which prevented me from wasting time on junk alerts and separating the noise from the actual true positive alerts."
"Low barrier to start searching with the ability to normalize data on the fly."
"The Splunk user community and forum are most valuable."
"Analyst productivity has risen because they started using Splunk instead of the other product, the third-party SIEMs, and the detection has really improved because they are doing everything by SLA and fitting into these tight schedules, and our clients really love Splunk Enterprise Security."
"Splunk Enterprise Security has helped improve my organization's business resilience, and Splunk Enterprise Security is really good at the ability to predict, identify, and solve problems in real time."
 

Cons

"Although this tool is very good, it has some limitations that I think could be removed in later versions."
"When I run the single license on my MacBook Pro, the memory space can be an issue."
"It is a good tool from an analysis perspective, but is not suitable for IT."
"It needs better integration with other enterprise technologies out of the box."
"When deploying Enterprise Security, the biggest challenge or the most amount of work that you're going to spend time on is onboarding your data and getting it into a position that allows you to search it uniformly. So applying things like the common information model is the biggest time investment that you'll have in the deployment."
"Splunk's ability to analyze malicious activities scores an 8 out of 10, but there's room for improvement. By analyzing emerging patterns, Splunk could identify and predict potential threats more effectively."
"Security administration and user access control is pretty basic. The user access control could be much more granular, so that the admins can control r/w/x access for specific features of the product like dashboards, etc."
"We manage alert fatigue multiple times, as false positive alerts are triggered frequently, sometimes 200 to 300 alerts."
"The high cost of Splunk Enterprise Security prevented us from using its full capabilities."
"If it could be made available as a service, this would be much better than as a product."
"The product was difficult to back up the first time."
"The support is not so good, I would only give them a rating of six or seven."
 

Pricing and Cost Advice

Information not available
"It is pretty straightforward and based on the sizing. If I compare it with other competitors, it makes sense."
"The licensing is good, but the pricing absolutely needs some work. It is very high."
"The licensing costs are high for Splunk Enterprise Security."
"It's a little bit expensive for a small to medium enterprise."
"The pricing model is expensive and a nightmare based on the amount of data."
"From what I have seen so far, Splunk has multiple cost models. The one that we are using is pretty good when it comes to ingesting data into the environment. It has worked out pretty well."
"Some of the insights that we have obtained as a part of using Splunk have greatly helped us in increasing our revenue in terms of selling our products."
"While Splunk is more expensive than other solutions, we would still choose it because of its capabilities."
report
Use our free recommendation engine to learn which BI on Hadoop solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
No data available
Outsourcing Company
12%
Financial Services Firm
11%
Manufacturing Company
9%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business135
Midsize Enterprise74
Large Enterprise320
 

Questions from the Community

Ask a question
Earn 20 points
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Overview

 

Sample Customers

Trustev, DetroitCrime Commission, Sears, Visa, citi, vivint, workday, Kabam, USA Olympic Team, CDW, BT, at&t, Bank of America, NetApp., expresso
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.