No more typing reviews! Try our Samantha, our new voice AI agent.

Datameer vs Splunk Enterprise Security comparison

Why PeerSpot?

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Datameer
Average Rating
7.2
Number of Reviews
4
Ranking in other categories
BI on Hadoop (3rd)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
468
Ranking in other categories
Log Management (1st), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

Datameer and Splunk Enterprise Security aren’t in the same category and serve different purposes. Datameer is designed for BI on Hadoop and holds a mindshare of 15.0%, up 8.1% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 8.2% mindshare, down 9.1% since last year.
BI on Hadoop Mindshare Distribution
ProductMindshare (%)
Datameer15.0%
AtScale Adaptive Analytics (A3)24.2%
JethroData15.8%
Other45.0%
BI on Hadoop
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Splunk Enterprise Security8.2%
IBM Security QRadar5.6%
Wazuh3.8%
Other82.4%
Security Information and Event Management (SIEM)
 

Featured Reviews

it_user357459 - PeerSpot reviewer
Hadoop Developer at a tech services company with 10,001+ employees
It helps to onboard and enrich data quickly as it does not involve writing scripts or queries, but the transformation functions can be more mature.
The most valuable feature are the data transformation functions in the workbook It helps to onboard and enrich data quickly as it does not involve writing scripts or queries. Maintenance is easy. We would like to have more inbuilt connections to different types of sources. The transformation…
Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature are the data transformation functions in the workbook."
"Datameer has around 400 inbuilt functions that are very useful for any beginner and also it has a good visualization which helps end user to see that how the trend is showing."
"The built-in smart analytic tools are the most valuable features for me."
"Customer Service: It's very good."
"The breadth of the data sources that Splunk can ingest data from is broad and deep and it does an exemplary job at handling structured data."
"The solution helped reduce our alert volume."
"The product has a good security posture."
"I would assess the stability and reliability of Splunk Enterprise Security as generally good, with very few downtime, crashes, and performance issues."
"Without Splunk Enterprise Security, it would be difficult for us to manage and prioritize alerts. There's a potential to lose track of important notifications, and it's essential to our security that we do not miss anything. Splunk has improved our investigations because the reporting and dashboarding make things so much easier. We can provide weekly or monthly reports. I also like Splunk's ability to integrate."
"Before Splunk, we used Kibana and Elasticsearch; sometimes, with them, logs wouldn't even be there, so Splunk being there and working does a lot."
"The flexibility of Splunk as well as the resources available for learning and support are the best in the business."
"Splunk Enterprise Security has positively impacted my organization by helping us identify threats very quickly, and we are now able to identify threats 60% faster compared to before."
 

Cons

"Although this tool is very good, it has some limitations that I think could be removed in later versions."
"It needs better integration with other enterprise technologies out of the box."
"When I run the single license on my MacBook Pro, the memory space can be an issue."
"It is a good tool from an analysis perspective, but is not suitable for IT."
"I would say we haven't seen any return on investment with Splunk Enterprise Security because we are still maturing and trying to get everything situated, and we're experiencing roadblocks with other teams not wanting to give us what we need."
"The only downside is the pricing."
"Splunk Enterprise Security can be improved with more AI in the commands and more help in the commands, as not all people know how to write code in SPL, and we need more help in this area."
". Having a trial version or more training on Splunk would be helpful."
"Integrating tools and creating use cases could be easier. It's hard for a junior security engineer with only a couple of years of experience to write use cases. They can do it, but it's much easier in a solution like IBM QRadar. Setting conditions is like a multiple-choice type of thing. It's a more user-friendly process."
"From time to time, there are some glitches with stability; some logs are missing, and whenever there is something wrong with Splunk Enterprise Security, our external SOC team needs to raise a ticket and it can be time-consuming to wait for them to reply."
"The only thing which can be improved is that they are too subjective on whom their Splunk4Good initiative can be applied. They market it as you only need to be a nonprofit, but there is more to it."
"There are new services which are coming up. If Splunk can catch up with the speed of Amazon, and with the integration, instead of us waiting for another year or so, that would be good."
 

Pricing and Cost Advice

Information not available
"Splunk Enterprise becomes extremely expensive after the 20GB/month license."
"Licensing is a yearly, one-time cost."
"The pricing can be better. We are already considering Elastic because Splunk is too expensive. You have to pay based on per-day ingestion. There should be a more flexible model for the use cases where one day you have a huge amount, and on other days, it is quite less."
"Splunk Enterprise Security is not a cheap product, but I think it is worth every dollar that you pay."
"Most people share the same thought that the ingestion rates can get pretty pricey. There is a lot of work we do to curate the data that we send to Splunk so that it is not too noisy or too expensive."
"Our ROI is high."
"Further reductions would be fantastic, and I believe that more and more people would flock to it."
"The price of this solution is expensive. However, it has great features. If you want a great solution you need to pay a price matching the features."
report
Use our free recommendation engine to learn which BI on Hadoop solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
No data available
Outsourcing Company
12%
Financial Services Firm
11%
Manufacturing Company
9%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business135
Midsize Enterprise74
Large Enterprise320
 

Questions from the Community

Ask a question
Earn 20 points
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Overview

 

Sample Customers

Trustev, DetroitCrime Commission, Sears, Visa, citi, vivint, workday, Kabam, USA Olympic Team, CDW, BT, at&t, Bank of America, NetApp., expresso
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.