

Find out what your peers are saying about Splunk, Wazuh, Cribl and others in Log Management.
The impact of the tool is low when the functionalities are inaccessible due to resource consumption.
Fortinet is highly efficient for moderate deployments and provides a secure platform for medium-sized networks and data centers.
I have seen a return on investment with Fortinet FortiAnalyzer due to its competitive pricing and straightforward licensing model based on the amount of log data processed per day.
We did not have a good experience with the Devo toolset, leading to efficiency gains from SOC tier one all the way to tier three in searches, reducing search time and fewer errors compared to Devo, resulting in great optimization.
Overall, our spend is about the same for much better capabilities.
We have observed between five to seven percent of the overall enterprise-wide applications that were flagged for frequent analysis and necessary cleanup, which saved my SVCs and licenses, ultimately translating to significant cost savings for my organization.
Customer service and support for Fortinet FortiAnalyzer are quite helpful and responsive.
Technical support is good, and I rate it ten out of ten.
The support service is very slow and incompetent.
I feel that Splunk's documentation is highly maintained, regular updates seem to happen, and I don't have any suggestions for improvement as it is currently at its best.
However, as I mentioned, sometimes they might not have proper knowledge or sometimes they are not sufficiently technical.
The CSMs and account managers in the channel team are great, providing assistance not just with selling the product but also for implementation, deployment, and aftercare.
Fortinet FortiAnalyzer is scalable, especially for the VM versions, as additional space can be provisioned from the servers as needed.
FortiAnalyzer is a scalable product.
It typically handles three to five years of expansion effectively.
If we have compliance requirements to just store logs, then Splunk Cloud Platform is not the right platform.
If you purchase something initially and later have increased requirements, they can scale up and scale down your environment.
Splunk Cloud Platform's scalability works well, especially for smaller businesses, but can present issues for larger enterprises facing stricter regulations and greater integration requirements.
We faced some CPU consumption issues, which caused the machine to slow down and required a restart of FortiAnalyzer.
It remains stable during implementation for one or two years.
It provides a reliable solution for managing network-wide data.
Its stability is commendable, enabling easy visibility into logs, effective data ingestion, and successful operations with diverse integrations and third-party platforms.
This is usually improved by following best practices such as optimizing SPL queries, using the proper index, and managing data correctly.
I rate Splunk Cloud Platform a ten out of ten for stability and reliability.
When licensing, each device is licensed separately, such as the firewall, which can become expensive.
This would help in analyzing various security incidents and events more effectively by delivering a handful of relevant logs instead of thousands.
Enhanced deep inspection features would make troubleshooting easier.
I know there are tutorials on the website, but I feel if they rolled out more free courses on such things that provide a link to a free course for beginner training, I feel people would be interested in it.
In terms of enhancement for Splunk Cloud Platform, I would say if we could create add-ons or if we get the capability to build add-ons directly through cloud, not talking about the add-on builder framework, but something editor-like where we will directly edit our conf files from any specific app or TA provided by Splunk Cloud Platform itself.
I would suggest going for Splunk Cloud Platform because AWS, Microsoft Azure, and Google Cloud are very expensive in comparison.
Its licensing model is based on the amount of log data processed per day, making it more cost-effective compared to QRadar, which is EPS and device-based.
In terms of pricing, FortiAnalyzer is not expensive.
In the Indian market, Fortinet's pricing is very competitive, allowing us to win most of our deals.
Once you are in the partnership with Splunk Cloud Platform and with Cisco, you can have good discounts, you can make the deal and discuss, and they are willing to help you as a partner in finding the solution and finding your target.
When it comes to the cost of Splunk Cloud Platform, I would rate it a five from one to ten, with one being cheap and ten being expensive.
They can be expensive, but what they offer at that price, I do not think any other tool can match that.
The advanced analytics capabilities aid in threat detection by providing visibility into indicators of compromise.
The most valuable feature of Fortinet FortiAnalyzer is its ability to simplify and display logs clearly, providing details like which IPs are accessing the system, the destination, and the policies applied.
The log management is useful as we have connected around two hundred eighty-five walls and around fifteen to twenty plus firewalls with Fortinet FortiAnalyzer, making it highly beneficial compared to logging into each individual firewall.
The most valuable feature of Splunk Cloud Platform is its robustness and ability to ingest logs.
The search capability utilizes the same compute assigned, and compared to on-premises, it is very efficient and fast because on-premises we had fixed compute assigned with limits set for searching per role or application.
The platform's alerting mechanism is valuable, as there is software that makes alarms in case of attacks.
| Product | Mindshare (%) |
|---|---|
| Fortinet FortiAnalyzer | 1.4% |
| Splunk Enterprise Security | 7.3% |
| IBM Security QRadar | 4.6% |
| Other | 86.7% |
| Product | Mindshare (%) |
|---|---|
| Splunk Cloud Platform | 1.1% |
| Tableau Enterprise | 9.6% |
| Qlik Sense | 4.8% |
| Other | 84.5% |


| Company Size | Count |
|---|---|
| Small Business | 57 |
| Midsize Enterprise | 22 |
| Large Enterprise | 31 |
| Company Size | Count |
|---|---|
| Small Business | 40 |
| Midsize Enterprise | 17 |
| Large Enterprise | 87 |
Fortinet FortiAnalyzer offers comprehensive report generation and log management to enhance threat analysis and user activity insights. It integrates with Fortinet products for centralized management, featuring robust security and real-time data capabilities.
FortiAnalyzer enables detailed threat analysis and in-depth insights into user activities, integrating seamlessly with Fortinet's suite for centralized network management. Its robust security features, real-time data processing, and customizable dashboards make it efficient for IT environments. Users benefit from predictive analytics, enhancing network visibility and cybersecurity operations. It is known for ease of deployment and a scalable, user-friendly interface. However, there are desires for better third-party integration, enhanced AI capabilities, and improved technical support. Users seek more intuitive documentation and improved cost-efficiency.
What are FortiAnalyzer's Most Important Features?FortiAnalyzer is utilized in diverse industries such as banking, medical organizations, and service providers. It is employed for security diagnostics, network traffic analysis, and incident management. Organizations utilize its capabilities for enhanced visibility, threat detection, and performance monitoring across cloud-based and on-premises setups.
Splunk Cloud Platform provides powerful analytics, intuitive dashboards, and seamless integrations. Users find value in its real-time monitoring, proactive alerting, and centralized log management, enhancing efficiency and visibility while reducing infrastructure management efforts due to its cloud-based nature.
Splunk Cloud Platform offers powerful tools for log collection, monitoring, and data visualization. It supports advanced analytics and real-time insights through logs from sources like AWS, Azure, and on-premises environments. The platform is employed for threat detection, incident response, and detailed performance analysis. Machine learning capabilities aid in anomaly detection, and dashboards allow visualization of system health. While users appreciate its ease of use and scalability, improvements in documentation clarity, AI integrations, and navigation workflows are desired. Suggestions include faster performance, better cost efficiency, and enhanced training resources. There is also a call for Native Kubernetes support to improve integration and overall user experience.
What are the most important features of Splunk Cloud Platform?Splunk Cloud Platform is extensively applied across industries such as finance for fraud detection, healthcare for compliance monitoring, and retail for consumer behavior analysis. Its ability to integrate and analyze disparate data sources makes it valuable for any sector seeking to optimize security intelligence and operational efficiency.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.