Try our new research platform with insights from 80,000+ expert users

OpenText SiteScope vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

OpenText SiteScope
Average Rating
7.8
Reviews Sentiment
6.5
Number of Reviews
28
Ranking in other categories
Application Performance Monitoring (APM) and Observability (19th)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
365
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. OpenText SiteScope is designed for Application Performance Monitoring (APM) and Observability and holds a mindshare of 0.6%, up 0.4% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 9.3% mindshare, down 11.6% since last year.
Application Performance Monitoring (APM) and Observability Market Share Distribution
ProductMarket Share (%)
OpenText SiteScope0.6%
Dynatrace8.8%
Datadog7.2%
Other83.4%
Application Performance Monitoring (APM) and Observability
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Splunk Enterprise Security9.3%
Wazuh10.9%
IBM Security QRadar7.2%
Other72.6%
Security Information and Event Management (SIEM)
 

Featured Reviews

Gyanesh Rahatekar - PeerSpot reviewer
Achieve seamless incident response with valuable monitoring capabilities and reliable alerts
There are multiple features related to OpenText SiteScope monitoring that I have found to be very useful, such as SSL monitoring. If SSL is present as a file in a server, then OpenText SiteScope is a very effective tool to monitor when that certificate expires. It provides comprehensive information related to SSL certificates and log monitoring. If any kind of required keyword monitoring is present in the log file, OpenText SiteScope has excellent functionality for monitoring. It is very easy to configure and obtain the correct information related to end-user requirements. The agentless monitoring feature of OpenText SiteScope is particularly impressive and easy to configure and gather information from. According to the operations team perspective, there is no impact related to resource management from the agentless monitoring. It demonstrates very low resource consumption related to its functionality.
ROBERT-CHRISTIAN - PeerSpot reviewer
Has many predefined correlation rules and is brilliant for investigation and log analysis
It is very complicated to write your own correlation rules without the help of Splunk support. What Splunk could do better is to create an API to the standard SIEM tools, such as Microsoft Sentinel. The idea would be to make it less painful. In ELK Stack, Kibana is the query language with which you can search log files. I believe Splunk has also a query language in which they search their log files, but once you have identified the log file that you want to use for further security correlation, you want to very quickly transport that into your SIEM tool, such as Microsoft Sentinel. That is something that Splunk could make a little bit less painful because it is a lot of effort to find that log file and forward it. An API with Microsoft Sentinel or a similar SIEM tool would be a good idea.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Being able to create your monitors for monitoring your internal URLs and databases and other things like that is valuable."
"The stability of the Micro Focus Voltage SiteScope is good."
"Simplest tool for monitoring servers, web content, databases and other hardware. Its dashboard is really good."
"For the system environment, SiteScope can be useful."
"The system is really powerful; instead of executing jobs multiple times, I can configure it once, schedule, and apply it on multiple servers in sequence."
"The most valuable feature of SiteScope is its infrastructure monitoring."
"The most valuable feature of OpenText SiteScope is that it is easy to manage and user-friendly."
"Instead of executing jobs multiple times, I can configure it once, schedule, and apply it on multiple servers in sequence. It allows me to create scripts and automate several processes, making tasks simpler and more efficient."
"We have a more secure, robust environment, which keeps the harmful software out of the zone required."
"Splunk gives my clients the ability to bring multiple, disparate types of data together, then correlate and report on them."
"The features of Splunk Enterprise Security that I appreciate the most are its flexibility and scalability, as it integrates disparate security solutions, offers many out-of-the-box apps through Splunkbase, enables straightforward customization, and supports efficient detection and alerting processes that improve overall business resilience."
"The ability to ingest different log types from many different products in our environment is most valuable."
"Splunk has significantly helped with aggregation and correlation of critical logs. Not having to grep on each individual server has made everyone more efficient."
"Internal tracking is helpful because we do not like to deal with multiple ticketing systems, and I am not a fan of ServiceNow. We are able to keep everything internal and utilize Enterprise Security."
"Splunk helps us be more proactive. We can take predictive action to identify and block threats so that nothing harmful gets into the system."
"The risk-based alerting is excellent."
 

Cons

"It could be more reliable using a database repository instead of a log repository."
"The tool needs to support new technologies like Kubernetes. It also needs to improve scalability."
"They should provide more templates for new vendor devices."
"Full application functionality available via the API. There are some functions you can perform managing monitors, that are only available through the UI."
"You can use OpenText SiteScope for small or middle environments. But if you want to monitor a large environment, it is not scalable. If you can monitor a large environment with OpenText SiteScope, it can be a valuable product."
"They need to offer better technical support, which, right now, is not helpful or responsive."
"It should improve its integrations with various tools, especially service management tools."
"I would be very interested in having transaction traceability included in the product, to give us a better view of what is really going wrong in a particular method and action."
"I find the process for customizing, developing, testing, deploying, and refining detections in Splunk Enterprise Security to be cumbersome."
"It needs more formatting control without having to be an admin."
"Custom visualizations are real hard. While the default visualizations are good, creating enhanced visualizations are complex."
"Splunk Enterprise Security can be improved mainly from the user interface regarding the visualizations."
"It would be nice to have more advanced UEBA in Splunk Enterprise Security. Additionally, it would be beneficial if they offered more threat intel feeds for free."
"We will receive alerts only for the administrators and deployment servers, but not for all servers."
"Splunk could enhance its offerings by incorporating modules for network detection and response and fraud management, along with improving its threat intelligence management capabilities."
"The documentation is in definite need of improvement."
 

Pricing and Cost Advice

"Depending on your requirements, there are two licensing models available. A simple point model, or an endpoint model."
"The product's pricing should be lower since there are many open-source products that can do the same job with better user interfaces. The tool's pricing is yearly and you need to pay for support."
"You have to pay for their "solution templates". Other tools do not charge you for knowledge-based monitoring bundles."
"SiteScope licensing can be node based-or monitor-based. I would recommend for node-based licensing."
"When Micro Focus Voltage SiteScope has introduced approximately eight years ago and there was not very much competition making the price high. However, when comparing the price of Micro Focus Voltage SiteScope now to other tools, they should reduce the price. It is similar to a legacy tool at this point."
"The pricing or licensing cost for Micro Focus SiteScope is often bundled with other things, so the cost for each individual would be difficult to calculate. Pricing could be $2,000,000 a year. My company pays for technical support because it's part of the contract with Micro Focus SiteScope. You buy the licenses, but you're also paying for the support. With Nagios, it's much more bare-bones as far as paying for licenses and the software itself, and my company didn't have to use as much Nagios support yet in one or two years because there weren't too many problems using Nagios, and it's much more cost-effective, so that's one of the reasons why my company is migrating to Nagios from Micro Focus SiteScope."
"I rate the solution's pricing a six out of ten on a scale where one is cheap and ten is expensive."
"Licensing is a little steep."
"While some clients find the cost of Splunk Enterprise Security to be on the higher end, its pricing is comparable to other SIEM solutions."
"The subscription is monthly."
"Splunk Enterprise Security is expensive."
"Expensive compared to other options."
"Splunk is definitely not a cheap solution. It is an expensive product."
"The solution is a little expensive."
"We have had a reduction in the time it takes to resolve issues and correlate what has failed."
"It can be expensive, especially the licensing costs. However, there is added value in what it can do, not just log aggregation."
report
Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.
867,341 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
23%
Manufacturing Company
17%
Computer Software Company
8%
University
6%
Computer Software Company
14%
Financial Services Firm
14%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise4
Large Enterprise20
By reviewers
Company SizeCount
Small Business110
Midsize Enterprise48
Large Enterprise255
 

Questions from the Community

What do you like most about Micro Focus Voltage SiteScope?
The most valuable feature of SiteScope is its infrastructure monitoring.
What is your experience regarding pricing and costs for Micro Focus Voltage SiteScope?
The licensing scheme for Micro Focus tools is reasonable, and more affordable. It's seen as medium or de-receivable.
What needs improvement with Micro Focus Voltage SiteScope?
The new version D2 has improved with a smart plan UI interface. However, while still using the classic WebTop UI, it looks outdated and not HTML5 compatible. They are currently in progress to migra...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

Micro Focus SiteScope, HPE SiteScope, SiteScope
No data available
 

Overview

 

Sample Customers

Vodafone Ireland, Kuveyt Turk Participation Bank
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about OpenText SiteScope vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
867,341 professionals have used our research since 2012.