Try our new research platform with insights from 80,000+ expert users

Microsoft Purview Audit vs Splunk Cloud Platform comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Purview Audit
Average Rating
8.0
Reviews Sentiment
8.1
Number of Reviews
2
Ranking in other categories
Log Management (45th), Microsoft Security Suite (31st)
Splunk Cloud Platform
Average Rating
8.2
Reviews Sentiment
6.0
Number of Reviews
57
Ranking in other categories
Data Visualization (3rd), IT Alerting and Incident Management (3rd)
 

Mindshare comparison

While both are Systems Management solutions, they serve different purposes. Microsoft Purview Audit is designed for Log Management and holds a mindshare of 0.3%, down 0.4% compared to last year.
Splunk Cloud Platform, on the other hand, focuses on Data Visualization, holds 0.8% mindshare, up 0.3% since last year.
Log Management
Data Visualization
 

Featured Reviews

Nagendra Nekkala - PeerSpot reviewer
Enables us to create a user in the cloud and give them access to resources through a single workflow
The PAM for Active Directory is good. ActiveOps is quite useful as a feature. The One Identity active role enables us to create a user in the cloud and give them access to resources through a single workflow. We can create rules-based access. It helps us control audit management and IT access management. We can decide what people can access and detect job functions. It enables zero trust security with hybrid AD, find delegation, and role-based access control. It provides all certificates and provides secure authentication, call-based access control, et cetera. It's really important for my critical applications. We can see who's using what, whether they are authorized, and other information to decide what access to offer. With the active role console, I can find out the obvious issues and also perform a decent setup. The One Identity active roles enable us to reduce password reset times. We can handle tasks in a matter of a minute. It simplifies AD and Azure AD management, efficiency, and security overall. The password manager is very secure and is a self-service password manager solution. It is considerably decreasing my help desk tasks. Our engineering users can reset forgotten passwords, and it can implement a stronger password. The management around access to enterprise resources keeps my data and systems secure. We're easily saving at least one hour per day using this solution. The migration from AD to Azure AD is very easy. There are simple configurations, and the migration goes rather smoothly. We use the solution support for SaaS apps through Cloud Delivered SCIM connectors. There are controls that can be configured and we can add and set permissions easily.
Ian Gatundu - PeerSpot reviewer
It improves our visibility and decision-making while helping us meet compliance standards
The Cloud Platform interface is cleaner than Splunk Enterprise's monitoring console. You can easily understand what's happening with your indexes. It's more refined than Splunk Enterprise's console, but they have the same feel and function. It's easy to monitor multiple cloud environments because you can create custom dashboards for any use case you may have. It offers good visibility because it integrates with the ITSI app, providing a clear overview of your environment. Integrating Splunk with other components on the cloud and network resources is effortless because it can collect data from various sources, including stored data from long-term storage. Splunk's reporting offers a good visualization of your data. You can visualize the statistics based on your searches. It produces some helpful graphs that enable you to easily compare what's happening in your search. It's very comprehensive.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We're easily saving at least one hour per day using this solution."
"The platform has significantly enhanced our operational insight into the overall Microsoft 365 environment."
"This is a complete log reporting tool."
"Splunk Cloud's most valuable features are log aggregations, dashboarding, business management, reporting, and business controls. Additionally, it has awesome indexing and the solution is always improving"
"The Splunk search is powerful compared to similar solutions. We get millions of data points within seconds."
"I have done health checks several times now, and those have been very valuable in getting more information about what is going on in my platform. There are also recommendations on what is going on in my environment."
"The Splunk Cloud Platform has reduced our mean time to resolve. It has easily saved 20 to 30 minutes every time someone gets locked out. We get 10 or 15 instances per day where people get locked out. It definitely saves a few hours per day."
"Its monitoring is completely automated."
"The most valuable feature of Splunk Cloud Platform is the alerting feature."
"Splunk helped reduce our mean time to resolve by around 60%."
 

Cons

"Areas for product improvement include enhancing customization options and integrating more comprehensive compliance features."
"We do have a Denial of Access happening."
"Splunk currently manages the components, which restricts our ability to access them directly."
"Although there is documentation available, it is really hard for me to find relevant topics on what it is that I'm searching for."
"We're interested in learning more about the new AI features, especially the natural language to SPL conversion."
"It needs to mature; it's just getting established in the industry on a wider scale."
"The current visuals on the dashboard could be more impactful."
"They need to provide more training options."
"Splunk Cloud Platform should have better integrations with its suite of tools."
"Splunk should increase the frequency of new feature releases, particularly those related to real-time operational flow monitoring and analytics reporting."
 

Pricing and Cost Advice

Information not available
"The price for Splunk Cloud Platform is the same as our maintenance costs for Splunk Enterprise on-premises."
"I would rate the cost an eight out of ten, with ten being the most costly."
"Splunk Cloud Platform's pricing is a little on the higher end."
"It is a touchy subject because we are locked into it. That goes back to the rehydrating data. We cannot have the retention that we want to store for legal and compliance purposes because that is seven years' worth of data for some of the indexes, so we ship them off into S3 buckets and install them there, at which point they are invisible to Splunk, so we have to rehydrate them, but we cannot rehydrate those pockets into Splunk Cloud. We have to rehydrate them into a self-hosted version of Splunk, which can take days to set up and get going. I would not call Splunk's licensing and pricing predatory, but they have made it very difficult to maintain the independence of your own data."
"The price is something that people complain about."
"The cost makes more sense for organizations that have a large amount of data ranges."
"The cost of the Splunk Cloud Platform is high, and in addition to the standard licensing fee, we also have a premium support fee."
"The pricing was negotiated through Trustwave and for our first contract in three years, we got a good deal."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
849,686 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
13%
Educational Organization
8%
Government
8%
Computer Software Company
30%
Financial Services Firm
12%
Retailer
5%
Pharma/Biotech Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What needs improvement with Microsoft Purview Audit?
Areas for product improvement include enhancing customization options and integrating more comprehensive compliance features.
What is your primary use case for Microsoft Purview Audit?
We utilize Microsoft Purview Audit for monitoring security and compliance aspects.
What do you like most about Splunk Cloud Platform?
Splunk has sped up our response and reduced the time we spend manually monitoring any logs for ticketing tools or servers. It saves us around two hours daily.
What is your experience regarding pricing and costs for Splunk Cloud Platform?
Splunk Cloud is considered too expensive, with its two product offerings both being costly. I would rate the cost an eight out of ten, with ten being the most costly.
What needs improvement with Splunk Cloud Platform?
Splunk Cloud Platform needs improvement in its security offerings, specifically in cybersecurity. It has not kept pace with competitors over recent years, and integration with the Cisco ecosystem a...
 

Overview

 

Sample Customers

Information Not Available
Mindtouch
Find out what your peers are saying about Wazuh, Splunk, Datadog and others in Log Management. Updated: April 2025.
849,686 professionals have used our research since 2012.