Try our new research platform with insights from 80,000+ expert users

OpenText SiteScope vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

OpenText SiteScope
Average Rating
7.8
Reviews Sentiment
8.0
Number of Reviews
27
Ranking in other categories
Application Performance Monitoring (APM) and Observability (31st)
Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.6
Number of Reviews
313
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. OpenText SiteScope is designed for Application Performance Monitoring (APM) and Observability and holds a mindshare of 0.5%, up 0.4% compared to last year.
Splunk Enterprise Security, on the other hand, focuses on Security Information and Event Management (SIEM), holds 9.5% mindshare, down 12.4% since last year.
Application Performance Monitoring (APM) and Observability
Security Information and Event Management (SIEM)
 

Featured Reviews

Gyanesh Rahatekar - PeerSpot reviewer
Achieve seamless incident response with valuable monitoring capabilities and reliable alerts
There are multiple features related to OpenText SiteScope monitoring that I have found to be very useful, such as SSL monitoring. If SSL is present as a file in a server, then OpenText SiteScope is a very effective tool to monitor when that certificate expires. It provides comprehensive information related to SSL certificates and log monitoring. If any kind of required keyword monitoring is present in the log file, OpenText SiteScope has excellent functionality for monitoring. It is very easy to configure and obtain the correct information related to end-user requirements. The agentless monitoring feature of OpenText SiteScope is particularly impressive and easy to configure and gather information from. According to the operations team perspective, there is no impact related to resource management from the agentless monitoring. It demonstrates very low resource consumption related to its functionality.
ROBERT-CHRISTIAN - PeerSpot reviewer
Has many predefined correlation rules and is brilliant for investigation and log analysis
It is very complicated to write your own correlation rules without the help of Splunk support. What Splunk could do better is to create an API to the standard SIEM tools, such as Microsoft Sentinel. The idea would be to make it less painful. In ELK Stack, Kibana is the query language with which you can search log files. I believe Splunk has also a query language in which they search their log files, but once you have identified the log file that you want to use for further security correlation, you want to very quickly transport that into your SIEM tool, such as Microsoft Sentinel. That is something that Splunk could make a little bit less painful because it is a lot of effort to find that log file and forward it. An API with Microsoft Sentinel or a similar SIEM tool would be a good idea.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Our experiences with Micro Focus SiteScope have been mostly positive as we can easily work with multiple monitors and different types of monitors pretty quickly. There are a lot of out-of-the-box solutions for us through Micro Focus SiteScope, so we don't have to do that much custom coding for the vast majority of requests that we get for monitoring. There are some limitations that we've run into and some problems every once in a while, but they've been relatively minor."
"The URL monitoring is excellent."
"It's a very flexible product so you can run a script out of it, even straight out of the box."
"VM monitoring is pretty good showing good visualizations of how VMs are operating within the context of all the VMs running on the same hypervisor."
"Infrastructure monitoring is the most valuable feature."
"It's easy to template standard monitoring configurations, and automate monitoring configuration."
"SiteScope has built-in flat file DB, hence it removes the dependency of an external DB for higher stability."
"The system is really powerful; instead of executing jobs multiple times, I can configure it once, schedule, and apply it on multiple servers in sequence."
"The varied prebuilt feature is the most valuable because it ensures that we have complete coverage over all of the key questions."
"The correlation searches (properly configured) populate the Incident Management dashboard and provide me a quick birds-eye view of my most important concerns."
"Splunk allows us to customize processing and dashboards, which helps us take care of our customers' needs."
"The features of Splunk Enterprise Security that I have found most valuable include the risk-based score and UBA/UEBA, user behavior analytics, or user and entity behavior analytics."
"Aggregation searches have reduced time and difficulty of identifying trends and conditions which need to reviewed."
"The best part of Splunk Enterprise Security is its customizable settings."
"I like the ease with which dashboards can be created."
"This solution helps us increase our productivity."
 

Cons

"It may lack some features other products in the category have like more detailed transaction tracking."
"Sometimes in a huge environment, I think the documentation does not provide the required calculations so you can't know what the required set up should be. You need to test."
"The interface of OpenText SiteScope needs improvement. It has a Java-based interface, which is slow and could be simplified for better usability."
"Full application functionality available via the API. There are some functions you can perform managing monitors, that are only available through the UI."
"The tool needs to support new technologies like Kubernetes. It also needs to improve scalability."
"They need to offer better technical support, which, right now, is not helpful or responsive."
"The lack of an agent means that remote monitoring requires multiple firewall ports to be opened."
"It could be more reliable using a database repository instead of a log repository."
"The incident response dashboard could be more user-friendly."
"Professional support is great, but too expensive."
"It could be more user friendly, in terms of the end-user experience."
"​On the technical side, it would be nice to see aspects of the recent acquisition of Phantom make it into the core Splunk Enterprise, not just become a part of the premium Enterprise Security.​"
"The first thing that comes to mind is a little bit of UI improvement. It sometimes can be a little bit buggy or it can be a little bit slow, but that varies from customer to customer."
"The initial setup is complex, but this is necessary. We needed to take into consideration how to direct log files from thousands of machines to Splunk, and how to ingest those files."
"Splunk could enhance its offerings by incorporating modules for network detection and response and fraud management, along with improving its threat intelligence management capabilities."
"We do have to educate developers on how to not blow it up. It is a little to easy to write an expensive query and overly stress the system. This could be improved."
 

Pricing and Cost Advice

"You have to pay for their "solution templates". Other tools do not charge you for knowledge-based monitoring bundles."
"SiteScope licensing can be node based-or monitor-based. I would recommend for node-based licensing."
"Licensing is a little steep."
"I rate the solution's pricing a six out of ten on a scale where one is cheap and ten is expensive."
"It is expensive. I don't like its licensing. I don't like anything where you have to license it by individual licenses. I'm not a fan of that, but that's just me."
"Depending on your requirements, there are two licensing models available. A simple point model, or an endpoint model."
"The pricing or licensing cost for Micro Focus SiteScope is often bundled with other things, so the cost for each individual would be difficult to calculate. Pricing could be $2,000,000 a year. My company pays for technical support because it's part of the contract with Micro Focus SiteScope. You buy the licenses, but you're also paying for the support. With Nagios, it's much more bare-bones as far as paying for licenses and the software itself, and my company didn't have to use as much Nagios support yet in one or two years because there weren't too many problems using Nagios, and it's much more cost-effective, so that's one of the reasons why my company is migrating to Nagios from Micro Focus SiteScope."
"The product's pricing should be lower since there are many open-source products that can do the same job with better user interfaces. The tool's pricing is yearly and you need to pay for support."
"The price of Splunk is reasonable."
"Splunk's cost is very high. They need to review the pricing. They have to go back and totally readdress the market."
"Splunk Enterprise Security is expensive."
"Splunk's costing is a little more difficult. The pricing method is complicated, and the way that costing is calculated in Splunk is a little more difficult."
"It is expensive. That is why many customers have moved to IBM QRadar. The price is definitely a challenge for customers."
"Pricing is pretty fair."
"We have seen ROI and improvements as we have continued to use the product, but they are more reactive."
"I work on the technical side, so I don't know precise figures. However, I know that Splunk is a premium product, so it's somewhat costly. Still, you get a lot of unique features for the money."
report
Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.
858,435 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
31%
Manufacturing Company
14%
Computer Software Company
11%
Government
5%
Computer Software Company
15%
Financial Services Firm
15%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Micro Focus Voltage SiteScope?
The most valuable feature of SiteScope is its infrastructure monitoring.
What is your experience regarding pricing and costs for Micro Focus Voltage SiteScope?
The licensing scheme for Micro Focus tools is reasonable, and more affordable. It's seen as medium or de-receivable.
What needs improvement with Micro Focus Voltage SiteScope?
Integration related to other applications with OpenText SiteScope is effective, as we are using both functionalities in our environment. The integration for other applications related to alerts and...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Also Known As

Micro Focus SiteScope, HPE SiteScope, SiteScope
No data available
 

Overview

 

Sample Customers

Vodafone Ireland, Kuveyt Turk Participation Bank
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about OpenText SiteScope vs. Splunk Enterprise Security and other solutions. Updated: May 2023.
858,435 professionals have used our research since 2012.