No more typing reviews! Try our Samantha, our new voice AI agent.

Panther vs Splunk Enterprise Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Panther
Ranking in Security Information and Event Management (SIEM)
41st
Average Rating
8.0
Reviews Sentiment
7.3
Number of Reviews
1
Ranking in other categories
AI Data Analysis (27th)
Splunk Enterprise Security
Ranking in Security Information and Event Management (SIEM)
1st
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
386
Ranking in other categories
Log Management (2nd), IT Operations Analytics (1st)
 

Mindshare comparison

As of April 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Panther is 1.0%, up from 0.2% compared to the previous year. The mindshare of Splunk Enterprise Security is 7.0%, down from 9.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Splunk Enterprise Security7.0%
Panther1.0%
Other92.0%
Security Information and Event Management (SIEM)
 

Featured Reviews

RT
Infosec Analyst at a tech vendor with 201-500 employees
Detection capabilities and helpful support team enhance log analysis and integration flexibility
I find Panther's detection capabilities and integrations to be highly valuable. It allows integration with anything as long as I am willing to write detections, and their team is very helpful. I find its log analysis capabilities valuable. It enables me to filter down to individual roles in AWS, and if I am skilled at SQL queries, I can query anything. The infrastructure as code feature allows me to use Git repositories to manage detections and import detections from other Git repositories.
Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I find Panther's detection capabilities and integrations to be highly valuable."
"Splunk has give us the capability to easily track problems and their status."
"Technical support is excellent! It is of top notch level."
"The most valuable features of Splunk Enterprise Security are its high-performance data collection, flexible query language, and its versatility across the organization."
"The product is pretty good, we are pretty satisfied with it, and it does what it does."
"It provides logs in one place, so they are easy to find; it collects the logs from multiple places, then you have just one place where you see the whole flow from the front-end to the back-end."
"You can integrate Splunk with third-party security automation solutions and set rules for automatic response."
"It is user-friendly. It is more effective than other solutions. The support and help for troubleshooting and the documentation from Splunk make it very effective."
"I have noticed a return on investment with Splunk Enterprise Security, as it delivers substantial value for money."
 

Cons

"The solution could be improved by providing more built-in integrations, which would reduce the need for me to build them myself."
"Pricing is one factor that hurts everybody on the market; the client, the reseller, everybody that touches it. Only Splunk makes money."
"It needs integration with a configuration management solution."
"When we were trying to implement an enterprise solution on-premise, we had scaling issues."
"The default threat intel feeds create many false positives and noise, which is counterproductive."
"Splunk has a steeper learning curve, making it feel less user-friendly."
"There's been a big push for SBC compute over the ingestion model, which will hamper us."
"The support that is included with the standard licensing fee is very bad."
"The huge price increases that have been experienced over the last couple of years do not appear to be justified by new features or items in general."
 

Pricing and Cost Advice

Information not available
"The price of Splunk Enterprise Security fluctuates based on the customer, but I believe it's quite costly, especially for our clientele."
"Pricing and licensing are quite high compared to other tools or SIEM tools, but the features justify it."
"Pricing can be a limiting factor. You have to continuously tune what you are bringing in and make sure what you bring in is of value."
"It is possible to use a developer's license, which is up to 10GB per day of volume traffic, which is usually enough for most use cases."
"Setup cost is cheap: It is free, it is user-friendly, and it is fast."
"The price of this solution is expensive. However, it has great features. If you want a great solution you need to pay a price matching the features."
"Its pricing model can be improved."
"Splunk Enterprise Security is expensive."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
890,124 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Construction Company
14%
Manufacturing Company
13%
Financial Services Firm
9%
Computer Software Company
8%
Financial Services Firm
14%
Manufacturing Company
9%
Computer Software Company
9%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business116
Midsize Enterprise50
Large Enterprise269
 

Questions from the Community

What is your experience regarding pricing and costs for Panther?
I find the pricing to be reasonable, although I can't recall the exact cost.
What needs improvement with Panther?
The solution could be improved by providing more built-in integrations, which would reduce the need for me to build them myself.
What is your primary use case for Panther?
We use Panther ( /products/panther-reviews ) for our SIEM ( /categories/security-information-and-event-management-siem ) solution. It is used for aggregating logs and analyzing user activities. We ...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
 

Overview

 

Sample Customers

Docker, Loom, Discord, Dropbox, HubSpot, Asana, GoFundMe, Zapier, Benchling, JupiterOne, Jumio, Bitstamp, Intercom, Randori, and Cedar
Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
Find out what your peers are saying about Splunk, Wazuh, IBM and others in Security Information and Event Management (SIEM). Updated: April 2026.
890,124 professionals have used our research since 2012.