

Find out what your peers are saying about Salesforce, Splunk, SAP and others in Data Visualization.
It is definitely not a beginner-friendly tool, but it is definitely the best tool that is available in the market for insurance-related products.
If you use it properly, then you can get value from it.
We see logs between 10 to 30 minutes in contrast to six hours with other platforms, marking a substantial ROI for organizations needing to prevent breaches.
I have seen value in security cost savings with Wazuh, as using proprietary EDR versions could save us substantial money.
I feel that Splunk's documentation is highly maintained, regular updates seem to happen, and I don't have any suggestions for improvement as it is currently at its best.
However, as I mentioned, sometimes they might not have proper knowledge or sometimes they are not sufficiently technical.
The CSMs and account managers in the channel team are great, providing assistance not just with selling the product but also for implementation, deployment, and aftercare.
They responded quickly, which was crucial as I was on a time constraint.
We use the open-source version of Wazuh, which does not provide paid support.
The documentation is good and provides clear instructions, though it's targeted at those with technical backgrounds.
If we have compliance requirements to just store logs, then Splunk Cloud Platform is not the right platform.
If you purchase something initially and later have increased requirements, they can scale up and scale down your environment.
Splunk Cloud Platform's scalability works well, especially for smaller businesses, but can present issues for larger enterprises facing stricter regulations and greater integration requirements.
It can accommodate thousands of endpoints on one instance, and multiple instances can run for different clients.
Currently, I don't see any limitations in terms of scalability as Wazuh can still connect many endpoints.
This is because of the backend work the agent is collecting and processing, causing the laptop to slow down and the bandwidth to decrease.
Its stability is commendable, enabling easy visibility into logs, effective data ingestion, and successful operations with diverse integrations and third-party platforms.
This is usually improved by following best practices such as optimizing SPL queries, using the proper index, and managing data correctly.
I rate Splunk Cloud Platform a ten out of ten for stability and reliability.
The stability of Wazuh is strong, with no issues stemming from the solution itself.
The stability of Wazuh is largely dependent on maintenance.
The indexer frequently times out, requiring system restarts.
I know there are tutorials on the website, but I feel if they rolled out more free courses on such things that provide a link to a free course for beginner training, I feel people would be interested in it.
In terms of enhancement for Splunk Cloud Platform, I would say if we could create add-ons or if we get the capability to build add-ons directly through cloud, not talking about the add-on builder framework, but something editor-like where we will directly edit our conf files from any specific app or TA provided by Splunk Cloud Platform itself.
I would suggest going for Splunk Cloud Platform because AWS, Microsoft Azure, and Google Cloud are very expensive in comparison.
Machine learning is needed along with understanding user behavior and behavioral patterns.
If we had a correlation of logs where I could just search one unique ID and then the unique ID pulls every system in a time-wise manner, that would be a great improvement I would suggest.
The integration modules are insufficiently developed, necessitating the creation of custom integration solutions using tools like Logstash and PubSub.
Once you are in the partnership with Splunk Cloud Platform and with Cisco, you can have good discounts, you can make the deal and discuss, and they are willing to help you as a partner in finding the solution and finding your target.
When it comes to the cost of Splunk Cloud Platform, I would rate it a five from one to ten, with one being cheap and ten being expensive.
If you really need the SIEM solution, then it is very cost-effective for your company.
Wazuh is completely free of charge.
I would definitely recommend Wazuh, especially considering Fortinet's licensing model which is confusing and overpriced in my opinion.
Totaling around two lakh Indian rupees per month.
The most valuable feature of Splunk Cloud Platform is its robustness and ability to ingest logs.
The search capability utilizes the same compute assigned, and compared to on-premises, it is very efficient and fast because on-premises we had fixed compute assigned with limits set for searching per role or application.
The platform's alerting mechanism is valuable, as there is software that makes alarms in case of attacks.
Wazuh is a SIEM tool that is highly customizable and versatile.
The system allows us to monitor endpoints effectively and collect security data that can be utilized across other platforms such as SOAR.
With this open source tool, organizations can establish their own customized setup.
| Product | Mindshare (%) |
|---|---|
| Splunk Cloud Platform | 1.0% |
| Tableau Enterprise | 9.5% |
| Qlik Sense | 4.9% |
| Other | 84.6% |
| Product | Mindshare (%) |
|---|---|
| Wazuh | 4.1% |
| Splunk Enterprise Security | 7.6% |
| IBM Security QRadar | 5.5% |
| Other | 82.8% |
| Company Size | Count |
|---|---|
| Small Business | 37 |
| Midsize Enterprise | 16 |
| Large Enterprise | 56 |
| Company Size | Count |
|---|---|
| Small Business | 27 |
| Midsize Enterprise | 15 |
| Large Enterprise | 9 |
Splunk Cloud Platform enhances operational efficiency with streamlined log management and real-time data analysis, offering customizable dashboards, seamless system integration, and a user-friendly interface that simplifies infrastructure management.
Splunk Cloud Platform stands out for its robust indexing and powerful search capabilities, delivering end-to-end visibility across environments. AI-driven security measures enhance cybersecurity intelligence, while its flexible log management reduces resolution times. The platform integrates effortlessly with diverse systems, supporting centralized log management, security monitoring, and application performance analysis. Users leverage its comprehensive analytics for troubleshooting, alerting, and visualization, optimizing costs and ensuring compliance with unified data sources.
What are the key features of Splunk Cloud Platform?In many industries, Splunk Cloud Platform is implemented primarily for unified log management, cybersecurity initiatives, and application performance monitoring. Businesses utilize it to streamline IT operations, integrate data sources, and leverage insights for troubleshooting and strategic decision-making, ensuring compliance and optimized resource use.
Wazuh offers an open-source platform designed for seamless integration into diverse environments, making it ideal for enhancing security infrastructure. Its features include log monitoring, compliance support, and real-time threat detection, providing effective cybersecurity management.
Wazuh stands out for its ability to integrate easily with Kubernetes, cloud-native infrastructures, and various SIEM platforms like ELK. It features robust MITRE ATT&CK correlation, comprehensive log monitoring capabilities, and detailed reporting dashboards. Users benefit from its file integrity monitoring and endpoint detection and response (EDR) capabilities, which streamline compliance and vulnerability assessments. While appreciated for its customization and easy deployment, room for improvement exists in scalability, particularly in the free version, and in areas such as threat intelligence integration, cloud integration, and container security. The platform is acknowledged for its strong documentation and technical support.
What are the key features of Wazuh?In industries like finance, healthcare, and technology, Wazuh is utilized for its capabilities in log aggregation, threat detection, and vulnerability management. Companies often implement its features to ensure compliance with stringent regulations and to enhance security practices across cloud environments. By leveraging its integration capabilities, organizations can achieve unified security management, ensuring comprehensive protection of their digital assets.
We monitor all Data Visualization reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.