No more typing reviews! Try our Samantha, our new voice AI agent.

Splunk Enterprise Security vs Visokio Omniscope comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Splunk Enterprise Security
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
418
Ranking in other categories
Log Management (1st), Security Information and Event Management (SIEM) (1st), IT Operations Analytics (1st)
Visokio Omniscope
Average Rating
9.0
Reviews Sentiment
8.8
Number of Reviews
1
Ranking in other categories
BI (Business Intelligence) Tools (40th), Data Visualization (32nd)
 

Mindshare comparison

Splunk Enterprise Security and Visokio Omniscope aren’t in the same category and serve different purposes. Splunk Enterprise Security is designed for Security Information and Event Management (SIEM) and holds a mindshare of 7.6%, down 9.4% compared to last year.
Visokio Omniscope, on the other hand, focuses on BI (Business Intelligence) Tools, holds 0.6% mindshare, up 0.1% since last year.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Splunk Enterprise Security7.6%
IBM Security QRadar5.5%
Wazuh4.1%
Other82.8%
Security Information and Event Management (SIEM)
BI (Business Intelligence) Tools Mindshare Distribution
ProductMindshare (%)
Visokio Omniscope0.6%
Microsoft Power BI7.4%
Tableau Enterprise5.9%
Other86.1%
BI (Business Intelligence) Tools
 

Featured Reviews

Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Helps us detect cyber threats quickly and integrate multiple feeds effectively
Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.
it_user376869 - PeerSpot reviewer
Data Analysis and Visualisation Consultant at a consultancy with 51-200 employees
There are several valuable features, but the two we use the most are ETL DataManager to create data process flows and API Connectors to Ad servers.
It's still a niche product and the mobile/web development seems to still be in progress of improving. The room for improvement aspect is in comparison to other software that has a cloud interface which lets their users create/edit visualisations via a browser, doing away with the need to actually install anything. You just login with an email/password similar to how Google docs or MS Office On-line works. A lot of software is starting to move along this path and have started to offer stripped down on-line versions of the desktop software with fewer features. However, I know that the upcoming 3.0 (no set release date but optimistically it is targeted for this year) will start to allow users to "stream". How this works and the extent of it is still under wraps by the look of things. Also, in terms of mobile/web development this is to do with how the reports are sent to end users. Currently the standard way is to send a specialised file format called a .iok file via email, which the end user will open within their own viewer version of Omniscope. They are moving away from this by allowing the developer/analyst to host them on-line and view them in a browser see these examples http://staging.omniscope.me/ Omniscope has partially (still bugs in 2.9) incorporated the ability to have a browser within itself for the sole purpose of being able to create HTML or Javascript library visualisations like d3.js within it (basically you embed standalone HTML pages). So any of these examples will potentially be available to incorporate https://github.com/mbostock/d3/wiki/Gallery.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Splunk provides immediate visibility into key business metrics and new business insights that deliver immediate value."
"The flexibility of the search capability is most valuable, and you can use it for more than just a basic log aggregator, which makes it powerful in that regard."
"If I need to integrate devices for logs, it is easier with Splunk. We can integrate different applications, network devices, and databases. It is also very rich in documents. It is the best."
"The feature that we use the most is the correlation search engine within ES."
"It has virtual visualization, and other products do not."
"Splunk goes beyond collecting basic metrics like CPU or memory utilization; it comprehensively gathers data from various sources, including networks, applications, and virtualization, eliminating the need for siloed solutions and enhancing the capabilities of existing engineering software."
"The investigation feature helps the team seamlessly put everything together, providing a consistent view of all relevant artifacts for incidents."
"I haven't had the chance to properly sink my teeth into Enterprise Security but so far I like that they added the MITRE ATT&CK features."
"It's provided our organization with time savings by taking the repetitive manual copy, pasting and cost calculations into more automated tasks which will execute by itself."
 

Cons

"The way Splunk Enterprise Security could improve is by pulling in and mapping my DHCP data and tracking users' IP addresses as it changes throughout sessions, and being able to keep track of who is actually assigned to what IP address more natively."
"Considering the contract thing and the whole legal area, it takes forever to get the contracts signed and to be able to agree to the terms and conditions for my company as well as for Splunk's team."
"Some of the search functions can be better. There has been a lot of talk at the conference about the update of SPL before each iteration. That will be a lot of help."
"In terms of the interface, it could include some improvements for the look and feel."
"One thing that I probably dislike the most about the Splunk product is their support."
"Previously, they developed custom connectors or add-ons for a lot of applications. But that number can be upgraded still. There are a lot of applications in the world that are not supported."
"When you get into large amounts of data, Splunk can get pretty slow."
"It is a good product, but the Achilles heel for a lot of organizations is the cost model for it because it gets expensive."
"It's still a niche product and the mobile/web development seems to still be in progress of improving."
 

Pricing and Cost Advice

"We have seen ROI and improvements as we have continued to use the product, but they are more reactive."
"Most people share the same thought that the ingestion rates can get pretty pricey. There is a lot of work we do to curate the data that we send to Splunk so that it is not too noisy or too expensive."
"Truly evaluate the data you want to ingest and go slow. Pulling in data that can provide no use to your mission only wastes data against your license."
"Expensive compared to other options."
"Splunk Enterprise Security is expensive."
"Splunk Enterprise Security is affordable."
"The variables and the flexibility that Splunk provides are helpful, especially in a hybrid and multi-cloud environment."
"The pricing depends on the bandwidth of an organization and is good compared to some SIEM tools. IBM, for example, is quite costly. But Microsoft Sentinel is notably cheaper."
Information not available
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
911,493 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Outsourcing Company
9%
Manufacturing Company
8%
Construction Company
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business129
Midsize Enterprise65
Large Enterprise285
No data available
 

Questions from the Community

What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
How does Splunk compare with Azure Monitor?
Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...
Ask a question
Earn 20 points
 

Also Known As

No data available
Omniscope
 

Overview

 

Sample Customers

Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
General Electric, Cairn Capital, Group M, Credit Suisse, Colgate, Belden, Xerox, Weightmans, DHL, Lloyds & Clarksons, Faroe Petroleum, Capita, Philips, Aviva, Investec
Find out what your peers are saying about Splunk, IBM, Wazuh and others in Security Information and Event Management (SIEM). Updated: August 2026.
911,493 professionals have used our research since 2012.