Splunk Enterprise Security vs Tableau comparison

Cancel
You must select at least 2 products to compare!
Microsoft Logo
33,792 views|18,846 comparisons
Splunk Logo
26,951 views|21,978 comparisons
Tableau Logo
26,921 views|23,202 comparisons
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Splunk Enterprise Security and Tableau based on real PeerSpot user reviews.

Find out what your peers are saying about Microsoft, Splunk, Wazuh and others in Security Information and Event Management (SIEM).
To learn more, read our detailed Security Information and Event Management (SIEM) Report (Updated: March 2024).
763,955 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The data connectors that Microsoft Sentinel provides are easy to integrate when we work with a Microsoft agent.""Investigations are something really remarkable. We can drill down right to the raw logs by running different queries and getting those on the console itself.""The part that was very unexpected was Sentinel's ability to integrate with Azure Lighthouse, which, as a managed services solution provider, gives us the ability to also manage our customers' Sentinel environments or Sentinel workspaces. It is a big plus for us. With its integration with Lighthouse, we get the ability to monitor multiple workspaces from one portal. A lot of the Microsoft Sentinel workbooks already integrate with that capability, and we save countless amounts of money by simply being able to almost immediately realize multitenant capabilities. That alone is a big plus for us.""The most valuable feature is the onboarding of the workloads. You can see all that has been onboarded in your account on the dashboards.""There are some very powerful features to Sentinel, such as the integration of various connectors. We have a lot of departments that use both IaaS and SaaS services, including M365 as well as Azure services. The ability to leverage connectors into these environments allows for large-scale data injection.""The main benefit is the ease of integration.""The Identity Behavior tab furnishes us with the entire history linked to each IP or domain that has either accessed or attempted to access our system.""The product can integrate with any device."

More Microsoft Sentinel Pros →

"The ability to analyze huge amounts of sales data and accurate prediction of sales forecasting is the most valuable feature.""The product has a good security posture.""The product provides visibility and enables us to correlate data and generate alerts.""The solution has plenty of features that are good.""It is quite extensible. It is a platform that we can build our use instead of each case instead of each case being limited or restricted to each capability. This is probably the best feature.""We have a one stop dashboard for health of some of our services where you can click in and it takes you to other dashboards that have custom near real-time metrics that show the application's health.""The most valuable features of the solution are it is straightforward to use and the documentation is good for finding out how to get the data you are looking for.""You can run reports against multiple devices at the same time. You are able to troubleshoot a single application on a thousand servers. You can do this with a single query, since it is very easy to do."

More Splunk Enterprise Security Pros →

"The most valuable features of the solution are the permission management and the user management.""The data visualization piece is most valuable. We do ad-hoc analysis or one-time shot things, but there are things that we have to track every single day. When our management and our customers want to see how things are changing, the dashboarding provides that information. Tableau is key in providing that data on a refresh basis. We use a data blending tool that pumps the data into Tableau, and we just schedule it to run every single day. So, the automation of the data and being able to present it to people who are interested are the most valuable features.""One of the most valuable features is that the solution allows users to build interactive dashboards. This allows the end user to modify the criteria or the filtering if need be. As far as for my personal use as a QA Engineer, I really value how extensive their API document support has been.""There is a lot of APIs available, which means that Tableau can be customized to a large extent.""The most valuable features are the visualizations, the way they show the combination charts.""Tableau will automatically show charts for the related data that I choose making it very easy to use.""It is a stable solution.""Visualization attributes: Marks – Color, Size, Label, etc.. Easily Accessible and Intuitive."

More Tableau Pros →

Cons
"Documentation is the main thing that could be improved. In terms of product usage, the documentation is pretty good, but I'd like a lot more documentation on Kusto Query Language.""I believe one of the challenges I encountered was the absence of live training sessions, even with the option to pay for them.""The learning curve could be improved. I am still learning it. We were able to implement the basic features to get them up and running, but there are still so many things that I don't know about all its features. They have a lot of features that we have not been able to use or apply. If they could work on reducing the solution's learning curve, that would be good. While there is a training course held by Microsoft to learn more about this solution, there is a cost associated with it.""The playbook is a bit difficult and could be improved.""The solution could improve the playbooks.""We'd like to see more connectors.""We do see continuous improvement all the time, however, I haven't got a specific feature that is lacking or not well designed.""We have been working with multiple customers, and every time we onboard a customer, we are missing an essential feature that surprisingly doesn't exist in Sentinel. We searched the forums and knowledge bases but couldn't find a solution. When you onboard new customers, you need to enable the data connectors. That part is easy, but you must create rules from scratch for every associated connector. You click "next," "next," "next," and it requires five clicks for each analytical rule. Imagine we have a customer with 150 rules."

More Microsoft Sentinel Cons →

"There are new services which are coming up. If Splunk can catch up with the speed of Amazon, and with the integration, instead of us waiting for another year or so, that would be good.""It is a challenge to manage the environment in such a way, that one’s log, even with the bandwidth license, isn’t exceeded.""The case management area of the ES could be improved. The ability to move cases through various stages and states. The ability to close a case would be key improvement.""Certain sections of the developer documentation could use some updating and clarification.""Previously, they developed custom connectors or add-ons for a lot of applications. But that number can be upgraded still. There are a lot of applications in the world that are not supported.""Its interface and usability can always be improved.""Its search or filtering capability is nice, but it can be improved. It is currently a bit complicated, and it should be simplified. If we can write the search filter in a more simplified way, it would be better.""It works as intended for us, and we are getting everything that we need out of it. If anything, its initial setup can be improved a bit."

More Splunk Enterprise Security Cons →

"I also work as an SME on the platform side. Tableau is very nice and jazzy for the end-users, but there are pain points for the admins. Performance is something about which we hear a lot of complaints, such as the dashboard doesn't open in time. It performs well on the desktop but not on the server. I know that there is always a limitation when it comes to a huge amount of data or the complexity of the calculations, but we often hear from end-users about the performance on the server side. It is easy to drag and drop all the columns and do what we want, but if it is not going to load better on the server, users are not going to like it.""It would be nice if we could export more raw data. Currently, there is a limit as to how much data you can export.""The Hyper Extract functionality is not as strong as that provided by Microsoft SQL.""The customization in the front end is a bit difficult.""When it comes to large datasets, the data should be extracted faster.""Navigating through activities like cleansing, reshaping, and wrangling extensive or complicated datasets could prove challenging within the Tableau environment.""The solution could improve the scalability, it is difficult to make changes.""Lacks customization in some areas."

More Tableau Cons →

Pricing and Cost Advice
  • "It comes with a Microsoft subscription which the customer has, so they don't have to invest somewhere else."
  • "It is a consumption-based license model. bands at 100, 200, 400 GB per day etc. Azure Sentinel Pricing | Microsoft Azure"
  • "Good monthly operational cost model for the detection and response outcomes delivered, M365 logs don't count toward the limits which is a good benefit."
  • "I have had mixed feedback. At one point, I heard a client say that it sometimes seems more expensive. Most of the clients are on Office 365 or M365, and they are forced to take Azure SIEM because of the integration."
  • "It is kind of like a sliding scale. There are different tiers of pricing that go from $100 per day up to $3,500 per day. So, it just kind of depends on how much data is being stored. There can be additional costs to the standard license other than the additional data. It just kind of depends on what other services you're spinning up in Azure, or if you're using something like Azure log analytics."
  • "I am just paying for the log space with Azure Sentinel. It costs us about $2,000 a month. Most of the logs are free. We are only paying money for Azure Firewall logs because email logs or Azure AD logs are free to use for us."
  • "Sentinel is a bit expensive. If you can figure a way of configuring it to meet your needs, then you can find a way around the cost."
  • "Azure Sentinel is very costly, or at least it appears to be very costly. The costs vary based on your ingestion and your retention charges."
  • More Microsoft Sentinel Pricing and Cost Advice →

  • "Pricing and licensing is quite expensive. But for the value the product provides, it seems at par in the market."
  • "Although Splunk is an expensive product, it is designed to be utilized across your organization in order to maximize your ROI and lower your TCO."
  • "It is not cheap."
  • "Splunk Enterprise becomes extremely expensive after the 20GB/month license."
  • "You will eat up whatever you purchase quickly. The level of insights that Splunk empowers is addictive."
  • "Splunk licensing model might seem expensive but with all the gain in functionalities you will have compared to traditional SIEM solutions I think it’s worth the price."
  • "Pricing is pretty fair."
  • "While licensing can be a concern, there are ways to reduce the licensing costs including filtering some events."
  • More Splunk Enterprise Security Pricing and Cost Advice →

  • "For big business, Tableau could be expensive as having a lot of Tableau server users (entering with a browser to reports) could be a bit expensive."
  • "Best advice on pricing is to anticipate the desire for more licenses once the results of this product are acknowledged in other parts of your company."
  • "Paying for users you never setup or buying expensive desktop licenses for users who can solve their users with web editing on the server are the two biggest expenses."
  • "Buy 50 at a time. Project your use base every three months, and project your requirements forward."
  • "Tableau can be costly (but this can be indefinable, such as user experience vs. cheaper etc.)"
  • "I wish there was more of a subscription model with the pricing when it comes to Tableau, so you can get all the latest version upgrades/features if you pay monthly/annually."
  • "The cost is high."
  • "Deployment of dashboards to viewers and unit supervisors can be prohibitively expensive."
  • More Tableau Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
    763,955 professionals have used our research since 2012.
    Comparison Review
    Guillermo (Bill) Cabiro
    I do use both Tableau and QlikView. Although very different, I really like both solutions. They belong to the new BI generation known as Interactive Visual Analytics In my opinion, QlikView has a more intuitive interface for regular users or executives that are not technical experts but the development side is a little more complex. Up to version 12 QlikView did not provide drag & drop features. If a user wanted to see something not included in the application the new object had to be created by a power user or developer because Qlikview's scripting has somewhat of a learning curve. On the positive side, QlikView's scripting is a great asset as it functions as an ETL allowing the integration of hundreds of different data sources into the same visual app. Another feature that’s extremely useful is Qlik’s proprietary Associative Model that allows the users to visualize data relationships that exist as well as those that do not. Tableau on the other hand is a lot easier to use for developers, analysts or power users who need to connect, manipulate and visualize data rather quickly. While this makes Tableau a better fit for the more analytical crowd, it may not be as appealing or intuitive to the regular or casual business users as QlikView is. Tableau has full pivot, drag & drop and drill down capabilities that are great for developers or power users. They can rotate measures and dimensions and graph them instantly using visualization best practices as suggested by the… Read more →
    Questions from the Community
    Top Answer:Yes, Azure Sentinel is a SIEM on the Cloud. Multiple data sources can be uploaded and analyzed with Azure Sentinel and… more »
    Top Answer:It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for… more »
    Top Answer:We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is… more »
    Top Answer:For tools I’d recommend:  -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is… more »
    Top Answer:Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring… more »
    Top Answer:One key advantage of Splunk over competitors like IBM QRadar is its superior device integration capabilities.
    Top Answer:It depends on the Data architecture and the complexity of your requirement Some great tools in the market are Qlik… more »
    Top Answer:Both tools have their positives and negatives. First, I should mention that I am relatively new to Tableau. I have been… more »
    Top Answer:Tableau is easy to set up and maintain. In about a day it is possible for the entire platform to be deployed for use… more »
    Comparisons
    Also Known As
    Azure Sentinel
    Tableau Desktop, Tableau Server, Tableau Online
    Learn More
    Overview

    Microsoft Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution that lets you see and stop threats before they cause harm. Microsoft Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for alert detection, threat visibility, proactive hunting, and threat response. Eliminate security infrastructure setup and maintenance, and elastically scale to meet your security needs—while reducing IT costs. With Microsoft Sentinel, you can:

    - Collect data at cloud scale—across all users, devices, applications, and infrastructure, both on-premises and in multiple clouds

    - Detect previously uncovered threats and minimize false positives using analytics and unparalleled threat intelligence from Microsoft

    - Investigate threats with AI and hunt suspicious activities at scale, tapping into decades of cybersecurity work at Microsoft

    - Respond to incidents rapidly with built-in orchestration and automation of common tasks

    To learn more about our solution, ask questions, and share feedback, join our Microsoft Security, Compliance and Identity Community.

    Splunk Enterprise Security is a SIEM, log management, and IT operations analytics tool. The solution provides users with the ability to secure their information and manage their data in the cloud, data centers, or other applications. Splunk Enterprise Security also offers visibility from different areas, levels, and devices, rather than from a single system, thus, providing its users with flexibility. Splunk Enterprise Security can monitor data and analyze, detect, and prevent intrusions. This benefits users as it provides alerts to possible intrusions, helps users to be proactive, and reduces risk factors. 

    Full visibility across your environment

    Break down data silos and gain actionable intelligence by ingesting data from multicloud and on-premises deployments. Get full visibility to quickly detect malicious threats in your environment.

    Fast threat detection

    Defend against threats with advanced security analytics, machine learning and threat intelligence that focus detection and provide high-fidelity alerts to shorten triage times and raise true positive rates.

    Efficient investigations

    Gather all the context you need and initiate flexible investigations with security analytics at your fingertips. The built-in open and extensible data platform boosts productivity and drives down fatigue.

    Open and scalable

    Built on an open and scalable data platform, you can stay agile in the face of evolving threats and business needs. Splunk meets you where you are on your cloud journey, and integrates across your data, tools and content.

    Tableau is a tool for data visualization and business intelligence that allows businesses to report insights through easy-to-use, customizable visualizations and dashboards. Tableau makes it exceedingly simple for its customers to organize, manage, visualize, and comprehend data. It enables users to dig deep into the data so that they can see patterns and gain meaningful insights. 

    Make data-driven decisions with confidence thanks to Tableau’s assistance in providing faster answers to queries, solving harder problems more easily, and offering new insights more frequently. Tableau integrates directly to hundreds of data sources, both in the cloud and on premises, making it simpler to begin research. People of various skill levels can quickly find actionable information using Tableau’s natural language queries, interactive dashboards, and drag-and-drop capabilities. By quickly creating strong calculations, adding trend lines to examine statistical summaries, or clustering data to identify relationships, users can ask more in-depth inquiries.

    Tableau has many valuable key features:

    • Tableau dashboards provide a complete view of your data through visualizations, visual objects, text, and more.
    • Tableau provides convenient, real-time options to collaborate with other users and instantly share data in the form of visualizations, sheets, and dashboards. 
    • Tableau ensures connectivity to both live data sources and data extraction from external data sources as in-memory data. This gives users the flexibility to use data from more than one source without any restrictions. 
    • Tableau gives many data source option, ranging from spreadsheets, big data, on-premise files, relational databases, non-relational databases, data warehouses, and big data, to on-cloud data. 
    • Tableau has a lot of pre-installed information on maps, such as cities, postal codes, and administrative boundaries. 
    • Tableau has a foolproof security system based on authentication and permission systems for data connections and user access. Tableau also gives you the freedom to integrate with other security protocols.

    Tableau stands out among its competitors for a number of reasons. Some of these include its fast data access, easy creation of visualizations, and its stability. PeerSpot users take note of the advantages of these features in their reviews:

    Romil S., Deputy General Manager of IT at Nayara Energy, notes, "Its visualizations are good, and its features make the development process a little less time-consuming. It has an in-memory extract feature that allows us to extract data and keep it on the server, and then our users can use it quickly.

    Ariful M., Consulting Practice Partner of Data, Analytics & AI at FH, writes, “Tableau is very flexible and easy to learn. It has drag-and-drop function analytics, and its design is very good.

    Sample Customers
    Microsoft Sentinel is trusted by companies of all sizes including ABM, ASOS, Uniper, First West Credit Union, Avanade, and more.
    Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.
    Accenture, Adobe, Amazon.com, Bank of America, Charles Schwab Corp, Citigroup, Coca-Cola Company, Cornell University, Dell, Deloitte, Duke University, eBay, Exxon Mobil, Fannie Mae, Ferrari, French Red Cross, Goldman Sachs, Google, Government of Canada, HP, Intel, Johns Hopkins Hospital, Macy's, Merck, The New York Times, PayPal, Pfizer, US Army, US Air Force, Skype, and Walmart.
    Top Industries
    REVIEWERS
    Financial Services Firm22%
    Computer Software Company11%
    Manufacturing Company8%
    Comms Service Provider8%
    VISITORS READING REVIEWS
    Computer Software Company16%
    Financial Services Firm10%
    Government9%
    Manufacturing Company7%
    REVIEWERS
    Computer Software Company19%
    Financial Services Firm15%
    Government10%
    Energy/Utilities Company8%
    VISITORS READING REVIEWS
    Financial Services Firm15%
    Computer Software Company14%
    Government9%
    Manufacturing Company7%
    REVIEWERS
    Computer Software Company12%
    Financial Services Firm12%
    University7%
    Healthcare Company7%
    VISITORS READING REVIEWS
    Educational Organization34%
    Financial Services Firm11%
    Computer Software Company8%
    Manufacturing Company6%
    Company Size
    REVIEWERS
    Small Business33%
    Midsize Enterprise21%
    Large Enterprise47%
    VISITORS READING REVIEWS
    Small Business25%
    Midsize Enterprise16%
    Large Enterprise60%
    REVIEWERS
    Small Business31%
    Midsize Enterprise11%
    Large Enterprise57%
    VISITORS READING REVIEWS
    Small Business19%
    Midsize Enterprise13%
    Large Enterprise68%
    REVIEWERS
    Small Business32%
    Midsize Enterprise18%
    Large Enterprise50%
    VISITORS READING REVIEWS
    Small Business14%
    Midsize Enterprise39%
    Large Enterprise47%
    Buyer's Guide
    Security Information and Event Management (SIEM)
    March 2024
    Find out what your peers are saying about Microsoft, Splunk, Wazuh and others in Security Information and Event Management (SIEM). Updated: March 2024.
    763,955 professionals have used our research since 2012.

    Splunk Enterprise Security is ranked 2nd in Security Information and Event Management (SIEM) with 65 reviews while Tableau is ranked 2nd in BI (Business Intelligence) Tools with 18 reviews. Splunk Enterprise Security is rated 8.4, while Tableau is rated 8.4. The top reviewer of Splunk Enterprise Security writes "Can be used to find any threats or vulnerabilities inside a user’s environment". On the other hand, the top reviewer of Tableau writes "Provides fast data access with in-memory extracts, makes it easy to create visualizations, and saves time". Splunk Enterprise Security is most compared with Wazuh, Dynatrace, IBM Security QRadar, Elastic Security and Azure Monitor, whereas Tableau is most compared with Microsoft Power BI, Amazon QuickSight, Domo, SAS Visual Analytics and SAP Analytics Cloud.

    We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.