Splunk Cloud Platform Reviews

We use it for Log Management and also for another bit of management. It feeds data into Splunk and Splunk writes the rules and based on that, it will pick up incidents. 

It is good from a cost perspective, in terms of the cost of the data you're looking at. There is no cost barrier. 

For my current requirements, the tool theme seems to be meeting my requirements, from a cost and requirements perspective.

The only thing I would say is an issue is the cost. It matches other products. The costs can be justified for the value that we gain. The entire threat analysis stack should come in a bundle. If the cost was matchable with other products I think Splunk would pick up in the market. 

I did evaluate other products and installations. I can't compare it to Splunk. 

I have been using Splunk Cloud for a year. 

There are two people who are part of admin that use Splunk in my company. 

We have a policy where we have to keep the domain controllers on lock with sensitive servers for about 90 days. We look at the controls around once a week to check if they need to be attended to. 

We initially contacted their support during the implementation. It was not for a very complex issue. It was more for a consultation. 

Their support is good. 

I was new to Splunk and had a problem with understanding the forwarders and worker safety management.

My team was able to install it themselves. 

In terms of how long it took to deploy, between coding, testing, and other things, it took about four weeks to complete the project to complete the initial installation. Altogether it was four to five weeks. They should improve the customization. 

Splunk is a leader in its marker. 

Splunk offers more features than its competitors. Other solutions are not on the same level to be able to compare them. 

I would rate Splunk a nine out of ten. 

The queries and pulling out the exact reports is a little challenging. I get complaints about it. I would like to see more reports or default out of the box reports. That would be more useful, useful, and then people can avoid writing inquiries.

We are a Splunk reseller and Splunk Cloud is one of the main products that we work with.

Our customers implement this product for log management, application management, application testing, and process management. They also have it for customer service use cases.

The most valuable feature of Splunk Cloud is the quick setup.

The only thing that is missing compared with Splunk Enterprise is the ability to manually edit all config files. This task is easily handled with support tickets but sometimes is would be nice to experiment directly.

I have been selling Splunk products for ten years.

We have not heard any complaints about stability. 

Scalability with Splunk is the best because it scales to anything. Their promise to users is scalability and availability. Our customers range in size from very small companies to large ones.

Over the past ten years that we have been selling Splunk products, they have been in constant contact for support. I would say that it is invaluable. They have great response time and great skills, and I couldn't compare it with any other software company.

Installing Splunk Cloud, itself, is nothing. The length of time for the total deployment depends on how many log sources that you have. It can be completed in a matter of hours.

Being a cloud-based product, Splunk does all of the maintenance. We don't have to do anything to maintain it.

The licensing costs depend on the data ingest volume. If you weigh the costs and the benefits, the benefits are great and it is money well spent. 

I feel that Splunk Cloud is good as it is. It is the best tool on the market.

My advice to anybody who is considering this solution is to start now and don't wait. Every day that you wait, you can be wasting time and money.

I would rate this solution a nine out of ten.

We have a public URL that allows anyone to authenticate for ADFS. This allows them to connect using Active Directory. 

The most valuable feature for me is the flexibility of being able to send the log to the https endpoint. I know that it is possible to export the logs, although it is easier for me to communicate with the endpoints concerning what I am interested in.

This is a feature-rich product.

Although there is documentation available, it is really hard for me to find relevant topics on what it is that I'm searching for. For example, when something goes wrong, I can spend hours trying to figure out the problem and have nothing to refer to. I find that it confuses me somewhat, so it is something that can be improved.

I feel that technical support can be improved because it is always done through the use of a support ticket, which is not very convenient.

Setting up and configuring integrations are not easy to do. 

We implement this solution within the past year.

Splunk Cloud is quite stable. I do not remember having any issues with bugs or glitches.

I would expect that the scalability is quite good, albeit expensive.

Technical support is okay, although they are not as quick to respond as I believe they should be. I feel that some of the support processes are not very convenient.

The initial setup is straightforward, although we still revisit it. We started several months ago and are still trying to set it up in a more structured way. Really, we are still in the deployment stage in some regards because we are struggling with exactly how it should be set up.

We had some assistance from a consultant after the initial setup was completed. It worked well for simple uses, but now, we have some help in trying to configure it to meet our needs.

The price is something that people complain about.

My advice to anybody who is implementing Splunk Cloud is to dedicate the time and resources required to learn it and use it. Investigate the features.

I would rate this solution a seven out of ten.

This solution is very useful for our Infosec team that manages our enterprise-level security. It collects logs from all of our on-premises devices and servers for search and analysis. All of the logs are collected on-premises and then sent to Splunk Cloud for analysis. 

The reporting and dashboards are very good.

In terms of reporting, everything is customizable. You can write a query to have the reports and dashboards created for you, and it will be based on that data.

The documentation is pretty good.

Integration with products and devices works well. We haven't had any limitations or problems connecting to our network devices.

The training models can only be accessed for 30 days, even if it is paid training. This is a limitation that I feel should be lifted because if we are paying for it then we want to be able to continue to use it.

I have been working with Splunk Cloud for a year and a half.

This solution is pretty stable. It is used on a daily basis and in the past year and a half, I haven't faced any issues.

We have a team of 20 for our SOC operations who will be monitoring the results of Splunk Cloud.

The support is pretty good. We are a premium customer so when we raise a ticket, they deal with it right away. Also, if it needs to be escalated then the account manager will get involved.

We did not use another log management solution prior to this one.

Splunk Cloud is pretty straightforward and easy to set up. It is a SaaS solution, so we don't have to do anything on our end.

We are a team of six people who maintain our security solution.

Compared to other products, Splunk Cloud is expensive.

The licensing is based on the amount of data that we send to the cloud on a daily basis. It is expensive, although it has more features than other SIEM tools.

Overall, I find that Splunk is pretty good. It is a very mature product and I can see that compared to when I used to five years ago as an end-user, they have been improving in every way. The interface is something that has become more user-friendly over time. When there is something missing, it is handled by another product from the vendor. For example, if you need to add predictive analysis then you use Splunk Phantom.

There are many other SIEM tools on the market, such as IBM QRadar and ArcSight Logger. Splunk is comparatively more expensive but it has many features and good functionality. I definitely recommend it.

I would rate this solution a nine out of ten.

Our primary use case for the solution is login collections.

The documentation available could be improved as there is sometimes no documentation or updated documentation available. For example, I tried to get the metrics from MongoDB, and there's very low documentation for the module.

We have been using this solution for a few months.

We haven't used it enough to comment on its scalability. We have approximately 100 people utilizing the solution.

We don't have experience with customer service and support.

The initial setup was straightforward and took approximately 20 minutes.

I rate the solution a five out of ten. The documentation available could be improved.

My main use case for Splunk Cloud Platform is troubleshooting system errors.

One specific example of how I use Splunk Cloud Platform for troubleshooting system errors is when activation doesn't go through on our side; we look through Splunk logs to see what the error was and how we could fix it.

I also use Splunk Cloud Platform for dashboard monitoring.

The best features Splunk Cloud Platform offers include that everything I need is easily ready, and I can interpret it easily, which makes my troubleshooting faster and more accurate.

The easy interpretation of data helps me reduce the time spent on certain tasks because it reduces the time that I have to manually look into an account and see what the issue is, as Splunk Cloud Platform directly tells me the point of failure, what was the request that made it fail, and what it expects.

Splunk Cloud Platform has positively impacted my organization by reducing the number of customers who are in longer outages because we are able to identify the problem sooner through Splunk Cloud Platform.

I would say the outages that we've encountered are 20% less than what we had last year.

I'm not sure if it's Splunk Cloud Platform or if it's a network issue on our side, but sometimes the data that it produces loads a little bit slower.

Sometimes there are several steps involved in finding the right data, adjusting time ranges and fields, so it would be nice if the workflows felt more connected and required fewer clicks.

I have been using Splunk Cloud Platform for one year.

Splunk Cloud Platform is stable.

Splunk Cloud Platform's scalability is good because we are able to ingest more data as we need.

The customer support for Splunk Cloud Platform is great because we've had several outages where it was Splunk Cloud Platform's issue, and we were able to resolve it very quickly because of the customer support.

I would rate the customer support a nine out of ten.

I did not previously use a different solution.

I have seen a return on investment through time saved and money saved because we have higher success rates and fewer customers who are down.

My experience with pricing, setup cost, and licensing is that it's pretty easy to follow as far as identifying the price points.

I did not evaluate other options before choosing Splunk Cloud Platform.

I would advise people looking into using Splunk Cloud Platform to start with a clear use case and understanding of what data they need to bring into Splunk Cloud Platform and to take advantage of the built-in tools.

Splunk Cloud Platform's AI capabilities are governed and pretty secure, which helps my team be better engineers while troubleshooting issues.

I would say that the accuracy of Splunk Cloud Platform's AI capabilities falls about 80% since I have seen it make an assumption on its own when not required to, but overall, I have had a pretty good experience with it.

In our organization, Splunk Cloud Platform is used as a centralized cloud-based solution for monitoring and troubleshooting, allowing us to search multiple data across different sources in one place, though the visibility is limited to the logs and fields sent into Splunk Cloud Platform.

The platform's ability to scale aligns well with my organization's demand fluctuations, allowing us to handle higher log volume without having to constantly add or manage the infrastructure ourselves, which reduces the workload of my team and lets me focus on troubleshooting and monitoring instead of planning.

My experience with Splunk Cloud Platform's app ecosystem is that it's pretty easy to manage because Splunk Cloud Platform already handles most of the maintenance and updates for us, with most updates being pretty seamless, although we do need to review some changes to ensure that the dashboard and integration still work as expected.

I prefer using the native capabilities in Splunk Cloud Platform when they meet the need because they're usually easier to manage and more consistent, though third-party integrations are still useful for specialized use cases, they can add more complexity during security, maintenance, and data movement; I think I would love to lean towards native tools first and only use third-party integrations when they provide a clear benefit.

I've developed a tool using AI, and the zero-setup approach of Splunk Cloud Platform makes it much easier to start using AI because we don't have to spend as much time configuring infrastructure and integrations, with the main benefit being speed and simplicity while still being able to keep the workflow of my troubleshooting process.

The subscription model impacts my financial planning for data platform investments, but that is not something that I am responsible for; I'm assuming that the main challenge would be making sure that the usage by the team is within the expected level since higher usage means increased cost.

I would rate this review overall as nine out of ten.