No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Splunk Enterprise Security has significantly reduced the mean time to resolution, improving operational efficiency and enabling faster incident response.
Organizations have experienced a substantial return on investment with Splunk Enterprise Security by avoiding the costs associated with previous SIEM solutions.
Analysts appreciate the ability to aggregate data from various sources, allowing comprehensive monitoring and improved security threat detection.
Splunk Enterprise Security provides extensive customization options, enabling tailored security solutions to fit specific organizational needs.
The integration capabilities of Splunk Enterprise Security allow seamless connections with existing security and IT systems, enhancing overall threat detection and response.

CONS

Licensing costs for Splunk Enterprise Security are considerably high, making it less accessible for many organizations.
Splunk Enterprise Security generates a significant number of false positives, requiring customization of default rules to reduce noise.
Resource utilization in Splunk Enterprise Security is an area needing improvement, especially for heavy, resource-intensive queries.
Splunk Enterprise Security could improve integration capabilities, with more robust connections to third-party tools and applications.
Splunk Enterprise Security has a steep learning curve, requiring extensive training and documentation to effectively use its features.
 

Splunk Enterprise Security Pros review quotes

Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Nov 13, 2025
The integration and plugin availability are nice, and the AI module is also great.
reviewer2136243 - PeerSpot reviewer
Risk Advisory Cyber Cloud Analyst at a consultancy with 1,001-5,000 employees
Nov 14, 2025
The query functionality is very easy to use and fast to retrieve logs in comparison to other SIEM solutions.
Prateek Dwivedi - PeerSpot reviewer
IT Analyst at cmc
Jul 13, 2026
Its biggest strength is giving organizations real-time visibility into their IT and security environment.
Learn what your peers think about Splunk Enterprise Security. Get advice and tips from experienced pros sharing their opinions. Updated: September 2026.
916,212 professionals have used our research since 2012.
Vishwanath Singh - PeerSpot reviewer
Senior Engineer 3 at a financial services firm with 10,001+ employees
Jul 9, 2026
Overall, the performance of our applications has really gone up because of Splunk Enterprise Security because now we are able to track everything in the backend.
Krishnakumar Mahadevan - PeerSpot reviewer
CISO at Spink Solutions Private Limited
May 29, 2026
Bundling the solution in a single umbrella is the strongest point.
JT
Senior Security Engineer at a hospitality company with 201-500 employees
Sep 15, 2026
Splunk Enterprise Security has reduced the team's average mean time to resolve by about 70%, with resolution times dropping from between 20 minutes to about an hour to just under 10 minutes using Agentic AI together with Splunk Enterprise Security.
Venu Yenuganti - PeerSpot reviewer
Manager, Cyber Threat Management at a retailer with 10,001+ employees
Nov 26, 2025
Splunk Enterprise Security definitely improved our operations.
DB
Consultant at Principal Financial Group
Jul 27, 2026
Splunk Enterprise Security has helped reduce my team's average meantime to resolve.
AnshulKumar - PeerSpot reviewer
MDR Analyst at a consultancy with 501-1,000 employees
Jun 22, 2026
In my experience, Splunk Enterprise Security detects incidents approximately 20% much faster than other tools.
Himanshu Vasoya - PeerSpot reviewer
Observability Engineer at Data Elicit Solutions Pvt. Ltd.
Apr 9, 2026
What I like the most about Splunk Enterprise Security is the flexibility and customization it offers, as you can create dashboards, write custom SPL queries, and design detections exactly as per your environment while leveraging strong correlation capabilities and visualizing everything in a single place, which makes analysis easier and far better than other solutions.
 

Splunk Enterprise Security Cons review quotes

Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Nov 13, 2025
We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy.
reviewer2136243 - PeerSpot reviewer
Risk Advisory Cyber Cloud Analyst at a consultancy with 1,001-5,000 employees
Nov 14, 2025
The user interface is the main area for improvement.
Prateek Dwivedi - PeerSpot reviewer
IT Analyst at cmc
Jul 13, 2026
One of the biggest challenges is its licensing cost, especially for organizations that ingest large volumes of data.
Learn what your peers think about Splunk Enterprise Security. Get advice and tips from experienced pros sharing their opinions. Updated: September 2026.
916,212 professionals have used our research since 2012.
Vishwanath Singh - PeerSpot reviewer
Senior Engineer 3 at a financial services firm with 10,001+ employees
Jul 9, 2026
The entire tool is a little slow. It can be improved, as the lagging is noticeable.
Krishnakumar Mahadevan - PeerSpot reviewer
CISO at Spink Solutions Private Limited
May 29, 2026
The setup and configuration process is very complex and tedious, and we often need to speak with support people.
JT
Senior Security Engineer at a hospitality company with 201-500 employees
Sep 15, 2026
One improvement needed is addressing a UI bug that appears when pushing a detection via code into the test queue.
Venu Yenuganti - PeerSpot reviewer
Manager, Cyber Threat Management at a retailer with 10,001+ employees
Nov 26, 2025
Pricing is certainly an area that could use improvement. While some vendors may offer lower prices, the value we receive here truly sets this solution apart.
DB
Consultant at Principal Financial Group
Jul 27, 2026
Regarding areas of Splunk Enterprise Security that I think could be improved or enhanced, I am continuously getting the task of upgrading the system. For example, we have multiple heavy forwarders, and every time we upgrade the system, there should be some issue after an upgrade.
AnshulKumar - PeerSpot reviewer
MDR Analyst at a consultancy with 501-1,000 employees
Jun 22, 2026
One complaint is that it is very expensive for organizations.
Himanshu Vasoya - PeerSpot reviewer
Observability Engineer at Data Elicit Solutions Pvt. Ltd.
Apr 9, 2026
Regarding pricing, Splunk Enterprise Security is on the higher side in terms of cost. It is more suitable for enterprises that can fully utilize its capabilities, and smaller organizations might find it expensive, especially when dealing with large volumes of data and licensing models.