No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Splunk Enterprise Security enhances incident detection and response, reducing the meantime to resolution by approximately 30%.
It offers valuable features such as seamless integration, robust log management, and compatibility with other SIEMs.
Its threat intelligence capabilities and risk-based alerting significantly improve threat detection and analysis.
The platform's flexibility allows for custom dashboards and correlation searches, aiding in efficient security monitoring.
Splunk Enterprise Security's machine learning and aggregation features provide vital insights into security events, improving business resilience.

CONS

Splunk Enterprise Security users face challenges with technical support, which is often criticized for being slow to respond and lacking efficacy.
Licensing for Splunk Enterprise Security is considered expensive, making it less accessible for smaller organizations.
Users encounter a steep learning curve and complexity in mastering and utilizing all the capabilities of Splunk Enterprise Security.
Query construction in Splunk Enterprise Security is complicated, requiring significant expertise and sometimes resulting in performance issues.
Integration with third-party tools in Splunk Enterprise Security is difficult and often incurs additional costs.
 

Splunk Enterprise Security Pros review quotes

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 3, 2015
Great log management capabilities with flexible and comprehensive search capabilities, scalable and easy to use.
it_user174663 - PeerSpot reviewer
Systems/Applications Specialist with 201-500 employees
Feb 19, 2015
I'm not sure about the money but in saved time and a new kind of visibility for the system/business process this product has been revolutionary in the working environment.
it_user313119 - PeerSpot reviewer
Integration Architect at a manufacturing company with 1,001-5,000 employees
Sep 21, 2015
What Splunk calls operational intelligence: fast availability of operational data spread across several servers to prevent or react faster to outages or performance decreases.
Learn what your peers think about Splunk Enterprise Security. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
892,287 professionals have used our research since 2012.
implemen269433 - PeerSpot reviewer
Technical Director at a consultancy with 11-50 employees
May 7, 2017
This is the right choice if you are looking for a platform that can combine all machine-generated data and use it for various use cases from different domains.
it_user363165 - PeerSpot reviewer
Products Manager at a tech services company with 5,001-10,000 employees
May 7, 2017
It has been helping a lot of my clients with fast data mining and information propagation.
it_user664626 - PeerSpot reviewer
Business Analyst at a retailer with 10,001+ employees
May 14, 2017
I would strongly recommend this product, as it would be very beneficial for service operations and management.
it_user594183 - PeerSpot reviewer
Security Engineer at a retailer with 10,001+ employees
May 14, 2017
They provide excellent predefined user cases.
it_user664632 - PeerSpot reviewer
Senior IT Security Operations at a pharma/biotech company with 10,001+ employees
May 14, 2017
The speed of the search engine
it_user664635 - PeerSpot reviewer
Performance Consultant at a tech services company with 10,001+ employees
May 14, 2017
The data representation options in the dashboards are excellent.
JN
IT Infrastructure Architect at a tech company with 201-500 employees
May 17, 2017
It helps us to detect viruses and security events from our network.
 

Splunk Enterprise Security Cons review quotes

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 3, 2015
Operational workflow, use case framework, and ticketing systems need improvement to make it suitable for SOC environments.
it_user174663 - PeerSpot reviewer
Systems/Applications Specialist with 201-500 employees
Feb 19, 2015
It can be easier to setup and adding new sources which Splunk are improving with every new version.
it_user313119 - PeerSpot reviewer
Integration Architect at a manufacturing company with 1,001-5,000 employees
Sep 21, 2015
I've ever used it, just studied it.
Learn what your peers think about Splunk Enterprise Security. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
892,287 professionals have used our research since 2012.
implemen269433 - PeerSpot reviewer
Technical Director at a consultancy with 11-50 employees
May 7, 2017
Visualizations can improve. There are some performance and stability issues with the visualization layer.
it_user363165 - PeerSpot reviewer
Products Manager at a tech services company with 5,001-10,000 employees
May 7, 2017
The GUI should be improved, in other words, the overall appearance.
it_user664626 - PeerSpot reviewer
Business Analyst at a retailer with 10,001+ employees
May 14, 2017
VMware and security device integration looks a bit complex.
it_user594183 - PeerSpot reviewer
Security Engineer at a retailer with 10,001+ employees
May 14, 2017
Scalability is always a question for this product.
it_user664632 - PeerSpot reviewer
Senior IT Security Operations at a pharma/biotech company with 10,001+ employees
May 14, 2017
The administration of the cluster and app deployment to indexers or search heads can be done only using ssh access and command line, there is no GUI tools for that.
it_user664635 - PeerSpot reviewer
Performance Consultant at a tech services company with 10,001+ employees
May 14, 2017
The user access control could be much more granular, so that the admins can control r/w/x access for specific features of the product like dashboards, etc.
JN
IT Infrastructure Architect at a tech company with 201-500 employees
May 17, 2017
It needs documentation, and "how-to-do" information. It's complicated to build reports and views.