No more typing reviews! Try our Samantha, our new voice AI agent.
Splunk Enterprise Security Logo

Splunk Enterprise Security pros and cons

Vendor: Splunk
4.2 out of 5
Badge Ranked 1
Leave a reviewWhy PeerSpot?

Pros & Cons summary

Splunk Enterprise Security reduces mean time to resolution by 70% and enhances team efficiency with AI-driven detection. While it excels in log management and real-time monitoring, user concerns include cost, complex onboarding, and alert management. Improvement areas include data integration and customer support. Complex setup and false alerts hinder usability, yet its enhanced investigation capabilities and adherence to SLAs make it a strong SIEM choice for those prioritizing productivity, despite potential barriers for smaller organizations.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Splunk Enterprise Security reduces mean time to resolution by around 70%, enhancing team efficiency and investigation capabilities.
Analyst productivity increases by transitioning to Splunk Enterprise Security from third-party SIEMs, improving detection while adhering to SLAs.
It utilizes AI-driven detection for faster investigations and incidents response, supporting real-time monitoring and reducing mean time to detection by about 30%.
Enterprise Security allows comprehensive log management, efficiently processing and analyzing large data volumes for enhanced threat detection and response.
It's recognized for outstanding customer support and technical documentation, facilitating efficient troubleshooting and system improvements.

CONS

Some users express concerns about the pricing of Splunk Enterprise Security, indicating that it is expensive compared to other market solutions, which can affect adoption, especially for smaller organizations.
Users find that the customer support could be improved, often describing delays in response and dissatisfaction with the support experience.
False positives in alerts are a recurring issue, prompting calls for better tuning and alert management capabilities to support analysts more effectively.
The complexity and learning curve of Splunk Enterprise Security are frequently mentioned as barriers to effective use, with users desiring easier setup and more accessible training resources.
Data integration capabilities could be enhanced, as users report challenges with onboarding diverse data sources and the need for more seamless third-party integrations.
 

Splunk Enterprise Security Pros review quotes

Sathis-Kumar - PeerSpot reviewer
Sathis-Kumar
Senior Manager at Bank of America
Nov 13, 2025
The integration and plugin availability are nice, and the AI module is also great.
Read full review
reviewer2136243 - PeerSpot reviewer
reviewer2136243
Risk Advisory Cyber Cloud Analyst at a consultancy with 1,001-5,000 employees
Nov 14, 2025
The query functionality is very easy to use and fast to retrieve logs in comparison to other SIEM solutions.
Read full review
Prateek Dwivedi - PeerSpot reviewer
Prateek Dwivedi
IT Analyst at cmc
Jul 13, 2026
Its biggest strength is giving organizations real-time visibility into their IT and security environment.
Read full review
Buyer's Guide
Splunk Enterprise Security
September 2026
Free Report: Splunk Enterprise Security Reviews and More
Learn what your peers think about Splunk Enterprise Security. Get advice and tips from experienced pros sharing their opinions. Updated: September 2026.
DOWNLOAD NOW
914,351 professionals have used our research since 2012.
Vishwanath Singh - PeerSpot reviewer
Vishwanath Singh
Senior Engineer 3 at a financial services firm with 10,001+ employees
Jul 9, 2026
Overall, the performance of our applications has really gone up because of Splunk Enterprise Security because now we are able to track everything in the backend.
Read full review
Krishnakumar Mahadevan - PeerSpot reviewer
Krishnakumar Mahadevan
CISO at Spink Solutions Private Limited
May 29, 2026
Bundling the solution in a single umbrella is the strongest point.
Read full review
JT
Judah Tettey
Senior Security Engineer at a hospitality company with 201-500 employees
Sep 15, 2026
Splunk Enterprise Security has reduced the team's average mean time to resolve by about 70%, with resolution times dropping from between 20 minutes to about an hour to just under 10 minutes using Agentic AI together with Splunk Enterprise Security.
Read full review
Venu Yenuganti - PeerSpot reviewer
Venu Yenuganti
Manager, Cyber Threat Management at a retailer with 10,001+ employees
Nov 26, 2025
Splunk Enterprise Security definitely improved our operations.
Read full review
DB
Dipesh-Bhawsar
Consultant at Principal Financial Group
Jul 27, 2026
Splunk Enterprise Security has helped reduce my team's average meantime to resolve.
Read full review
AnshulKumar - PeerSpot reviewer
AnshulKumar
MDR Analyst at a consultancy with 501-1,000 employees
Jun 22, 2026
In my experience, Splunk Enterprise Security detects incidents approximately 20% much faster than other tools.
Read full review
Himanshu Vasoya - PeerSpot reviewer
Himanshu Vasoya
Observability Engineer at Data Elicit Solutions Pvt. Ltd.
Apr 9, 2026
What I like the most about Splunk Enterprise Security is the flexibility and customization it offers, as you can create dashboards, write custom SPL queries, and design detections exactly as per your environment while leveraging strong correlation capabilities and visualizing everything in a single place, which makes analysis easier and far better than other solutions.
Read full review
Show 10 more reviews (out of 432)
 

Splunk Enterprise Security Cons review quotes

Sathis-Kumar - PeerSpot reviewer
Sathis-Kumar
Senior Manager at Bank of America
Nov 13, 2025
We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy.
Read full review
reviewer2136243 - PeerSpot reviewer
reviewer2136243
Risk Advisory Cyber Cloud Analyst at a consultancy with 1,001-5,000 employees
Nov 14, 2025
The user interface is the main area for improvement.
Read full review
Prateek Dwivedi - PeerSpot reviewer
Prateek Dwivedi
IT Analyst at cmc
Jul 13, 2026
One of the biggest challenges is its licensing cost, especially for organizations that ingest large volumes of data.
Read full review
Buyer's Guide
Splunk Enterprise Security
September 2026
Free Report: Splunk Enterprise Security Reviews and More
Learn what your peers think about Splunk Enterprise Security. Get advice and tips from experienced pros sharing their opinions. Updated: September 2026.
DOWNLOAD NOW
914,351 professionals have used our research since 2012.
Vishwanath Singh - PeerSpot reviewer
Vishwanath Singh
Senior Engineer 3 at a financial services firm with 10,001+ employees
Jul 9, 2026
The entire tool is a little slow. It can be improved, as the lagging is noticeable.
Read full review
Krishnakumar Mahadevan - PeerSpot reviewer
Krishnakumar Mahadevan
CISO at Spink Solutions Private Limited
May 29, 2026
The setup and configuration process is very complex and tedious, and we often need to speak with support people.
Read full review
JT
Judah Tettey
Senior Security Engineer at a hospitality company with 201-500 employees
Sep 15, 2026
One improvement needed is addressing a UI bug that appears when pushing a detection via code into the test queue.
Read full review
Venu Yenuganti - PeerSpot reviewer
Venu Yenuganti
Manager, Cyber Threat Management at a retailer with 10,001+ employees
Nov 26, 2025
Pricing is certainly an area that could use improvement. While some vendors may offer lower prices, the value we receive here truly sets this solution apart.
Read full review
DB
Dipesh-Bhawsar
Consultant at Principal Financial Group
Jul 27, 2026
Regarding areas of Splunk Enterprise Security that I think could be improved or enhanced, I am continuously getting the task of upgrading the system. For example, we have multiple heavy forwarders, and every time we upgrade the system, there should be some issue after an upgrade.
Read full review
AnshulKumar - PeerSpot reviewer
AnshulKumar
MDR Analyst at a consultancy with 501-1,000 employees
Jun 22, 2026
One complaint is that it is very expensive for organizations.
Read full review
Himanshu Vasoya - PeerSpot reviewer
Himanshu Vasoya
Observability Engineer at Data Elicit Solutions Pvt. Ltd.
Apr 9, 2026
Regarding pricing, Splunk Enterprise Security is on the higher side in terms of cost. It is more suitable for enterprises that can fully utilize its capabilities, and smaller organizations might find it expensive, especially when dealing with large volumes of data and licensing models.
Read full review
Show 10 more reviews (out of 432)

Product Categories

Product Categories
Security Information and Event Management (SIEM)
Log Management
IT Operations Analytics

Popular Comparisons

Popular Comparisons
Datadog vs Splunk Enterprise Security Logo
Datadog vs Splunk Enterprise Security
Dynatrace vs Splunk Enterprise Security Logo
Dynatrace vs Splunk Enterprise Security
Wazuh vs Splunk Enterprise Security Logo
Wazuh vs Splunk Enterprise Security
IBM Security QRadar vs Splunk Enterprise Security Logo
IBM Security QRadar vs Splunk Enterprise Security
Splunk AppDynamics vs Splunk Enterprise Security Logo
Splunk AppDynamics vs Splunk Enterprise Security
New Relic vs Splunk Enterprise Security Logo
New Relic vs Splunk Enterprise Security
Microsoft Sentinel vs Splunk Enterprise Security Logo
Microsoft Sentinel vs Splunk Enterprise Security
Elastic Security vs Splunk Enterprise Security Logo
Elastic Security vs Splunk Enterprise Security
Cribl vs Splunk Enterprise Security Logo
Cribl vs Splunk Enterprise Security
IBM Turbonomic vs Splunk Enterprise Security Logo
IBM Turbonomic vs Splunk Enterprise Security
Palantir Foundry vs Splunk Enterprise Security Logo
Palantir Foundry vs Splunk Enterprise Security
WhatsUp Gold vs Splunk Enterprise Security Logo
WhatsUp Gold vs Splunk Enterprise Security
LogRhythm SIEM vs Splunk Enterprise Security Logo
LogRhythm SIEM vs Splunk Enterprise Security
Rapid7 InsightIDR vs Splunk Enterprise Security Logo
Rapid7 InsightIDR vs Splunk Enterprise Security
Anomali vs Splunk Enterprise Security Logo
Anomali vs Splunk Enterprise Security
See all alternatives

Product Categories

Product Categories
Security Information and Event Management (SIEM)
Log Management
IT Operations Analytics

Popular Comparisons

Popular Comparisons
Datadog vs Splunk Enterprise Security Logo
Datadog vs Splunk Enterprise Security
Dynatrace vs Splunk Enterprise Security Logo
Dynatrace vs Splunk Enterprise Security
Wazuh vs Splunk Enterprise Security Logo
Wazuh vs Splunk Enterprise Security
IBM Security QRadar vs Splunk Enterprise Security Logo
IBM Security QRadar vs Splunk Enterprise Security
Splunk AppDynamics vs Splunk Enterprise Security Logo
Splunk AppDynamics vs Splunk Enterprise Security
New Relic vs Splunk Enterprise Security Logo
New Relic vs Splunk Enterprise Security
Microsoft Sentinel vs Splunk Enterprise Security Logo
Microsoft Sentinel vs Splunk Enterprise Security
Elastic Security vs Splunk Enterprise Security Logo
Elastic Security vs Splunk Enterprise Security
Cribl vs Splunk Enterprise Security Logo
Cribl vs Splunk Enterprise Security
IBM Turbonomic vs Splunk Enterprise Security Logo
IBM Turbonomic vs Splunk Enterprise Security
Palantir Foundry vs Splunk Enterprise Security Logo
Palantir Foundry vs Splunk Enterprise Security
WhatsUp Gold vs Splunk Enterprise Security Logo
WhatsUp Gold vs Splunk Enterprise Security
LogRhythm SIEM vs Splunk Enterprise Security Logo
LogRhythm SIEM vs Splunk Enterprise Security
Rapid7 InsightIDR vs Splunk Enterprise Security Logo
Rapid7 InsightIDR vs Splunk Enterprise Security
Anomali vs Splunk Enterprise Security Logo
Anomali vs Splunk Enterprise Security
See all alternatives
Related questions
  • 297
Which would you recommend to your boss, IBM QRadar or Splunk?
  • 115
What are some of the best features and use-cases of Splunk?
  • 276
What SOC product do you recommend?
  • 300
Splunk as an Enterprise Class monitoring solution -- thoughts?
  • 299
What is the biggest difference between Dynatrace and Splunk?
  • 239
IBM QRadar is rated above competitors (McAfee, Splunk, LogRhythm) in Gartner's 2020 Magic Quandrant. Agree/Disagree?
  • 131
What are the advantages of ELK over Splunk?
  • 222
How does Splunk compare with Azure Monitor?
  • 124
New risk scoring framework in the Splunk App for Enterprise Security -- thoughts?
  • 194
Splunk vs. Elastic Stack