Splunk Enterprise Security Reviews and Pricing

it_user129642

Systems Administrator at a energy/utilities company with 10,001+ employees

Jun 17, 2014

Download

Splunk vs LogLogic: Splunk stands out for its ability to consume almost any log type and it's ease of searching

Pros and Cons

"Splunk has a very knowledgeable support staff and the Splunk support website is outstanding."

What is most valuable?

Splunk – ease of searching large amounts of data.

How has it helped my organization?

Splunk – real time alerts on critical indicators, compliance reports, troubleshooting and predictive abilities using trends.

For how long have I used the solution?

Splunk – 3 years

What was my experience with deployment of the solution?

Splunk – Had one issue requiring a support call regarding the configuration of the automated configuration deployment package. Quickly resolved.

Buyer's Guide

Splunk Enterprise Security

August 2026

Free Report: Splunk Enterprise Security Reviews and More

Learn what your peers think about Splunk Enterprise Security. Get advice and tips from experienced pros sharing their opinions. Updated: August 2026.

DOWNLOAD NOW

913,422 professionals have used our research since 2012.

What do I think about the stability of the solution?

Splunk – None.

What do I think about the scalability of the solution?

Splunk – Not needed yet.

How are customer service and support?

Splunk – Splunk has a very knowledgeable support staff and the Splunk support website is outstanding. The message boards are very active and often using them will often prevent having to call support.

How was the initial setup?

Splunk – Easy, but can get very complex depending on the type of logs to ingest. While Splunk, out of the box, handles most common types. The extraction of data from custom logs can be problematic. Although Splunk does provide tools for accomplishing this.

What other advice do I have?

Both Splunk and LogLogic excel at their intended purpose. If you are looking for an appliance that you can stick in the rack, minimally configure and then forget about, you will like the LogLogic solution. If you need to regularly search different logs for different data you will like Splunk better.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.

it_user126639

Sr. Security Engineer at a university with 1,001-5,000 employees

Jun 10, 2014

In additon to search and analytic capabilities, Splunk has under-the-cover capabilities for timestamp data.

Splunk is a pretty powerful piece of software. There is the obvious search and analytic capabilities it has but there is some robustness under the covers as well. One of those under-the-cover capabilities is detecting and understanding timestamp data. Its the sort of thing that as users of the software we simply accept and generally speaking don't spend a whole lot of time thinking about.

From an admin perspective as you start to put some effort into understanding your deployment and making sure things are working correctly one of the items to look at is the DateParserVerbose logs. Why you ask? I've recently had to deal with some timstamp issues. These internal logs generally document problems related to timestamp extraction and can tell you if, for example, there are logs being dropped for a variety of timestamp related reasons.

Dropped events are certainly worthy of some of your time! What about logs that aren't being dropped but for one reason or another Splunk is assigning a timestamp that isn't correct?

Continue reading this post on my blog here.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.

Buyer's Guide

Splunk Enterprise Security

August 2026

Free Report: Splunk Enterprise Security Reviews and More

Learn what your peers think about Splunk Enterprise Security. Get advice and tips from experienced pros sharing their opinions. Updated: August 2026.

DOWNLOAD NOW

913,422 professionals have used our research since 2012.

it_user126636

Senior Manager of Network with 1,001-5,000 employees

Jun 10, 2014

Splunk is great for Syslog capabilites. For normal device management, you can't go wrong with SolarWinds.

I'd go with Splunk for logging. For Syslog capabilities, Splunk wins outright from my experience. It's quick, very customizable, and there are many different modules some specific for vendors and devices. (Cisco Security Suite for one).

If you are really into SolarWinds and want to use them for Syslog then I would go with Kiwi. SolarWinds NPM has a syslog collector but under heavy load (a few hundred devices) it will get bogged down real quick in my experience.

If you are looking for normal device management then NPM, NCM, NTA are the way to go. You can't go wrong with SolarWinds.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.

it_user167895Project Manager and consultant enterprise IT tooling at a consultancy with 51-200 employees

Report as inappropriate

Jun 10, 2018

Kiwi syslog for SolarWinds must be seen as a patch for SolarWinds Orion NPM. SolarWinds will release a LOG management module for the Orion NPM platform but this product is in an early state of log collecting, searching and filtering. Splunk can be a good tactical solution to filter out and forward important events to SolarWinds Orion NPM

See all 2 comments

it_user121728

Head of Service Integrity with 1,001-5,000 employees

Jun 5, 2014

It can probably do anything if you tweak it enough but it's not cheap.

Splunk is really good at log parsing events over time. It is quick to drill in and analyze and it is quick to build a presentation layer and automate reporting. I love it for problem analysis and event management however it is not a capacity management tool.

It can be a cm tool but not a good tool for projections etc. There are many tools that claim to be cm tools but they are usually expensive and miss the basic day to day challenges of capacity management. Eg: excluding backups from day peaks, removing outliers, forward trending, accepting data from any source. Start by getting your key data extracted from reliable sources and other tools.

The charting and presentation layer is impressive and quick. It can probably do anything if you tweak it enough. I would call it a very handy tool but probably not the tool. It is not that cheap either. I have used it personally to analyze big data as well as creating knowledge from some ordinary logging. I then created some pretty cool dashboards but they were more operational dashboards.

I don't think we could afford it as a capacity tool but we can use the data it simplified.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.