Splunk ITSI (IT Service Intelligence) Reviews

The pricing for Splunk ITSI is based on the amount of data used and is considered fair. The service also offers good support, including 24/7 customer support through a portal. However, some reviewers find the pricing to be a bit high, while others mention that the licensing fee can vary depending on data ingestion. 

Splunk ITSI provides valuable visibility into a company's environment, allowing users to significantly reduce costs and improve efficiency. By implementing Splunk and utilizing DB Connect, users were able to eliminate the need for expensive reports and instead gather data through simple SQL queries. This resulted in a cost reduction in some cases. Additionally, Splunk enables users to create alerts and dashboards for monitoring and reviewing historical information, further enhancing overall ROI.

Splunk ITSI is used to analyze data and create alerts, helping to maintain security best practices. 

It has multiple use cases such as heat maps, glass tables, and predictive analysis. Heat maps allow for monitoring the health of servers and automatically change color to indicate issues. Glass tables provide a visual representation of the system architecture and allow for setting threshold values. Predictive analysis analyzes data patterns to predict failures or issues. Integration with ticketing tools automates the creation of tickets in ServiceNow. The episode review feature groups alerts to prevent ticket spam. 

It is used to find out about system outages and generate fast insights. It is also used to monitor critical services like payment gateways. It is used both on the cloud and on-premises. Splunk ITSI is primarily used for monitoring infrastructure and applications based on data source ingestion. It can be used for SIEM purposes.

The most valuable features of Splunk ITSI (IT Service Intelligence) include its ability to secure the environment through automation. Other useful features include glass tables, correlation search as well as automated dashboarding and reporting. It offers great observability for working with all sets of data, stability and scalability, easy integration with DLP, and superior functionality compared to QRadar. 

Some areas that could be improved in Splunk ITSI include: 

• Data recovery
• Microservices integration
• Out-of-the-box solutions for enterprise users
• Interface inclusion
• Dashboard queries 

The setup process for Splunk ITSI was initially complex, requiring knowledge in various areas such as network and firewall rules, routing methodologies, and cluster concepts. However, with continuous learning and collaboration with teammates, it has become much better. Despite this, other reviewers found the initial setup to be straightforward and simple. The deployment process can be done remotely or manually, and the time it takes depends on the operating system used. Connecting APIs and logging in are the primary steps for setting up Splunk ITSI. 

Splunk ITSI is highly regarded for its scalability. Users highlight its effectiveness in accommodating growth. However, the scalability of Splunk ITSI may be limited if budget constraints hinder the acquisition of additional licenses or seats. Nonetheless, the solution is easy to scale by simply procuring more licenses from Splunk and adding new users. 

The customer service and support for Splunk ITSI varies depending on the individual use case and configuration. It is not always completely satisfactory. There have been incidents where requested upgrades resulted in issues due to removed concepts. 

The stability of Splunk ITSI is highly regarded by users. Users have noted the absence of bugs, glitches, crashes, or freezes.