No more typing reviews! Try our Samantha, our new voice AI agent.
reviewer2780640 - PeerSpot reviewer
Sr Enterprise Monitoring Analyst at a transportation company with 10,001+ employees
Real User
Top 20
Jan 20, 2026
Improved incident detection through observability while custom setup and integration still need refinement
Pros and Cons
  • "It's starting to help reduce our Mean Time to Detect (MTDD) because the visibility we gain is unprecedented, allowing us insight into applications that we've never had before."
  • "Unfortunately, with our current setup, we just have to implement Log Observer in a couple of instances so that we can have that integration with Splunk Observability Cloud."

What is our primary use case?

Our use cases are basically just bringing log aggregation like application logs into Splunk, working on the integrations with observability. Unfortunately, with our current setup, we just have to implement Log Observer in a couple of instances so that we can have that integration with Splunk Observability Cloud. But mostly, we are working on getting logs into Splunk, so one of the primary things we've been working on is ingesting Azure logs through Event Hub into Splunk and trying to correlate across our disparate platforms.

I don't use any of those. We actually have a security team that works with Splunk Observability Cloud, and we have SOAR, but that's not me. I'm more focused on Splunk Cloud.

My understanding was it was just Splunk. A review of Splunk in general was supposed to be conducted, but there was nothing that specified Splunk Observability Cloud, because I'm not involved with that.

What is most valuable?

Probably my favorite feature is just the integration through Log Observer, but unfortunately, the PCI requirements we have working with WestJet prevents us from fully implementing Log Observer just because when you do Log Observer, you have to sign a document that states your responsibility for PCI compliance could be broken. That was a hard sell, but we were able to work around it. Other than that, the visibility to track observability traces directly to the application logs was really cool.

It has helped improve the operational performance of our operations. As we start getting our services mapped out in observability, we've been able to bring insights into aspects of the WestJet operations that have surfaced. We recently had an outage that showed up in observability but didn't appear elsewhere. In hindsight, we were able to identify the error from inferred services with visibility into them and now we have alerting set up to notify the team. Just because of the third-party vendor that went down, we were able to show in our observability that this inferred service was not working properly. That was a huge win.

What needs improvement?

From our experience, the quality of the out-of-the-box dashboards and detectors is okay as a starting point, but we've had to do a lot more custom work. We are working on templating our observability setup for Kubernetes so that when new applications are implemented, they auto-populate existing dashboards and all related components. We're putting in significant effort to build that template out.

Looking at other tools and comparing them to Splunk, the ability to curate the data that is being ingested is a lot more labor-intensive and not as intuitive as some of the competitors. The Edge Processor that Splunk has really needs a redo to be easier to use and more intuitive for setting up custom ingestion rules to ensure PCI information such as payment card details is masked. We've seen other tools that do it well, but I am looking forward to the new Splunk upgrade, which appears to be adding a bunch of new features to the Edge Processor.

We don't have any other observability solutions, but we are kind of aware and looking at the market. The Edge Processor has been the biggest issue, and we've noticed that the integration with Microsoft isn't as strong as it could be, with limited visibility into function apps and integration with other Azure components needing improvement.

For how long have I used the solution?

I've been using Splunk Cloud for just over three years.

Buyer's Guide
Splunk Observability Cloud
July 2026
Learn what your peers think about Splunk Observability Cloud. Get advice and tips from experienced pros sharing their opinions. Updated: July 2026.
908,858 professionals have used our research since 2012.

What do I think about the stability of the solution?

Splunk Cloud has been quite stable. We did experience an outage during the Victoria upgrade, which didn't go well and caused some downtime, but other than that, it's been good.

What do I think about the scalability of the solution?

From our perspective, it's scalable since it's a hosted solution. We haven't run into any limits based on our licensing; everything has been fine. As we increase our observability, we may have to look at expanding our licensing as more teams adopt it. A lot of our storage issues are due to not curating data, and we're currently doing a Splunk cleanup to better leverage the tool after inheriting some poor configuration.

How are customer service and support?

I have contacted technical support.

Quality and speed in my case have been quite good; I've had no concerns with Splunk support.

For support, I would rate them an eight.

Which solution did I use previously and why did I switch?

Splunk Cloud was already in place when I joined the company, and I got hired because of my previous experience with on-prem Splunk.

What was our ROI?

It's starting to help reduce our Mean Time to Detect (MTDD) because the visibility we gain is unprecedented, allowing us insight into applications that we've never had before.

What's my experience with pricing, setup cost, and licensing?

Splunk is a very expensive tool, and I think that's one of the problems they face as competitors in the marketplace offer better value. They might need to reevaluate their pricing since competitors are catching up, and the cost is very high.

What other advice do I have?

Splunk Cloud doesn't require maintenance from our end since it's hosted, but some maintenance doesn't get coordinated well with us. Maintenance is often scheduled without giving us enough time for proper change management on our side, which could be improved.

At this point, we're still in the early stages of implementing observability. We definitely see the value and potential it has, but leveraging it effectively will be crucial to justify its cost.

I am not involved with using Splunk Observability Cloud; that's a different team.

I would rate this review a seven.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Microsoft Azure
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
Last updated: Jan 20, 2026
Flag as inappropriate
PeerSpot user
MihaiHristache - PeerSpot reviewer
Manager, Information Technology at Endava
Real User
Top 5
Dec 23, 2025
Monitoring has improved operational visibility and supports fast, customizable alert dashboards
Pros and Cons
  • "The dashboards in Splunk Observability Cloud are amazing, and if you configure them correctly, they are amazing, and it is quite fast as well."
  • "If it is a new deployment and you have a medium client with about 2,000 users or computers or servers, it will take about six months just to install and configure."

What is our primary use case?

I work for a managed service provider, so I have different clients that require help in assessing various tools. I work with Splunk, ScienceLogic, and Nagios most frequently because I have small clients as well.

We have Splunk Observability Cloud for some customers. The dashboards are good, and everything is nice, but unfortunately, it doesn't have long-term storage of the logs. So you need to use a data lake to store the logs.

I would like to see agentless deployment and better integration with ticketing systems like ServiceNow, which is the biggest.

We utilize the ability to enrich data with custom metrics in Splunk Observability Cloud to create tickets in ServiceNow. It is integrated with ServiceNow, but we enrich the tickets by putting the logs in the tickets and things of that nature, so it helps us. However, even that is a mixed approach. From Splunk Observability Cloud, you cannot put the logs directly in the tickets. Instead, it will create a ticket and send you an email with the logs. That integration could be improved.

What is most valuable?

Splunk Observability Cloud has helped me improve my operational performance and my customer's operational performance because we use alerting, so we find when things are not working.

I think it is very good for evaluating the effectiveness of Splunk Observability Cloud in improving digital resilience within my customer's environment.

It does provide some return on investment. It is beneficial in terms of finance to use it.

The dashboards in Splunk Observability Cloud are amazing. If you configure them correctly, they are amazing, and it is quite fast as well.

That is a very good feature of Splunk Observability Cloud because it helps us and it gives more trust in the alerts.

What needs improvement?

There are not complexities with the installation of Splunk Observability Cloud, but with the configuration of alerts and everything because Splunk has its own language in the background. You need to know Splunk in order to configure everything that you want.

It requires some in-depth knowledge of the product. It should be more plug-and-play, similar to ScienceLogic. ScienceLogic uses whatever it finds. You can use PowerShell, you can use scripts that you make. Splunk is more on the old style. It uses agents, and you have to deploy the agents.

The out-of-the-box customizable dashboards provided by Splunk are okay, but usually, I have to create new dashboards because every user wants to see something else. The out-of-the-box dashboards help to get started faster, but in the end, I will have to redo them.

I would like to see agentless deployment and better integration with ticketing systems such as ServiceNow, which is the biggest.

We utilize the ability to enrich data with custom metrics in Splunk Observability Cloud to create tickets in ServiceNow. It is integrated with ServiceNow, but we enrich the tickets by putting the logs in the tickets and things of that nature, so it helps us. However, even that is a mixed approach. From Splunk Observability Cloud, you cannot put the logs directly in the tickets. Instead, it will create a ticket and send you an email with the logs. That integration could be improved.

For how long have I used the solution?

I have been working with Splunk Observability Cloud for about two years.

What do I think about the stability of the solution?

I cannot speak to lowering the cost of unplanned digital downtime using Splunk Observability Cloud because the client will get the bills. However, it reduces the downtime for systems. It improved visibility when you do changes and you do patching and you do emergency changes, so you can see if they were applied correctly or not, if the servers are still down.

What do I think about the scalability of the solution?

If it is a new deployment and you have a medium client with about 2,000 users or computers or servers, it will take about six months just to install and configure.

How are customer service and support?

The technical support is very good with Splunk.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

I worked with ScienceLogic before actually working with Splunk.

How was the initial setup?

There are not complexities with the installation of Splunk Observability Cloud, but with the configuration of alerts and everything because Splunk has its own language in the background. You need to know Splunk in order to configure everything that you want.

What about the implementation team?

I do not spend any time personally because I have a team that does it. I have 27 people in my team.

What was our ROI?

It does provide some return on investment. It is beneficial in terms of finance to use it.

What's my experience with pricing, setup cost, and licensing?

I think the pricing for Splunk Observability Cloud is still at a good price. If you are looking at Dynatrace, it is way higher.

Which other solutions did I evaluate?

I am familiar with the Dynatrace operator but I am not actually working with them. I am just looking into differences and tooling and what will benefit my clients better.

What other advice do I have?

You need to know Splunk in order to configure everything that you want.

The out-of-the-box customizable dashboards provided by Splunk are okay, but usually, I have to create new dashboards because every user wants to see something else. The out-of-the-box dashboards help to get started faster, but in the end, I will have to redo them.

We utilize the ability to enrich data with custom metrics in Splunk Observability Cloud to create tickets in ServiceNow. It is integrated with ServiceNow, but we enrich the tickets by putting the logs in the tickets and things of that nature, so it helps us. However, even that is a mixed approach. From Splunk Observability Cloud, you cannot put the logs directly in the tickets. Instead, it will create a ticket and send you an email with the logs. That integration could be improved.

I would rate this product an 8 overall.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Disclosure: My company has a business relationship with this vendor other than being a customer. Integrator
Last updated: Dec 23, 2025
Flag as inappropriate
PeerSpot user
Buyer's Guide
Splunk Observability Cloud
July 2026
Learn what your peers think about Splunk Observability Cloud. Get advice and tips from experienced pros sharing their opinions. Updated: July 2026.
908,858 professionals have used our research since 2012.
Aman Dhanesha - PeerSpot reviewer
AI Developer at IMS People
Real User
Top 5
Apr 16, 2026
Monitoring has reduced API latency and now predicts issues across our cloud infrastructures
Pros and Cons
  • "Previously with other applications, analyzing and controlling our API latency required almost five to six hours a day of resources, but with Splunk Observability Cloud, I only need to allocate one to two hours maximum per day to accomplish the same tasks."
  • "Splunk Observability Cloud experienced a significant outage recently when it went down for approximately five to six hours."

What is our primary use case?

I mainly use Splunk Observability Cloud to monitor the performance of our cloud-native infrastructure. Because we have created multiple infrastructures, we use it to handle and monitor everything.

Splunk Observability Cloud helps us manage latency across any of our projects and APIs. It is particularly valuable for detecting issues before they occur. We can predict features and errors in advance. Recently, we discovered problems in seven of our APIs that we were able to solve because of this predictive capability.

What is most valuable?

The best feature of Splunk Observability Cloud is that I can identify the root cause of any problem, including API latency. The real-time alerts and smart alerting system are exceptional, allowing me to know what is happening in real-time.

Detectors in Splunk Observability Cloud are very useful, and I have recently used them with great results.

Regarding the no-sample tracing feature, we collect multiple data from various sources. This feature is very useful since we recently shifted to it, and it is working very well.

The AI-powered analytics that Splunk provides allows me to get a smart analyzed version of any report.

Splunk Observability Cloud has greatly impacted our operations by reducing timing requirements. We get smarter solutions and overall use cases in a smart way. I have reduced our manpower requirements and time commitment significantly. Splunk Observability Cloud reduces our mean time to detect by approximately one to two hours.

The LLM in Splunk Observability Cloud is very powerful, and the vector database infrastructure is excellent. This is why we switched from our previous tools, and I believe it was a very good decision that has resulted in better outcomes.

What needs improvement?

The AI-powered analytics that Splunk provides delivers a smart analyzed version of reports, and it is quite good, but it is very generic. The issues identified could be better addressed through deeper AI thinking to provide a more effective solution.

For how long have I used the solution?

I have been using Splunk Observability Cloud for more than eight or nine months.

What do I think about the stability of the solution?

Splunk Observability Cloud experienced a significant outage recently when it went down for approximately five to six hours. This impacted us considerably because we were actively working during that time.

How are customer service and support?

I would rate the technical support for Splunk Observability Cloud as 9.5 out of 10 because we received their support during our deployment. They were very helpful in assisting us to create a good infrastructure.

Which solution did I use previously and why did I switch?

I find Splunk Observability Cloud to be very good. I previously used DataDog for observing everything, but Splunk Observability Cloud is more accurate and a better solution.

What was our ROI?

Previously with other applications, analyzing and controlling our API latency required almost five to six hours a day of resources. With Splunk Observability Cloud, I only need to allocate one to two hours maximum per day to accomplish the same tasks.

Which other solutions did I evaluate?

I highly recommend Splunk Observability Cloud. If you are using any other third-party tool, Splunk Observability Cloud is significantly better than the alternatives.

What other advice do I have?

I highly recommend creating better documentation for Splunk Observability Cloud. This documentation could be integrated with AI to provide specific use case solutions so that users do not have to search through Splunk documentation every time. Instead, users could directly ask about the issues they are facing and receive targeted solutions. My overall review rating for Splunk Observability Cloud is 9 out of 10.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Apr 16, 2026
Flag as inappropriate
PeerSpot user
JigarHirani - PeerSpot reviewer
Splunk Engineer at a recruiting/HR firm with 11-50 employees
Real User
Top 5Leaderboard
Mar 30, 2026
End-to-end tracing has improved monitoring and now reduces downtime with proactive alerts
Pros and Cons
  • "After implementing observability, I could see end-to-end transaction tracing and quickly identify where issues arose, which reduced troubleshooting time and improved overall application stability and availability for our customers and systems."
  • "I believe that areas of Splunk Observability Cloud that could be improved include the initial setup and instrumentation costs, which take more time for APM."

What is our primary use case?

My experience with Splunk Observability Cloud involves monitoring infrastructure, application performance monitoring, and real-time alerting. Although I am no longer working with Splunk Observability Cloud due to a recent position change that occurred approximately two months ago, I previously monitored servers, containers, Kubernetes, application performance, and Docker images. In terms of monitoring, I tracked response time, error rate, and latency. This capability helped in identifying performance issues or infrastructure issues before users were impacted. For instance, if Kafka failed, we knew about it before users experienced an impact and could resolve it before it caused maximum damage to our systems. I also used dashboards and alerts to monitor critical services and received notifications whenever issues arose.

The features of Splunk Observability Cloud that I found most valuable included application performance monitoring and distributed tracing, particularly when monitoring distributed systems or applications. Real-time alerting and Kubernetes monitoring were essential since Kubernetes is quite complex. I could effectively monitor Kubernetes using Splunk Observability Cloud. Additionally, the Smart Attack Detector, which I tried at the last moment, was a good feature, although I did not work extensively with it. The Log Observer was very fast and reliable, and the dashboards provided good visualization for troubleshooting and monitoring. If there was a network outage, I received notifications very quickly.

What is most valuable?

Splunk Observability Cloud helped me detect performance issues faster and reduce downtime in my organization. Earlier, I had limited visibility into my application performance. After implementing observability, I could see end-to-end transaction tracing and quickly identify where issues arose, which reduced troubleshooting time and improved overall application stability and availability for our customers and systems. This capability also helped in proactive detection.

What needs improvement?

I believe that areas of Splunk Observability Cloud that could be improved include the initial setup and instrumentation costs, which take more time for APM. Some dashboards and detectors require tuning, and I think the visualization needs enhancement. Additionally, alert noise remains an issue, and we need suppressions for when systems go down for short periods. Better integration with third-party tools and easier onboarding of data would also be beneficial.

What do I think about the stability of the solution?

When evaluating the stability and reliability of Splunk Observability Cloud, I can confirm it has been reliable. I would rate it eight out of ten for reliability.

What do I think about the scalability of the solution?

Splunk Observability Cloud scales very well with the growing needs of my organization. I can demonstrate the scalability of our system to our customers, which is advantageous for business. This capability helped us secure business as we provide real insights to customers who were happy to purchase our systems and applications. The ROI has been good for us.

How are customer service and support?

I communicated with the technical support of Splunk Observability Cloud regarding our issues, specifically when I was unable to monitor or set up Kubernetes to monitor our infrastructure. They were able to help us, and we purchased an on-demand call for assistance, which they provided.

How was the initial setup?

I did not participate significantly during the initial setup and deployment of Splunk Observability Cloud, but I was part of the team. I know the process is straightforward. We simply needed to ensure that all data was in the correct format, matched current dashboard setups, and included all necessary fields for insights.

What was our ROI?

My experience with lowering the cost of unplanned digital downtime using Splunk Observability Cloud has been positive, as it helped us significantly. Our system was bottlenecking and consuming excessive resources, but with the ability to detect and resolve that issue, overall system usage was reduced without further bottlenecking.

What's my experience with pricing, setup cost, and licensing?

Regarding metrics or data points confirming performance improvement and resilience, I found that during certain times, we experienced the most significant spike in our systems due to multiple users requesting the same service. We needed to change our overall architecture as we were not scaling adequately, and this was bottlenecking our systems. By observing this from the dashboards, I realized improvements could be made. After implementing the solution, our application's stability improved significantly. I can confidently say our availability improved by forty percent, and downtime was reduced by approximately seventy to eighty percent.

What other advice do I have?

My impression of the No-Sample Tracing feature in Splunk Observability Cloud is that it helped us detect key metrics and real use cases, particularly in tracking and monitoring. I primarily tracked server uptime, application response time, API latency, and similar metrics. Combining these parameters instead of relying on a single factor improved our system. Specifically, I used distributed tracing to understand how requests flowed through our network and how different systems responded, which helped determine if any particular system impacted all our systems.

Regarding the AI-powered analytics and guidance provided by Splunk Observability Cloud, I have not actually used the AI features, particularly with ITSI, as I did not utilize that aspect for observability.

My teams effectively utilized the ability to enrich data with custom metrics in Splunk Observability Cloud. They found valuable insights from our systems and created reports that the application and infrastructure teams used to decide their workarounds and solutions. They developed different solutions, experimenting and improving our systems by relying on observability to understand what happens when we adjust parameters or change configurations.

When evaluating the effectiveness of the out-of-the-box customizable dashboards provided by Splunk Observability Cloud, I note that we mostly used the default dashboards. While we created a custom dashboard to track our overall system flow, we relied on pre-built dashboards for monitoring and representing our business perspective. When we needed to showcase our environment to customers, we demonstrated our scalability and system performance, including response time and downtime, providing insightful details from the dashboards for business use cases.

I would rate Splunk Observability Cloud an eight out of ten, where ten is the best and one is the worst.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Mar 30, 2026
Flag as inappropriate
PeerSpot user
Sarah Van Zee - PeerSpot reviewer
Systems Monitoring Engineer II at a government with 10,001+ employees
Real User
Top 10
Sep 11, 2025
Has a unified monitoring license model that supports broader adoption but has deployment difficulties
Pros and Cons
  • "The features of Splunk Observability Cloud that I prefer the most are its all-encompassing licensing model, which is comparatively better than others in the market."
  • "The user interface of Splunk Observability Cloud needs a lot of work."

What is our primary use case?

My main use cases for Splunk Observability Cloud include Application Performance Monitoring, synthetic monitoring, and dabbling in infrastructure and what comes along with it; however, we do already have a tool that does infrastructure. We're debating about just switching it all over to Observability.

What is most valuable?

The features of Splunk Observability Cloud that I prefer the most are its all-encompassing licensing model, which is comparatively better than others in the market. We're switching off AppDynamics, and the licensing model always constrained us, so that is our main reason for switching to observability, as the licensing is all-encompassing.

The benefits of these features for my organization are significant. The license is all in one, meaning infrastructure, APM, synthetics, RUM, and the logs are all under one license, allowing us to offer that to our application teams more so than we were ever able to do before. 

We're currently trying to implement RUM, Real User Monitoring, with two applications just to get a feel for it, which we were never able to do before, since it was a completely separate license that we needed to purchase. So we're able to offer more of a full suite, more of a one-stop shop sort of thing, versus what we were able to do before.

What needs improvement?

The user interface of Splunk Observability Cloud needs a lot of work. I have been known to describe it as slapping lipstick on a pig. The pretty colors draw in everybody, however, the actual functionality of it has a lot that you cannot do, and how the user interface is organized is very difficult to navigate. This is a driving factor for us not to use the product.

The next release of Splunk Observability Cloud should include a feature that makes it so that when looking at charts and dashboards, and also looking at one environment regardless of the product feature that you're in, APM, infrastructure, RUM, the environment that is chosen in the first location when you sign into Splunk Observability Cloud needs to stay persistent all the way through. There's no reason that a user should have to keep having to restart all of their filters and select their environment anytime that they switch to a different area of the tool.

For how long have I used the solution?

I have been using Splunk Observability Cloud for one year exactly.

What do I think about the stability of the solution?

I have not experienced downtime, crashes, or performance issues with Splunk Observability Cloud yet.

What do I think about the scalability of the solution?

Splunk Observability Cloud scales with the growing needs of my organization, however, we very quickly always run into hitting the limit for custom metrics. This is something we've discovered that we have to manually manage, which is not fun, especially for large applications such as our huge tracking system, since we're a logistics company, as well as the two main revenue-generating applications. We are probably going to hold off putting them into Splunk Observability as we're constantly bumping the limit already.

How are customer service and support?

I would evaluate customer service and technical support as hit or miss as I get the impression that the support folks assigned to our account might be spread a little too thin. They are good people and do good work; however, I get the impression they're spread a little too thin. If we put in a ticket, we do get a response in a decent amount of time, so that's not a problem.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

Prior to adopting Splunk Observability Cloud, I used several solutions. The solutions we used include Zabbix, Splunk Core, Grafana, Prometheus, and AppDynamics, so a whole suite of things.

How was the initial setup?

The deployment has been fine for cloud applications. It is very tumultuous for on-prem. That is supposed to be getting fixed over the next year. Right now, it's not there. So I always tell my management we're a year and a half too early for this tool.

What was our ROI?

I have seen ROI for our cloud applications, as we've been able to fully integrate with one application, which is a big revenue producer for the post office, and it's something that they were not able to do before, so we have been able to see that. In terms of ROI, I would say 100%.

What other advice do I have?

We don't currently use the out-of-the-box customizable dashboards provided by Splunk Observability Cloud to showcase IT performance to business leaders. 

I will say we have not expanded usage to other applications since we're still stuck where we are. 

My advice to other organizations considering Splunk Observability Cloud is to wait until next year. 

On a scale of one to ten, I would rate this solution five or six.

Which deployment model are you using for this solution?

On-premises

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Sathis-Kumar - PeerSpot reviewer
Senior Manager at Bank of America
Real User
Top 5Leaderboard
Jul 24, 2026
Unified observability has reduced incident MTTR and proactively identifies issues before release
Pros and Cons
  • "Splunk Observability Cloud has indeed helped me improve the operational performance and resilience of my company."
  • "Price is always one of the factors; it's a little costlier when compared."

What is our primary use case?

The primary use cases for Splunk Observability Cloud in our environment include log monitoring and detection controls, especially for the DI detection controls, and the application team uses it for all operational activities, to find issues, and to detect more issues before going live.

How has it helped my organization?

The resolution time is easy; it has led to a reduction of the MTTR for any incident, and it proactively identifies bugs before they go live for application teams, making issue identification simpler.

It helped us a lot in reducing the cost of unplanned digital downtime.

What is most valuable?

The strong points of Splunk Observability Cloud are an easy and consolidated view in one area, as we can query the log, customize it, and create some dashboards, which makes it easy for our operations team to detect the issues.

My impression of the No-Sample Tracing feature in Splunk Observability Cloud is that it has definitely helped us.

It has assisted in terms of eliminating blind spots in data collection.

The out-of-the-box customizable dashboards provided by Splunk Observability Cloud are definitely good; the customization is extensive, and it's really helping us based on my understanding.

Splunk Observability Cloud has indeed helped me improve the operational performance and resilience of my company.

What needs improvement?

Regarding drawbacks, something on the downside exists, but I have not elaborated on it yet.

Currently, we have not yet enabled the AI module in Splunk Observability Cloud, as we are just in the process of using the latest version. I can comment on that later, but I personally feel it really helps us, especially when we are running some SQLs, as it's guiding us a lot to optimize queries and provides many actions, particularly for those who work on SQL.

My team has not been able to enrich data with custom metrics provided by Splunk Observability Cloud.

For how long have I used the solution?

I have been working with Splunk Observability Cloud for almost more than five years.

How are customer service and support?

I would rate the technical support of Splunk Observability Cloud an eight; they are quite responsive.

Which solution did I use previously and why did I switch?

Before adopting Splunk Observability Cloud, we did think of alternatives from different vendors, including some evaluations and reviews of several products, with Dynatrace being one of them.

How was the initial setup?

Regarding deployment, it's quite simple; I don't see any difficulties.

As for time frames, it depends on the environment, but I would say if it's a very simple environment, it would be a few hours. For us, it's always days because it's a very large environment.

What about the implementation team?

We do participate in the deployment process; we do have a dedicated team for that.

Globally, we have around 20 to 30 people in my team who are responsible for the implementation of solutions.

It's a combination of engineers, developers, and administrators; it's even more than that, so it's a very large environment.

What was our ROI?

You could see some improvement, and definitely there will be some return on investment, but not directly through my team; perhaps for the applications, which have multiple tools that can use this one consolidated platform for all log monitoring.

What's my experience with pricing, setup cost, and licensing?

Price is always one of the factors; it's a little costlier when compared.

What other advice do I have?

We purchase Splunk Observability Cloud products directly from the vendor, from Splunk itself. The overall review rating for this product is 8.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Last updated: Jul 24, 2026
Flag as inappropriate
PeerSpot user
reviewer2755917 - PeerSpot reviewer
Systems Administrator at a insurance company with 1,001-5,000 employees
Real User
Top 20
Sep 11, 2025
Correlating logs with traces reduces time to resolution and uncovers issues before reaching operations
Pros and Cons
  • "What I appreciate most about Splunk Observability Cloud is the correlation feature, specifically the ease of correlating logs and issues to those traces to see where within the path of the business function is failing."
  • "Splunk Observability Cloud could be improved with better integration with AppDynamics, as we know that's coming, however, it is an issue we've had between the OpenTelemetry and the AppDynamics collector."
  • "Particularly what we're having is disconnection from the cloud console, where we will be working in it and receive a message saying that we've been disconnected and have to wait for it to come up."

What is our primary use case?

My main use case for Splunk Observability Cloud is end-to-end tracing of business processes.

How has it helped my organization?

Splunk Observability Cloud has helped improve my operational performance and my company's resilience.

What is most valuable?

What I appreciate most about Splunk Observability Cloud is the correlation feature, specifically the ease of correlating logs and issues to those traces to see where within the path of the business function is failing. 

One significant way these features benefit my organization is through mean time to resolution. Taking away that first instinct of where we're trying to figure out what's wrong will drop that time significantly, so rather than a few hours, potentially we're looking at a few minutes before we can start resolving an issue.

In terms of operation performance and resilience, I have experienced improvements in mean time to resolution and the ability to detect issues that we weren't detecting ahead of time. I can give a specific case scenario; while we were in a POC situation, it was able to find issues we were having with servers just by random chance. We implemented it and it happened to let us know about an issue before our NOC even knew that it was occurring.

My teams have utilized the ability to enrich data with custom metrics in Splunk Observability Cloud during the implementation process, and we're definitely seeing a huge difference in what data we have, and the teams are extremely excited by the new amount of data we're getting in. I find the out-of-the-box customizable dashboards provided by Splunk Observability Cloud extremely beneficial since they give you a lot of information already, and the ability to customize and do your own is even better.

I ran into a small security incident. Splunk Observability Cloud was able to help us with that along with Splunk's core process or core offering. Between the two, we were able to use it for correlations, which helped with mean time to resolution and getting us back up and running much faster.

What needs improvement?

Splunk Observability Cloud could be improved with better integration with AppDynamics, as we know that's coming, however, it is an issue we've had between the OpenTelemetry and the AppDynamics collector. We saw a complete difference in what data was being brought in, however, we know that issue is being resolved and that's a big one for us.

What do I think about the stability of the solution?

I would assess the stability and reliability of Splunk Observability Cloud as okay. We've been experiencing an issue with the cloud console, and we're working with support to get through that. We're assuming it's just a growing pain at this point. Particularly what we're having is disconnection from the cloud console, where we will be working in it and receive a message saying that we've been disconnected and have to wait for it to come up. It's been painful and seems to be a new issue, and they're trying to figure out what's going on,however, I haven't heard of anybody else having that issue.

What do I think about the scalability of the solution?

Splunk Observability Cloud seems to be scaling quite well with the growing needs of my organization.

How are customer service and support?

I would evaluate the customer service and technical support for Splunk Observability Cloud as fantastic. On a scale of 1 to 10, the customer service and technical support deserve a 10.

How would you rate customer service and support?

Positive

What was our ROI?

I have seen a return on investment with Splunk Observability Cloud.

What other advice do I have?

I would advise other organizations considering Splunk Observability Cloud to definitely POC it to see if it's going to work for their situation. It may not be for everybody. That said, definitely give it a chance and see what it can do for you and the kinds of new information it can bring in for you.

On a scale of one to ten, I rate Splunk Observability Cloud nine.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Lalatendu Swain - PeerSpot reviewer
Application Developer at UMB Financial
Real User
Top 5
Sep 11, 2025
Enables faster issue resolution by pinpointing problem areas through custom metrics and agent data
Pros and Cons
  • "Initially, before Splunk, we had a long time to resolve issues. Now, with Splunk Observability Cloud, we will be able to solve them quickly and know exactly where the issue is."
  • "To improve Splunk Observability Cloud, we need more applications to be included in the observability so that more applications can have agents to monitor them and bring that information to the cloud."
  • "Splunk Observability Cloud has not yet completely improved our operational performance for our company's resilience as we are just starting out, however, it will help us ultimately to reduce incident time."

What is our primary use case?

My main use case for Splunk Observability Cloud is application monitoring.

What is most valuable?

The features of Splunk Observability Cloud that I appreciate the most are ops intel and the community support. These features have benefited my organization because they help us find the root cause of any issue quickly and pinpoint the exact location where the issue exists.

We have not yet completely gone into production, so I do not have any metrics or data points to share. To evaluate the effectiveness of Splunk Observability Cloud in improving digital resilience within my organization, we have various client applications, such as the teller application and our online banking applications. 

Initially, before Splunk, we had a long time to resolve issues. Now, with Splunk Observability Cloud, we will be able to solve them quickly and know exactly where the issue is. Previously, we needed to go to the war room to find where the issue was. Now, with Splunk Observability Cloud and all its agents and data, we know exactly where the issue is located.

Regarding the no-sample tracing feature, all the data fed by the agents to Splunk Observability Cloud means we do not have to worry about missing any issues during sampling. We have not yet explored the AI-powered analytics feature, but we have partially explored MLTK.

My teams have utilized the ability to enrich data with custom metrics by writing custom agents in Java and Python to collect those custom metrics and feed them into Splunk Observability Cloud. This is particularly useful for applications without direct Splunk agents.

The out-of-the-box customizable dashboards are helpful in showcasing IT performance to business leaders. They provide guidance on requirements we may not have visualized and help us build custom dashboards to include our company-specific metrics. We have not yet expanded usage since we haven't started using it extensively.

What needs improvement?

To improve Splunk Observability Cloud, we need more applications to be included in the observability so that more applications can have agents to monitor them and bring that information to the cloud. 

Splunk Observability Cloud has not yet completely improved our operational performance for our company's resilience as we are just starting out, however, it will help us ultimately to reduce incident time.

For how long have I used the solution?

I have been using Splunk Observability Cloud for one year now.

What do I think about the stability of the solution?

In my experience until now, I have not experienced any stability issues with Splunk Observability Cloud.

What do I think about the scalability of the solution?

Splunk Observability Cloud scales effectively with the growing needs of my organization. As we are a growing company transitioning all our applications to the cloud, and with the increasing number of cloud-native applications, Splunk Observability Cloud will help us achieve digital resiliency and reduce our mean time to resolution.

How are customer service and support?

I would evaluate customer service and technical support as excellent, as Splunk has been quite responsive to our service requests, with their team providing good support.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

Prior to adopting Splunk Observability Cloud, we were using Splunk Enterprise, and we had custom monitoring tools developed in-house.

How was the initial setup?

The installation of Splunk Observability Cloud worked smoothly once we figured out the initial issues. The agents do not consume many resources, and the type of metrics they collect is helpful.

What was our ROI?

Since we have not progressed far into the implementation of Splunk Observability Cloud, I cannot comment on the return on investment at this time.

What's my experience with pricing, setup cost, and licensing?

I am not involved in the experience with pricing, setup cost, and licensing.

What other advice do I have?

I rate Splunk Observability Cloud eight out of ten.

Which deployment model are you using for this solution?

Hybrid Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Nishith Joshi - PeerSpot reviewer
Dev Ops Engineer at Data Elicit Solutions Pvt. Ltd.
Real User
Top 5
Mar 30, 2026
Real-time monitoring has improved performance tracking and has simplified analyzing complex metrics
Pros and Cons
  • "Splunk Observability Cloud has optimized our solutions and helped us understand the metrics."
  • "The learning curve for understanding all features should be improved, and the cost can increase."

What is our primary use case?

I work in data analytics with experience in monitoring systems and working with large-scale data. I have used Splunk Observability Cloud in the context of real-time monitoring and performance tracking.

Splunk Observability Cloud works well alongside Splunk Enterprise for logs and integrates with cloud platforms and monitoring tools. It is often used together with other observability solutions. The tracking metrics such as latency, error, and throughput are easily visible. I can also build dashboards for real-time visibility.

We use Splunk Observability Cloud to track latency metrics and identify where slowdowns are happening. We have visualized response time trends and quickly detected performance degradation. We have also used it for infrastructure monitoring. Over the past six months, we have been monitoring metrics such as CPU usage and memory. If there is unusual usage, we identify it quickly using this tool and take action before it impacts our performance.

What is most valuable?

Splunk Observability Cloud has optimized our solutions and helped us understand the metrics. The AI-powered guidance in Splunk Observability Cloud helps us identify patterns and anomalies in system performance data. Instead of manually going through a large volume of metrics, it highlights unusual behavior and potential issues automatically. This makes it easier to detect problems early and understand where to focus, especially in complex systems.

There is definitely log analysis and dashboards. Log monitoring and dashboards have been better using Splunk. Splunk Observability Cloud is the best tool for log monitoring and dashboards. Splunk Observability Cloud feels more focused on real-time metrics and performance tracking compared to some other traditional log-based tools.

What needs improvement?

The learning curve for understanding all features should be improved, and the cost can increase. Splunk Observability Cloud is very costly. Cost is one of the drawbacks.

Sometimes too many alerts, if not configured properly, is a major drawback that could be improved.

The prices are quite high. As I have mentioned earlier, we are Splunk partners, so this has been handled by my other team. However, for other companies and small startups, the prices are very high for them to use Splunk Observability Cloud. Price is a concern.

For how long have I used the solution?

I have been working with Splunk Observability Cloud for the past six to eight months.

What do I think about the scalability of the solution?

We have expanded our team and usage. We are scaling up right now from ten people to twenty-five or thirty. Over time, I expanded my usage by going through basic monitoring and exploring things like setting up custom dashboards. We have gradually expanded our usage from setting up dashboards and alerts.

How are customer service and support?

For customer service, I would rate them eight out of ten because whenever we raise a support case, they are always available for us.

For Splunk real user monitoring, implementation took time because our engineers tried very hard. In case of support, there should be more engineers specifically for this case.

Which solution did I use previously and why did I switch?

We have used different products like Palo Alto and Cribl before moving to Splunk Observability Cloud. As we got a partnership, we have shifted to Splunk Observability Cloud.

What was our ROI?

The information is confidential and I cannot share specific details. However, I can tell you in percentage that fifty to sixty percent of our work has been easy to identify in terms of performance metrics and performance using Splunk Observability Cloud.

It has saved us thirty to forty percent in cost because we used some other tools before that were more costly. As we are Splunk partners, we obtained Splunk Observability Cloud, and our costs have been reduced by thirty to forty percent using this solution.

What other advice do I have?

My overall impression of using Splunk Observability Cloud is that it is a strong tool for real-time monitoring. It does take some time to get fully comfortable with all the features. We have not explored everything right now, but in the future, we are looking forward to using more features.

A part of the implementation has been handled by my other team. I have explored using custom metrics to enrich observability data, mainly by adding application layer or business-related metrics alongside system metrics. I have used custom metrics in a limited way to add more context to monitoring, such as tracking application-specific metrics alongside system data.

Dashboard customization in Splunk Observability Cloud is quite flexible. We care about metrics in different types of visualization, and it helps us organize them in a way that makes sense for monitoring. It allows us to build dashboards tailored to specific use cases. This makes it easier to monitor system performance and quickly identify issues without going through unnecessary data.

The integration in real user monitoring from Splunk Observability Cloud is actually better than from some other tools. If you are looking for the best SIM tool, then Splunk Observability Cloud is for you. If you have funds and capability for the cost, then Splunk Observability Cloud is definitely the best tool you can use.

I have given this review an overall rating of nine out of ten.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor. The reviewer's company has a business relationship with this vendor other than being a customer: Partner
Last updated: Mar 30, 2026
Flag as inappropriate
PeerSpot user
Senior Associate at a consultancy with 10,001+ employees
Real User
Top 5
Jan 29, 2026
Monitoring has become more proactive and cloud operations are managed with real-time insights
Pros and Cons
  • "The solution has significantly helped improve my operational performance and my company's resilience by providing real-time insights."

    What is our primary use case?

    My use case for Splunk Observability Cloud is primarily for monitoring and cloud management, and it serves us well.

    What is most valuable?

    The best features in Splunk Observability Cloud that I appreciate the most include its comprehensive monitoring capabilities and its user-friendly interface.

    The solution has significantly helped improve my operational performance and my company's resilience by providing real-time insights. The enhancements to my operational performance and resilience are noticeable.

    It has saved me a considerable amount of time and resources by streamlining our monitoring processes.

    My impression of the AI-powered analytics and guidance provided by Splunk Observability Cloud is that they are very effective and enhance our decision-making.

    I do use the no-sample tracing feature to eliminate blind spots in data collection, and it is quite helpful.

    My team has effectively utilized the ability to enrich data with custom metrics to improve our analytical capabilities.

    The out-of-the-box customizable dashboards are effective, and they help showcase IT performance to business leaders quite effectively.

    What needs improvement?

    In Splunk Observability Cloud, the areas that have room for improvement include usability enhancements to make it even better.

    For how long have I used the solution?

    I have been using Splunk Observability Cloud for a considerable time, and I can share my experience with it.

    What do I think about the stability of the solution?

    Regarding stability, I would rate the stability of Splunk Observability Cloud as a 9, indicating it is very reliable. Splunk Observability Cloud performs exceptionally in terms of stability under varying conditions.

    How are customer service and support?

    From 1 to 10, I would rate the technical support as an 8 since it is generally responsive and helpful.

    How would you rate customer service and support?

    Positive

    What about the implementation team?

    The solution was purchased through a partner, and my experience with the partner has been generally positive. My experience with the partner has been satisfactory as they provided the needed support throughout the process.

    What was our ROI?

    My experience with lowering the cost of unplanned digital downtime has been positive as it has indeed reduced downtime.

    What's my experience with pricing, setup cost, and licensing?

    Regarding the pricing of Splunk Observability Cloud, while I believe it can be improved, I would rate it around 7, leaning towards being expensive.

    Which other solutions did I evaluate?

    I would compare Splunk Observability Cloud with other solutions as more feature-rich and user-friendly based on my concerns.

    What other advice do I have?

    For others looking into this product, I would recommend trying it out with a proof of concept to see its benefits firsthand.

    Approximately 50 users in my company use Splunk Observability Cloud to leverage its capabilities effectively.

    The solution does require some maintenance, but it is quite straightforward in managing it.

    In terms of my company's relationship with Splunk, we are currently a customer making the most of their offerings.

    I would rate Splunk Observability Cloud a solid 8 from 1 to 10 based on my experience and satisfaction with its performance.

    Which deployment model are you using for this solution?

    Hybrid Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Other
    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    Last updated: Jan 29, 2026
    Flag as inappropriate
    PeerSpot user
    Buyer's Guide
    Download our free Splunk Observability Cloud Report and get advice and tips from experienced pros sharing their opinions.
    Updated: July 2026
    Buyer's Guide
    Download our free Splunk Observability Cloud Report and get advice and tips from experienced pros sharing their opinions.