We use Splunk APM to monitor the performance of our applications.
Project Team Lead - Devops at a financial services firm with 10,001+ employees
Provides great visibility, analysis, and data telemetry
Pros and Cons
- "Detectors are a powerful feature."
- "We currently lack log analysis capabilities in Splunk APM."
What is our primary use case?
How has it helped my organization?
Splunk APM offers end-to-end visibility across our entire environment. We need to control how many types of metrics are ingested by Splunk APM from all incoming requests. While we allow some metrics to be collected, Splunk APM provides the ability to track each request from its starting point to its endpoint at every stage.
Splunk APM trace analyzer allows us to analyze a request by providing its trace ID. This trace ID gives us a detailed breakdown of how the request entered the system, how many services it interacted with along the way, and its overall path within the system. We can also identify any errors that occurred during the request's processing and track any slowness or latency issues. This information is very helpful for troubleshooting performance problems in our application.
Splunk APM telemetry data has been incredibly valuable. While we faced challenges with Splunk Enterprise, such as the lack of a trace analyzer, Splunk APM's user interface is modern and highly flexible. The wide range of data it provides has significantly improved our incident response times, allowing us to quickly create alerts and adhere to the infrastructure as code principle. Splunk APM also proves beneficial during load testing, contributing to a positive impact on our overall infrastructure performance analysis.
Splunk APM helps us reduce our mean time to resolution. With its fast and accurate alerting system, we can quickly identify the exact location of issues. This pinpoint accuracy streamlines the investigation process, leading to faster root-cause analysis.
Splunk APM has helped us save significant time. We're now spending less time resolving production incidents and analyzing performance data. This focus on Splunk APM allows us to dedicate more time to other areas.
What is most valuable?
Detectors are a powerful feature. They create signal flow code in a format similar to Splunk APM language. For example, if we select five conditions, the detector can automatically generate the code for that signal flow. This code can then be directly integrated into our Terraform modules, streamlining the creation of detectors using Terraform. This is particularly helpful because our infrastructure adheres to a well-defined practice, and detectors help automate this process.
APM dashboards are another valuable tool. They provide more comprehensive information than traditional spotlights. One particularly useful feature is the breakdown of a trace ID. This breakdown allows us to see the entire journey of a request, including where it originated, any slowdowns it encountered, and any issues it faced. This level of detail enables us to track down the root cause of performance problems for every request.
What needs improvement?
We currently lack log analysis capabilities in Splunk APM. Implementing this functionality would be very beneficial. With log analysis, we could eliminate our dependence on Splunk Enterprise and rely solely on APM. The user interface design of APM seems intuitive, which would likely simplify setting up log-level alerts. Currently, all log-level alerting is done through Splunk Enterprise, while infrastructure-level alerting has already transitioned to Splunk APM.
The Splunk APM documentation on the official Splunk website could benefit from additional resources. Specifically, including more examples of adapter creation and management using real-world use cases would be helpful. During our setup process, we found the documentation lacked specific implementation details. While some general information was available on public platforms like Google and YouTube, it wasn't comprehensive. This suggests that others using Splunk APM in the future might face similar challenges due to the limited information available on social media. It's important to remember that many users rely on social media for setup guidance these days.
Buyer's Guide
Splunk Observability Cloud
August 2026
Learn what your peers think about Splunk Observability Cloud. Get advice and tips from experienced pros sharing their opinions. Updated: August 2026.
913,924 professionals have used our research since 2012.
For how long have I used the solution?
I have been using Splunk APM for 1.5 years.
What do I think about the stability of the solution?
While Splunk APM occasionally experiences slowdowns, it recovers on its own. Fortunately, these haven't resulted in major incidents because most maintenance is scheduled for weekends, with ample notice provided in advance. We have never experienced any data loss that occurred during previous slowdowns.
How are customer service and support?
Splunk APM customer support is helpful. They promptly acknowledge requests and provide regular updates. They've been able to fulfill all our information requests so far. However, Splunk APM is a constantly evolving product. This means there are some limitations due to ongoing industry advancements. They are actively working on incorporating customer feedback, such as the CV request. Overall, the customer support is excellent, but the desired features may not all be available yet.
Which solution did I use previously and why did I switch?
Previously, we used Grafana, but we faced challenges that led us to switch to Splunk APM. Since then, Splunk has become our primary tool for data analysis. In our experience, Splunk offers several advantages over Grafana. Setting up and using Splunk is significantly easier than Grafana. Splunk provides a user-friendly interface that allows anyone to start working immediately, while Grafana's setup can be more complex. Splunk also boasts superior reliability. Its architecture utilizes a master-slave node structure, with the ability to cluster for redundancy. This ensures that if a node goes down, another available node automatically takes over, minimizing downtime. Ultimately, our decision to switch to Splunk was driven by several factors: user-friendliness, a wider range of features, cost-effectiveness, and its established reputation. Splunk is a globally recognized and widely used tool, which suggests a higher level of trust and support from the industry.
We use Splunk Enterprise and Splunk APM. Splunk APM offers a comprehensive view of various application elements. We primarily migrated to APM to gain application-level metrics. This includes latency issues, which are delays in processing user requests. Splunk APM generates a unique trace ID for each user request. This allows us to track the request from the user to our servers and identify any delays or errors that occur along the way.
Additionally, Splunk APM utilizes detectors to create alerts based on specific metrics. We've implemented alerts for CPU and memory usage, common issues in our Kubernetes infrastructure. We can also track container restarts within the cluster and pinpoint the causes. Another crucial area for us is subscription latency. Splunk APM allows us to monitor this metric and identify any performance bottlenecks. This capability was absent in Splunk Enterprise, necessitating the switch to APM. Furthermore, Splunk APM enables us to track application status codes, such as 404 errors.
Splunk APM facilitates the creation of informative dashboards using collected metrics. Additionally, the Metrics Explorer tool allows us to investigate specific metrics of interest and generate alerts or customized spotlights.
Spotlights are tailored visualizations that track metrics for critical application areas. They can trigger alerts based on unexpected changes, such as a sudden increase in error codes over a set timeframe. This provides a more proactive approach to identifying potential issues compared to traditional detector-based alerts.
Splunk APM empowers us to effectively monitor various metrics during load testing. This includes analyzing memory usage across ten to eleven metrics, tracking container restarts during flow testing, and verifying the functionality of auto scaling mechanisms. The comprehensive visualization capabilities of Splunk APM surpass those of Splunk Enterprise, making it ideal for analyzing large sets of metrics and graphs.
We're currently exploring the integration of an OpenTelemetry agent with Splunk APM. This will enable us to collect and transmit a wider range of data, including application metrics, latency metrics, and basic infrastructure metrics such as CPU, memory, etc.
How was the initial setup?
During the initial Splunk deployment, I found that most information available on social media platforms catered to enterprise deployments. Fortunately, many of our new hires had prior Splunk experience, which eased the initial learning curve. Splunk's widespread adoption across industries also meant there was a general familiarity with the tool among the team. Additionally, the comprehensive documentation proved helpful. Overall, the initial rollout went smoothly, though there were some challenges that we were able to resolve.
The Splunk deployment was done on multiple environments. We started with development and then deployed to a staging environment, which sits between development and production. As expected, the development deployment took the longest. The total time for the entire deployment, including my cloud setup, was 2 to 3 weeks. It's important to note that this timeframe isn't solely dependent on Splunk implementation. Other factors can influence the timeline, such as network requests, firewall changes, and coordination with IT teams for license purchases. While the development deployment took longer, promoting Splunk to the staging and production environments was significantly faster. It only took 1 week for each environment.
What about the implementation team?
Our cloud deployment didn't require a consultant, but we used one for our on-premise enterprise deployment, which was a bit more complex.
What other advice do I have?
I would rate Splunk APM 9 out of 10.
The maintenance required is minimal because the cluster deployment helps ensure there is always 1 node working.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Software engineer at a financial services firm with 1,001-5,000 employees
Monitoring has improved issue detection and analytics, but AI assistance still needs improvement
What is our primary use case?
My main use case for Splunk Observability Cloud is telemetry, alerts, and observability. A quick specific example of how I use Splunk Observability Cloud for telemetry and alerts is app monitoring and ensuring that it does not break down.
What is most valuable?
Analytics stands out to me for sure. What I appreciate most about the analytics in Splunk Observability Cloud is that it usually gives me a lot of diagrams, providing signals that help me know when it went down and what time, which in turn helps me narrow down the window when the error happened.
Splunk Observability Cloud has positively impacted my organization by helping us narrow down errors and bugs and solve them quickly. Splunk Observability Cloud has definitely helped improve our operational performance by providing operational resilience, promoting a smoother understanding of our products and smooth bug resolution.
What needs improvement?
Splunk Observability Cloud looks fine the way it is. If I could change or add just one thing, even something small, it would be Agentic AI.
For how long have I used the solution?
I have been using Splunk Observability Cloud for four years.
What do I think about the stability of the solution?
Splunk Observability Cloud is stable.
What do I think about the scalability of the solution?
Its scalability seems good.
How are customer service and support?
The customer support is top-notch. I would rate the customer support a 10.
Which solution did I use previously and why did I switch?
I previously used DataDog before Splunk Observability Cloud, but that was because I was at a previous company.
Which other solutions did I evaluate?
I did not evaluate other options before choosing Splunk Observability Cloud.
What other advice do I have?
Regarding Splunk Observability Cloud's AI capabilities, I think its governance and security depend on what model it is using and the context that the LLM is allowed to access. Regarding Splunk Observability Cloud's AI capabilities, I have not tried it that much, but from the demos, it looked as though it has a good understanding of what is happening.
I am not sure how important it is for my organization that Splunk Observability Cloud has end-to-end visibility into our cloud-native environment. My impression of the solution's out-of-the-box dashboards and detectors is that I usually prefer them more customized, as out-of-the-box feels generic and I need them to be customized for our use cases and applications.
My advice to others looking into using Splunk Observability Cloud is to read the documentation. I gave this review a rating of 7.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Sep 16, 2026
Flag as inappropriateBuyer's Guide
Splunk Observability Cloud
August 2026
Learn what your peers think about Splunk Observability Cloud. Get advice and tips from experienced pros sharing their opinions. Updated: August 2026.
913,924 professionals have used our research since 2012.
Senior Manager Ict & Innovations at Bangalore International Airport Limited
Is easy to use, provides great visibility, and reduces our resolution time
Pros and Cons
- "The data collection from our VMs, containers, databases, and backend components is valuable."
- "Splunk Infrastructure Monitoring's data analytics can be improved by including suggestions for various types of continuous monitoring."
What is our primary use case?
We use Splunk Infrastructure Monitoring to monitor our hybrid infrastructure.
We implemented Splunk Infrastructure Monitoring to help us monitor our infrastructure as we scale.
How has it helped my organization?
Splunk Infrastructure Monitoring is easy to use. It helps us quickly analyze how our infrastructure is performing across various services.
It helps with proper log management, allowing us to monitor our systems and analyze log data regularly. It also provides security operations capabilities for monitoring system health and ensuring uptime. We noticed these benefits immediately.
Our operational efficiency has been increased. It has improved our system health by monitoring the performance of data on servers, virtual machines, and containers, along with overall background processes.
Splunk Infrastructure Monitoring provides end-to-end visibility into our cloud-native environment. This is crucial because any data corruption can impact all the information we've deployed. It also aids in log management, offering parameters that extend its functionality as a comprehensive monitoring tool for CPU, memory usage, and network traffic.
It has helped reduce our mean time to detect by four hours.Our mean time to resolution has been reduced by two hours. By providing access to all our network parameters, it simplifies log ingestion through streamlined calculations.
Splunk Infrastructure Monitoring provides us with faster and more comprehensive insights into our infrastructure, allowing us to focus on critical business initiatives.
We saw the time to value immediately after deploying Splunk Infrastructure Monitoring.
What is most valuable?
The data collection from our VMs, containers, databases, and backend components is valuable.
What needs improvement?
Splunk Infrastructure Monitoring's data analytics can be improved by including suggestions for various types of continuous monitoring.
For how long have I used the solution?
I have been using Splunk Infrastructure Monitoring for three years.
What do I think about the stability of the solution?
The network uptime and monitoring are great.
What do I think about the scalability of the solution?
The scalability of Splunk Infrastructure Monitoring is excellent.
How are customer service and support?
The technical support is good.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We previously used Datadog but it doesn't offer network monitoring features like CPU utilization or overall server performance, which Splunk Infrastructure Monitoring does, so we switched.
Splunk Infrastructure Monitoring offers more functionality and visibility, making it a better choice for handling cloud architecture compared to Datadog.
How was the initial setup?
The initial setup was straightforward. One person was required for the deployment.
What other advice do I have?
I would rate Splunk Infrastructure Monitoring 9 out of 10.
Splunk Infrastructure Monitoring offers automated, continuous monitoring and diagnostics, delivering real-time reports for all your data with enhanced functionality compared to other solutions.
We have 200 users of Splunk Infrastructure Monitoring.
Splunk Infrastructure Monitoring is the best solution for monitoring networks, parameters, CPU, memory usage, and network traffic cases.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Manager Ict & Innovations at Bangalore International Airport Limited
Offers end-to-end visibility, real-time monitoring, and distributed tracing, enabling organizations to optimize application performance and troubleshoot issues efficiently
Pros and Cons
- "The most valuable features are troubleshooting and optimizing application performance."
- "It is essential for the monitoring tool to deliver quick response times when generating analytical reports, instead of prolonged delays."
What is our primary use case?
I use it for monitoring and troubleshooting the performance of cloud-native applications.
How has it helped my organization?
Providing comprehensive visibility throughout the environment, it monitors my system, enhances career performance, and offers insights into the user experience.
Troubleshooting and visualizing a cloud-native environment is made easy with Splunk APM. It provides complete visibility into software tools, swiftly monitoring business performance and applications.
It possesses the capability to conduct distributed tracing within our environment. This includes monitoring the speed of tracked access, extending from end users to the Internet, system, and network services, and supporting my software application. Consequently, it offers an end-to-end overview of potential bottlenecks.
Splunk APM has significantly enhanced our organizational efficiency. Initially, my responsibilities included tracking website application performance, managing applications, and handling license releases. Now, it provides real-time user monitoring, transforming the way I handle these tasks.
It significantly impacts our organization's telemetry data, improving operational performance and user experience. The platform provides insights into application performance and effective log management. Ensuring accurate tracking of all performance-related logs contributes to building up the application performance percentage with comprehensive data.
It contributed to a daily reduction of six hours in our mean time to resolve.
What is most valuable?
The most valuable features are troubleshooting and optimizing application performance.
Another value lies in the resilience and quick recovery capabilities offered by the SIEM. It enables thorough monitoring across our landscape, providing insights into the number of running software applications. The tool furnishes comprehensive information across microservices, significantly enhancing our proficiency.
What needs improvement?
Enhancing system availability and optimizing service performance are crucial. It is essential for the monitoring tool to deliver quick response times when generating analytical reports, instead of prolonged delays.
For how long have I used the solution?
I have been using it for two years.
What do I think about the stability of the solution?
It provides good stability capabilities.
What do I think about the scalability of the solution?
It has the capacity to scale. There are approximately two hundred users and one administrator that use it.
How are customer service and support?
I would rate its customer service and support eight out of ten.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup was straightforward.
What about the implementation team?
The deployment process took six hours. During this time, a clear understanding was established regarding which technical applications—whether cloud-based, native, or others—needed monitoring and improved performance. These categories were identified in-house, with two individuals overseeing the process.
What was our ROI?
It allowed our IT staff to focus on other projects by freeing up their time. In total, it saved around four hours.
Which other solutions did I evaluate?
We evaluated Grafana.
What other advice do I have?
It can serve as an analytical application for enhancing performance, ensuring all dependencies are effectively addressed. Overall, I would rate it eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Data Scientists at a government with 10,001+ employees
Monitors attacks or unauthorized access to the information we want to protect
Pros and Cons
- "The solution monitors attacks or unauthorized access to the information we want to protect."
- "The solution's machine learning deployment is hard and should be made user-friendly."
What is our primary use case?
We use the solution to do a lot of email checking. We also use the tool to monitor different embassies, server IPs and some of the teams.
How has it helped my organization?
Splunk Infrastructure Monitoring has helped our organization tremendously. We have onboarded Splunk for the last four years, and we have 30 to 40 contractors who use Splunk daily. The solution has helped not just a small organization like ours but the whole DOS (Department of State).
What is most valuable?
The solution monitors attacks or unauthorized access to the information we want to protect. There is a dashboard called ISSO that monitors pretty much everything worldwide. We also monitor almost 300 embassies and consulates.
What needs improvement?
The solution's machine learning deployment is hard and should be made user-friendly. Even if a team doesn't have a data scientist, they should be able to use the machine learning toolkit for monitoring purposes. The solution should include more algorithms and SPL commands that people can use.
For how long have I used the solution?
I have been using Splunk Infrastructure Monitoring for four months.
What do I think about the stability of the solution?
We haven’t faced any issues with the solution’s stability.
What do I think about the scalability of the solution?
Splunk Infrastructure Monitoring is highly scalable. We were able to do monitoring and some of the advanced analytics.
How are customer service and support?
I have not contacted Splunk's technical support. We have contacted our account manager for issues, and she's been awesome.
What about the implementation team?
We have different vendors who do deployments, which is different for the government than regular businesses.
What was our ROI?
We have seen a return on investment with Splunk Infrastructure Monitoring regarding the kind of threats we can identify.
What's my experience with pricing, setup cost, and licensing?
Splunk Infrastructure Monitoring is an expensive solution.
What other advice do I have?
Our organization monitors multiple cloud environments using Splunk Infrastructure Monitoring, which works well. This is the only tool we use, and we aren't considering moving or having additional tools.
It is important for our organization that Splunk Infrastructure Monitoring has end-to-end visibility into our cloud-native environments. Our job is critical and very sensitive, so having end-to-end visibility is really helpful.
Splunk Infrastructure Monitoring has helped reduce our mean time to resolve. Looking at the solution's dashboards has helped tremendously because we don't have to look at the individual index or events.
Our business is different from that of a private organization, and Splunk Infrastructure Monitoring has helped improve our organization's business resilience. The machine learning toolkit allows us to do clustering, and we have a couple of deployments on the clusters. That has helped cluster different events based on their critical or security threats.
We have seen time to value using Splunk Infrastructure Monitoring.
Splunk's unified platform has helped consolidate networking, security, and IT observability tools. We don't have to integrate Splunk with a different tool and worry whether those two will integrate. Having everything in one platform helps us create dashboards, alerts, and monitoring tools in one place.
Overall, I rate the solution an eight or nine out of ten.
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Software Engineer at a healthcare company with 10,001+ employees
Helps to ingest a massive amount of raw data and use it effectively
Pros and Cons
- "The most valuable thing that we have seen within our group is the ability to ingest all this raw data and have it organized in a certain way so that different groups can get effective alerting from this massive amount of raw data that is out there."
- "A lot of customers had a hard time effectively searching within the data in Splunk. There is a learning curve from searches to indexes and using all the macros that we have created. It is a little difficult for somebody who has not used it quite a bit and does not have a lot of practice with it, but the AI features that we have been hearing about through Splunk will make it a lot easier for us to use human language to search this data. That is big. That is pretty powerful, and that will help a lot with our customers."
What is our primary use case?
We mainly use it for different divisions and departments within our company to keep track of our systems' health. We also ingest log files to get data and alerts for different groups.
How has it helped my organization?
We used to use a number of different tools before we were introduced to Splunk. We used to have a very hard time getting this data in and being able to effectively use it because we had such a massive amount of data. We also could not find a way to organize it effectively. Splunk helped us to effectively use all the data that we collect in a valuable way for different customers and groups that we have in our company.
It has definitely helped reduce our meantime to resolve (MTTR). A lot of our customers have difficulty getting to root cause analysis of different problems and situations. They also do not have the data to perform analytical responses for different problems that there could be within our industry. They are now able to use this data effectively, not just for alerting, but also for preventative maintenance.
It has definitely improved our organization’s business resiliency by a lot. I do not have the actual data to share at this time, but there has been a marked improvement in the organization. We are now able to keep track of all the raw data that we pull in and then use it effectively. This helps our organization run more efficiently.
It has improved our organization's ability to predict, identify, and solve problems in real time. We are able to use data and search for it effectively. We have different analytical forms and data that we can use to improve in different ways.
What is most valuable?
The most valuable thing that we have seen within our group is the ability to ingest all this raw data and have it organized in a certain way so that different groups can get effective alerting from this massive amount of raw data that is out there.
What needs improvement?
A lot of customers had a hard time effectively searching within the data in Splunk. There is a learning curve from searches to indexes and using all the macros that we have created. It is a little difficult for somebody who has not used it quite a bit and does not have a lot of practice with it, but the AI features that we have been hearing about through Splunk will make it a lot easier for us to use human language to search this data. That is big. That is pretty powerful, and that will help a lot with our customers. At the Splunk conference, some of the talks have been about the AI platform and more effective and easier ways to search within Splunk through indexes and other things. These features will help correct some of the things with which we are having a hard time with some of our customers.
For how long have I used the solution?
We have been using this solution for about four years.
What do I think about the stability of the solution?
We are not on the cloud. We are all on-prem. We have had certain issues with space on the servers and things like that, and while moving things up to what we need, we have not had any issues on the Splunk side.
How are customer service and support?
It is great. We have not had any major issues with getting support from Splunk. With our monthly license, there are a certain amount of hours that we have with Splunk support. We are able to use it when we are getting close to the end of the month. In our meetings, we make a list of different topics that we would like to explore and discuss with Splunk. We create meetings for that, and they are always very helpful. We never had any issues in getting support from Splunk. I would rate their support a ten out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We used to use Tivoli. We also use AppDynamics in addition to Splunk for different parts, but we are starting to learn that Splunk does have a lot of similar toolsets. Splunk does the same as what AppDynamics does, and in some cases, there are more powerful tool sets that would help us. We are thinking of petering down our different tools to get into one tool, possibly Splunk. We already got rid of Tivoli, and we are using Splunk fully in place of Tivoli. We have seen a positive response to it.
We have seen cost efficiencies by switching to this solution. Because of the wider range of tools that Splunk offers, we were able to get rid of Tivoli and get rid of that licensing obligation on an annual basis. We are able to save a good amount of money on that and move that budget over to our Splunk budget to keep everything under one umbrella.
How was the initial setup?
I was not involved in its deployment. I came on the year after.
We are currently on-prem, but we are working on developing and moving everything over to a Google Cloud platform. The announcement that Splunk is partnering with Google Cloud, in addition to AWS, is pretty good for us because we are working on moving over to the cloud in the next couple of years.
What was our ROI?
We have definitely seen an ROI. Our team is able to spend more time learning one tool as opposed to having to learn multiple different toolsets. Therefore, we are able to get more work done in a more efficient manner.
We have seen time to value using this solution. Our company has a very heavy push toward work-life management. Since we have been able to, especially in our group, switch to this tool, we could cut down on our on-call time and have our groups run on different patterns where people who are off are actually off. They do not have to be called in because essentially, everybody is able to access the tool and use it effectively because it is the one tool that we use as opposed to having different tool sets. Everybody knows how to use it, so it definitely has helped us in that way.
Which other solutions did I evaluate?
I know there was a panel and a team that was going through different tools. I was not a part of that process, but I know there were quite a bit of tools that they were looking at. Splunk must have worked out better than everything else.
What other advice do I have?
I would rate Splunk Infrastructure Monitoring a ten out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Client Partner at KyndleIT Consulting
Is easy to use, and improves performance, but does not monitor network devices
Pros and Cons
- "The vibrant dashboards are valuable."
- "The end-to-end visibility is lacking because Splunk cannot directly monitor network devices."
What is our primary use case?
Splunk Infrastructure Monitoring helps identify bottlenecks within the network domain, including issues related to server databases, application response times, and code. These problems can be resolved by our customers promptly.
How has it helped my organization?
It is easy to use. It offers a unique dashboard reporting tool called Ollie. Ollie is essentially an observability tool, and it's also referred to simply as "Ollie" for brevity. It's important to note that this product is agent-based only.
Splunk Infrastructure Monitoring helps improve the efficiency and performance of applications by up to 70 percent.
It has helped reduce our mean time to detect. It has helped to reduce our mean time to resolve by around 50 percent.
Splunk helps us focus on business-critical initiatives.
It integrates well with multiple sets of products.
What is most valuable?
The vibrant dashboards are valuable.
What needs improvement?
The main drawback of Splunk for network monitoring is its limited agent deployment. Splunk excels at collecting data from servers and databases where agents can be installed. However, it cannot directly monitor network devices, unlike Broadcom.
Broadcom offers Spectrum and Performance Management tools that primarily work on SNMP to collect data from network devices. Splunk doesn't have a directly comparable functionality for network devices.
While Splunk offers a wider range of data collection, including metrics, logs, and more, it can be more expensive. Splunk's licensing model is based on data volume (terabytes) rather than the number of devices. This can be costlier compared to Broadcom or similar tools, which often use device-based licensing.
The end-to-end visibility is lacking because Splunk cannot directly monitor network devices.
Broadcom provides a topology-based root cause analysis that is not available with Splunk.
For how long have I used the solution?
I have been using Splunk Infrastructure Monitoring for 10 years.
What do I think about the stability of the solution?
Splunk Infrastructure Monitoring is stable.
How was the initial setup?
Splunk deployment is simplified because it is cloud-based. The deployment takes no more than 15 days to complete.
What's my experience with pricing, setup cost, and licensing?
Splunk's infrastructure monitoring costs can be high because our billing is based on data volume measured in terabytes, rather than the number of devices being monitored.
Replacing legacy systems with Splunk could cost up to $200,000.
What other advice do I have?
I would rate Splunk Infrastructure Monitoring 7 out of 10.
The decision to move from another infrastructure monitoring solution to Splunk should be based on a customer's specific needs. While Splunk offers visually appealing dashboards and access to a wider range of data compared to Broadcom products, pricing can be a significant factor, especially in the Indian market.
Deploying Splunk for a customer can involve higher upfront infrastructure costs. This is because implementing Splunk effectively often requires writing custom queries to filter data and optimize license usage. While this approach minimizes licensing costs, it can be labor-intensive.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company has a business relationship with this vendor other than being a customer. partner
IT Engineer at a financial services firm with 1,001-5,000 employees
Has reduced digital downtime and supported operational performance through effective monitoring
Pros and Cons
- "Splunk Observability Cloud has proven to be beneficial for our organization, helping improve operational performance and company resilience while reducing the costs of unplanned digital downtime."
What is our primary use case?
My main use cases for Splunk Observability Cloud include Application Performance Monitoring, Real User Monitoring, and Synthetic Monitoring.
What is most valuable?
Splunk Observability Cloud has proven to be beneficial for our organization. In evaluating its effectiveness in improving digital resilience within my organization, I have experienced lower costs of unplanned digital downtime.
The solution has helped improve operational performance and company resilience.
What needs improvement?
Splunk Observability Cloud can be optimized to its full potential.
For how long have I used the solution?
I have been using Splunk Observability Cloud since this year.
What do I think about the stability of the solution?
The stability and reliability of Splunk Observability Cloud has been satisfactory. Customer service and technical support have been evaluated positively.
What do I think about the scalability of the solution?
Splunk Observability Cloud scales effectively with the growing needs of my organization.
How are customer service and support?
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have always used Splunk products.
What was our ROI?
My experience with the pricing, setup costs, and licensing has shown a return on investment with Splunk Observability Cloud.
What other advice do I have?
I would recommend organizations to consider implementing Splunk Observability Cloud.
On a scale of one to 10, I would rate Splunk Observability Cloud overall as nine.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Consultant at Free Consultant
Enables me to supervise the flow and simulate the conditions of the repository across several dashboards
Pros and Cons
- "The company has many systems that the customer is paying to access. Splunk APM issued via AppDynamics helps find problems in the feed. It reduces the risk of supervising all the devices. I can supervise the flow and simulate the conditions of the repository across several dashboards to show what's happening at the moment."
- "The dashboards are used mainly to visualize information about the infrastructure, but it isn't easy to construct or use the dashboards. While we tried to resolve the issue by calling support, it would be easier if they had an AI co-pilot to identify the problem and help you solve it."
What is our primary use case?
We use Splunk to monitor some devices in the company. We have several cloud groups for monitoring the energy companies in the state. The stack has several devices to monitor if you have a problem. There is a mixture of solutions.
How has it helped my organization?
The solution monitors the system in real-time. We can find the resources and investigate security incidents. Splunk and another solution, AppDynamics, monitor several devices.
We integrate Splunk with a data collection solution, and it plugs in the users to collect data at several points in the network and infrastructure. The data is indexed in Splunk, which can be visualized in different dashboards. Monitoring for fraud is critical for the company because you have to resolve many problems in the infrastructure with federal information in the dashboard.
What is most valuable?
The company has many systems that the customer pays to access. Splunk APM issued via AppDynamics helps find problems in the feed. It reduces the risk of supervising all the devices. I can supervise the flow and simulate the conditions of the repository across several dashboards to show what's happening at the moment.
What needs improvement?
The dashboards are used mainly to visualize information about the infrastructure, but it isn't easy to construct or use the dashboards. While we tried to resolve the issue by calling support, it would be easier if they had an AI co-pilot to identify the problem and help you solve it.
For how long have I used the solution?
I have been using Splunk APM.
What do I think about the scalability of the solution?
Splunk APM isn't easy to scale because you have to follow the steps and implement best practices, which can be a little awkward.
How are customer service and support?
I rate Splunk support 10 out of 10. We had good documentation, and the support team at Splunk has a lot of experience with code and the tool.
How would you rate customer service and support?
Positive
How was the initial setup?
I haven't had any problems deploying Splunk. When I installed Splunk for the first time, I thought the product line was complex because I had to build the solution. After working on it for a while, it has become easier to do the solution next time.
What was our ROI?
Splunk APM is a crucial tool because it controls all the systems and solves a lot of problems.
What other advice do I have?
I rate Splunk APM 8.5 out of 10. It's an excellent solution.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Data Analyst at a government with 10,001+ employees
Effective, saves time, and has helpful support
Pros and Cons
- "Splunk Infrastructure Monitoring reduces our mean time to resolve. We are more proactive than reactive."
- "We never had any issues when it comes to the type of use cases we are using it for. We did not need more advancement on it, but I know that, in general, everything can be updated. There are tiny little tweaks that can be made regardless of whether it looks better or has a different flow to it than it does right now, but it works pretty well for what we use it for."
How has it helped my organization?
Splunk Infrastructure Monitoring reduces our mean time to resolve. We are more proactive than reactive. I would be very confident to say that there is about a 25% reduction in time. We get things way quicker than when we were just doing it reactively.
It has the ability to identify and solve problems in real time. It saves time.
What is most valuable?
There is no one feature that stands out more than others. We use a little bit of everything. When we started using it, we did not exactly know it. It was new and fresh, so we just started gathering everything. We did not end up doing anything different. All of the features that we are using have had an effect on the monitoring that we are doing. Everything is very effective.
What needs improvement?
We never had any issues when it comes to the type of use cases we are using it for. We did not need more advancement on it, but I know that, in general, everything can be updated. There are tiny little tweaks that can be made regardless of whether it looks better or has a different flow to it than it does right now, but it works pretty well for what we use it for.
For how long have I used the solution?
I have been using Splunk Infrastructure Monitoring for two to three years.
What do I think about the stability of the solution?
It is stable.
What do I think about the scalability of the solution?
It is scalable. As we continue to grow and expand, the stability and the scalability are there.
How are customer service and support?
They have been very helpful whenever we have had any issues. Only one or two times they did not know. That does happen. We are all humans, but that is the best that you can get.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I got onto the team when we started using it, so I am not sure what we were using before.
What other advice do I have?
I would rate Splunk Infrastructure Monitoring a ten out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Buyer's Guide
Download our free Splunk Observability Cloud Report and get advice and tips from experienced pros
sharing their opinions.
Updated: August 2026
Product Categories
Application Performance Monitoring (APM) and Observability Network Monitoring Software IT Infrastructure Monitoring Cloud Monitoring Software Container Management Digital Experience Monitoring (DEM)Popular Comparisons
Microsoft Defender for Cloud
Splunk AppDynamics
SolarWinds NPM
PRTG Network Monitor
Red Hat OpenShift
LogicMonitor
WhatsUp Gold
Buyer's Guide
Download our free Splunk Observability Cloud Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- When evaluating Application Performance Management, what aspect do you think is the most important to look for?
- APM tools for a Managed Service Provider - Dynatrace vs. AppDynamics vs. Aternity vs. Ruxit
- What solution would you recommend for monitoring traffic utilization of leased lines?
- How Much Should I Budget for an APM Solution?
- Which is the best AANPM product? Should we be considering anything besides for Riverbed?
- Who Uses APM?
- What is your favorite tool for Application Performance Monitoring?
- How does synthetic monitoring differ from real user monitoring?
- Differences between SiteScope and dynaTrace?
- Splunk as an Enterprise Class monitoring solution -- thoughts?





















