No more typing reviews! Try our Samantha, our new voice AI agent.
Nagendra Nekkala. - PeerSpot reviewer
Senior Manager Ict & Innovations at Bangalore International Airport Limited
Real User
Top 10Leaderboard
Mar 19, 2024
Is easy to use, provides great visibility, and reduces our resolution time
Pros and Cons
  • "The data collection from our VMs, containers, databases, and backend components is valuable."
  • "Splunk Infrastructure Monitoring's data analytics can be improved by including suggestions for various types of continuous monitoring."

What is our primary use case?

We use Splunk Infrastructure Monitoring to monitor our hybrid infrastructure.

We implemented Splunk Infrastructure Monitoring to help us monitor our infrastructure as we scale.

How has it helped my organization?

Splunk Infrastructure Monitoring is easy to use. It helps us quickly analyze how our infrastructure is performing across various services.

It helps with proper log management, allowing us to monitor our systems and analyze log data regularly. It also provides security operations capabilities for monitoring system health and ensuring uptime. We noticed these benefits immediately.

Our operational efficiency has been increased. It has improved our system health by monitoring the performance of data on servers, virtual machines, and containers, along with overall background processes.

Splunk Infrastructure Monitoring provides end-to-end visibility into our cloud-native environment. This is crucial because any data corruption can impact all the information we've deployed. It also aids in log management, offering parameters that extend its functionality as a comprehensive monitoring tool for CPU, memory usage, and network traffic.

It has helped reduce our mean time to detect by four hours.Our mean time to resolution has been reduced by two hours. By providing access to all our network parameters, it simplifies log ingestion through streamlined calculations.

Splunk Infrastructure Monitoring provides us with faster and more comprehensive insights into our infrastructure, allowing us to focus on critical business initiatives.

We saw the time to value immediately after deploying Splunk Infrastructure Monitoring.

What is most valuable?

The data collection from our VMs, containers, databases, and backend components is valuable.

What needs improvement?

Splunk Infrastructure Monitoring's data analytics can be improved by including suggestions for various types of continuous monitoring.

Buyer's Guide
Splunk Observability Cloud
October 2026
Learn what your peers think about Splunk Observability Cloud. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
920,929 professionals have used our research since 2012.

For how long have I used the solution?

I have been using Splunk Infrastructure Monitoring for three years.

What do I think about the stability of the solution?

The network uptime and monitoring are great.

What do I think about the scalability of the solution?

The scalability of Splunk Infrastructure Monitoring is excellent.

How are customer service and support?

The technical support is good.

Which solution did I use previously and why did I switch?

We previously used Datadog but it doesn't offer network monitoring features like CPU utilization or overall server performance, which Splunk Infrastructure Monitoring does, so we switched.

Splunk Infrastructure Monitoring offers more functionality and visibility, making it a better choice for handling cloud architecture compared to Datadog.

How was the initial setup?

The initial setup was straightforward. One person was required for the deployment.

What other advice do I have?

I would rate Splunk Infrastructure Monitoring 9 out of 10.

Splunk Infrastructure Monitoring offers automated, continuous monitoring and diagnostics, delivering real-time reports for all your data with enhanced functionality compared to other solutions.

We have 200 users of Splunk Infrastructure Monitoring.

Splunk Infrastructure Monitoring is the best solution for monitoring networks, parameters, CPU, memory usage, and network traffic cases. 

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Nagendra Nekkala. - PeerSpot reviewer
Senior Manager Ict & Innovations at Bangalore International Airport Limited
Real User
Top 10Leaderboard
Dec 29, 2023
Offers end-to-end visibility, real-time monitoring, and distributed tracing, enabling organizations to optimize application performance and troubleshoot issues efficiently
Pros and Cons
  • "The most valuable features are troubleshooting and optimizing application performance."
  • "It is essential for the monitoring tool to deliver quick response times when generating analytical reports, instead of prolonged delays."

What is our primary use case?

I use it for monitoring and troubleshooting the performance of cloud-native applications.

How has it helped my organization?

Providing comprehensive visibility throughout the environment, it monitors my system, enhances career performance, and offers insights into the user experience.

Troubleshooting and visualizing a cloud-native environment is made easy with Splunk APM. It provides complete visibility into software tools, swiftly monitoring business performance and applications.

It possesses the capability to conduct distributed tracing within our environment. This includes monitoring the speed of tracked access, extending from end users to the Internet, system, and network services, and supporting my software application. Consequently, it offers an end-to-end overview of potential bottlenecks.

Splunk APM has significantly enhanced our organizational efficiency. Initially, my responsibilities included tracking website application performance, managing applications, and handling license releases. Now, it provides real-time user monitoring, transforming the way I handle these tasks.

It significantly impacts our organization's telemetry data, improving operational performance and user experience. The platform provides insights into application performance and effective log management. Ensuring accurate tracking of all performance-related logs contributes to building up the application performance percentage with comprehensive data.

It contributed to a daily reduction of six hours in our mean time to resolve.

What is most valuable?

The most valuable features are troubleshooting and optimizing application performance. 

Another value lies in the resilience and quick recovery capabilities offered by the SIEM. It enables thorough monitoring across our landscape, providing insights into the number of running software applications. The tool furnishes comprehensive information across microservices, significantly enhancing our proficiency.

What needs improvement?

Enhancing system availability and optimizing service performance are crucial. It is essential for the monitoring tool to deliver quick response times when generating analytical reports, instead of prolonged delays.

For how long have I used the solution?

I have been using it for two years.

What do I think about the stability of the solution?

It provides good stability capabilities.

What do I think about the scalability of the solution?

It has the capacity to scale. There are approximately two hundred users and one administrator that use it.

How are customer service and support?

I would rate its customer service and support eight out of ten.

How would you rate customer service and support?

Positive

How was the initial setup?

The initial setup was straightforward.

What about the implementation team?

The deployment process took six hours. During this time, a clear understanding was established regarding which technical applications—whether cloud-based, native, or others—needed monitoring and improved performance. These categories were identified in-house, with two individuals overseeing the process.

What was our ROI?

It allowed our IT staff to focus on other projects by freeing up their time. In total, it saved around four hours.

Which other solutions did I evaluate?

We evaluated Grafana.

What other advice do I have?

It can serve as an analytical application for enhancing performance, ensuring all dependencies are effectively addressed. Overall, I would rate it eight out of ten.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Amazon Web Services (AWS)
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Buyer's Guide
Splunk Observability Cloud
October 2026
Learn what your peers think about Splunk Observability Cloud. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
920,929 professionals have used our research since 2012.
reviewer2500041 - PeerSpot reviewer
Data Scientists at a government with 10,001+ employees
Real User
Jul 8, 2024
Monitors attacks or unauthorized access to the information we want to protect
Pros and Cons
  • "The solution monitors attacks or unauthorized access to the information we want to protect."
  • "The solution's machine learning deployment is hard and should be made user-friendly."

What is our primary use case?

We use the solution to do a lot of email checking. We also use the tool to monitor different embassies, server IPs and some of the teams.

How has it helped my organization?

Splunk Infrastructure Monitoring has helped our organization tremendously. We have onboarded Splunk for the last four years, and we have 30 to 40 contractors who use Splunk daily. The solution has helped not just a small organization like ours but the whole DOS (Department of State).

What is most valuable?

The solution monitors attacks or unauthorized access to the information we want to protect. There is a dashboard called ISSO that monitors pretty much everything worldwide. We also monitor almost 300 embassies and consulates.

What needs improvement?

The solution's machine learning deployment is hard and should be made user-friendly. Even if a team doesn't have a data scientist, they should be able to use the machine learning toolkit for monitoring purposes. The solution should include more algorithms and SPL commands that people can use.

For how long have I used the solution?

I have been using Splunk Infrastructure Monitoring for four months.

What do I think about the stability of the solution?

We haven’t faced any issues with the solution’s stability.

What do I think about the scalability of the solution?

Splunk Infrastructure Monitoring is highly scalable. We were able to do monitoring and some of the advanced analytics.

How are customer service and support?

I have not contacted Splunk's technical support. We have contacted our account manager for issues, and she's been awesome.

What about the implementation team?

We have different vendors who do deployments, which is different for the government than regular businesses.

What was our ROI?

We have seen a return on investment with Splunk Infrastructure Monitoring regarding the kind of threats we can identify.

What's my experience with pricing, setup cost, and licensing?

Splunk Infrastructure Monitoring is an expensive solution.

What other advice do I have?

Our organization monitors multiple cloud environments using Splunk Infrastructure Monitoring, which works well. This is the only tool we use, and we aren't considering moving or having additional tools.

It is important for our organization that Splunk Infrastructure Monitoring has end-to-end visibility into our cloud-native environments. Our job is critical and very sensitive, so having end-to-end visibility is really helpful.

Splunk Infrastructure Monitoring has helped reduce our mean time to resolve. Looking at the solution's dashboards has helped tremendously because we don't have to look at the individual index or events.

Our business is different from that of a private organization, and Splunk Infrastructure Monitoring has helped improve our organization's business resilience. The machine learning toolkit allows us to do clustering, and we have a couple of deployments on the clusters. That has helped cluster different events based on their critical or security threats.

We have seen time to value using Splunk Infrastructure Monitoring.

Splunk's unified platform has helped consolidate networking, security, and IT observability tools. We don't have to integrate Splunk with a different tool and worry whether those two will integrate. Having everything in one platform helps us create dashboards, alerts, and monitoring tools in one place.

Overall, I rate the solution an eight or nine out of ten.

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
CosmeCardoso - PeerSpot reviewer
Senior Software and Production Engineer S at WEX Inc. (NYSE: WEX)
Real User
Sep 24, 2024
It provides a holistic view and accurate information, but it is difficult to manage
Pros and Cons
  • "Once configured correctly, the analysis reporting the Splunk APM provides is better than that of the other APM tools."
  • "Splunk isn't an ideal tool for application performance management due to the extensive setup required."

What is our primary use case?

We utilize Splunk APM for security purposes, monitoring all transactions within the organization to prevent potential attacks. Additionally, we leverage Splunk APM to analyze application logs, gaining insights into application behaviour and facilitating a reduction in Mean Time To Resolution should any issues arise in the production environment.

How has it helped my organization?

OpenTelemetry provides more accurate information about an application by combining views from the customer perspective, infrastructure metrics, and application-specific data. This holistic view enables full telemetry observability, allowing us to analyze and strategize effectively for our company or clients.

What is most valuable?

Once configured correctly, the analysis reporting the Splunk APM provides is better than that of the other APM tools. Once the correct fields are defined, we can create different report dashboards.

What needs improvement?

Splunk isn't an ideal tool for application performance management due to the extensive setup required. It necessitates various configurations to gather diverse information from applications, networks, or other sources. Creating the right tables and defining the appropriate fields to extract comprehensive data involves a significant amount of setup within the tool. Managing this process can be quite challenging. However, once configured, the collected information is invaluable, although not easily manageable.

Splunk falls short compared to other APM tools such as AppDynamics or Datadog. It does not collect online information in real time and relies heavily on log files. Unlike Datadog, which collects real-time application behaviour data like CPU, memory, load, and response time, Splunk requires additional configuration to obtain similar information. This makes using Splunk for APM purposes significantly more difficult compared to the automatic data collection capabilities of AppDynamics or Datadog.

For how long have I used the solution?

I have been using Splunk APM for more than a decade.

What do I think about the scalability of the solution?

Splunk APM lacks scalability, requiring the administrator to constantly monitor or create specific alerts to ensure sufficient disk space, CPU, and memory for data collection and transaction processing. This results in a tool that is challenging to manage and costly to maintain.

How are customer service and support?

Splunk support is responsive and provides quick resolutions when tickets are opened. Their service has left a positive impression on me.

How would you rate customer service and support?

Positive

How was the initial setup?

The initial deployment is complex, requiring the definition of the switch, storage, correct host, and working with certification. This necessitates at least one expensive specialist, costing approximately $5,000 per month to hire and work with our team.

What's my experience with pricing, setup cost, and licensing?

Splunk APM is expensive. Even before we begin, we need substantial infrastructure investment to collect comprehensive logs. For example, to gather log data, we must create specific tables in Splunk, starting at 50 gigabytes. In a cloud environment, this storage requirement becomes very costly.

What other advice do I have?

I would rate Splunk APM six out of ten.

Cisco recently acquired Splunk, and its roadmap for the coming year includes incorporating aspects of Splunk into AppDynamics. Cisco's intention behind combining these two tools is to showcase its commitment to open telemetry and comprehensive observability to the market and its customers.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Manish Arora - PeerSpot reviewer
Senior Client Partner at KyndleIT Consulting
Real User
Top 5
May 12, 2024
Is easy to use, and improves performance, but does not monitor network devices
Pros and Cons
  • "The vibrant dashboards are valuable."
  • "The end-to-end visibility is lacking because Splunk cannot directly monitor network devices."

What is our primary use case?

Splunk Infrastructure Monitoring helps identify bottlenecks within the network domain, including issues related to server databases, application response times, and code. These problems can be resolved by our customers promptly.

How has it helped my organization?

It is easy to use. It offers a unique dashboard reporting tool called Ollie. Ollie is essentially an observability tool, and it's also referred to simply as "Ollie" for brevity. It's important to note that this product is agent-based only.

Splunk Infrastructure Monitoring helps improve the efficiency and performance of applications by up to 70 percent.

It has helped reduce our mean time to detect. It has helped to reduce our mean time to resolve by around 50 percent.

Splunk helps us focus on business-critical initiatives.

It integrates well with multiple sets of products.

What is most valuable?

The vibrant dashboards are valuable.

What needs improvement?

The main drawback of Splunk for network monitoring is its limited agent deployment. Splunk excels at collecting data from servers and databases where agents can be installed. However, it cannot directly monitor network devices, unlike Broadcom.

Broadcom offers Spectrum and Performance Management tools that primarily work on SNMP to collect data from network devices. Splunk doesn't have a directly comparable functionality for network devices.

While Splunk offers a wider range of data collection, including metrics, logs, and more, it can be more expensive. Splunk's licensing model is based on data volume (terabytes) rather than the number of devices. This can be costlier compared to Broadcom or similar tools, which often use device-based licensing.

The end-to-end visibility is lacking because Splunk cannot directly monitor network devices.

Broadcom provides a topology-based root cause analysis that is not available with Splunk.

For how long have I used the solution?

I have been using Splunk Infrastructure Monitoring for 10 years. 

What do I think about the stability of the solution?

Splunk Infrastructure Monitoring is stable. 

How was the initial setup?

Splunk deployment is simplified because it is cloud-based. The deployment takes no more than 15 days to complete.

What's my experience with pricing, setup cost, and licensing?

Splunk's infrastructure monitoring costs can be high because our billing is based on data volume measured in terabytes, rather than the number of devices being monitored.

Replacing legacy systems with Splunk could cost up to $200,000.

What other advice do I have?

I would rate Splunk Infrastructure Monitoring 7 out of 10.

The decision to move from another infrastructure monitoring solution to Splunk should be based on a customer's specific needs. While Splunk offers visually appealing dashboards and access to a wider range of data compared to Broadcom products, pricing can be a significant factor, especially in the Indian market.

Deploying Splunk for a customer can involve higher upfront infrastructure costs. This is because implementing Splunk effectively often requires writing custom queries to filter data and optimize license usage. While this approach minimizes licensing costs, it can be labor-intensive.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company has a business relationship with this vendor other than being a customer. partner
PeerSpot user
reviewer2755908 - PeerSpot reviewer
IT Engineer at a financial services firm with 1,001-5,000 employees
Real User
Top 20
Sep 15, 2025
Has reduced digital downtime and supported operational performance through effective monitoring
Pros and Cons
  • "Splunk Observability Cloud has proven to be beneficial for our organization, helping improve operational performance and company resilience while reducing the costs of unplanned digital downtime."

    What is our primary use case?

    My main use cases for Splunk Observability Cloud include Application Performance Monitoring, Real User Monitoring, and Synthetic Monitoring.

    What is most valuable?

    Splunk Observability Cloud has proven to be beneficial for our organization. In evaluating its effectiveness in improving digital resilience within my organization, I have experienced lower costs of unplanned digital downtime.

    The solution has helped improve operational performance and company resilience.

    What needs improvement?

    Splunk Observability Cloud can be optimized to its full potential. 

    For how long have I used the solution?

    I have been using Splunk Observability Cloud since this year.

    What do I think about the stability of the solution?

    The stability and reliability of Splunk Observability Cloud has been satisfactory. Customer service and technical support have been evaluated positively.

    What do I think about the scalability of the solution?

    Splunk Observability Cloud scales effectively with the growing needs of my organization.

    How are customer service and support?


    How would you rate customer service and support?

    Positive

    Which solution did I use previously and why did I switch?

    I have always used Splunk products.

    What was our ROI?

    My experience with the pricing, setup costs, and licensing has shown a return on investment with Splunk Observability Cloud.

    What other advice do I have?

    I would recommend organizations to consider implementing Splunk Observability Cloud. 

    On a scale of one to 10, I would rate Splunk Observability Cloud overall as nine.

    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    Marcelo-Carvalho - PeerSpot reviewer
    Consultant at Free Consultant
    Real User
    Jul 22, 2024
    Enables me to supervise the flow and simulate the conditions of the repository across several dashboards
    Pros and Cons
    • "The company has many systems that the customer is paying to access. Splunk APM issued via AppDynamics helps find problems in the feed. It reduces the risk of supervising all the devices. I can supervise the flow and simulate the conditions of the repository across several dashboards to show what's happening at the moment."
    • "The dashboards are used mainly to visualize information about the infrastructure, but it isn't easy to construct or use the dashboards. While we tried to resolve the issue by calling support, it would be easier if they had an AI co-pilot to identify the problem and help you solve it."

    What is our primary use case?

    We use Splunk to monitor some devices in the company. We have several cloud groups for monitoring the energy companies in the state. The stack has several devices to monitor if you have a problem. There is a mixture of solutions.

    How has it helped my organization?

    The solution monitors the system in real-time. We can find the resources and investigate security incidents. Splunk and another solution, AppDynamics, monitor several devices.

    We integrate Splunk with a data collection solution, and it plugs in the users to collect data at several points in the network and infrastructure. The data is indexed in Splunk, which can be visualized in different dashboards. Monitoring for fraud is critical for the company because you have to resolve many problems in the infrastructure with federal information in the dashboard. 

    What is most valuable?

    The company has many systems that the customer pays to access. Splunk APM issued via AppDynamics helps find problems in the feed. It reduces the risk of supervising all the devices. I can supervise the flow and simulate the conditions of the repository across several dashboards to show what's happening at the moment.

    What needs improvement?

    The dashboards are used mainly to visualize information about the infrastructure, but it isn't easy to construct or use the dashboards. While we tried to resolve the issue by calling support, it would be easier if they had an AI co-pilot to identify the problem and help you solve it. 

    For how long have I used the solution?

    I have been using Splunk APM.

    What do I think about the scalability of the solution?

    Splunk APM isn't easy to scale because you have to follow the steps and implement best practices, which can be a little awkward.

    How are customer service and support?

    I rate Splunk support 10 out of 10. We had good documentation, and the support team at Splunk has a lot of experience with code and the tool. 

    How would you rate customer service and support?

    Positive

    How was the initial setup?

    I haven't had any problems deploying Splunk. When I installed Splunk for the first time, I thought the product line was complex because I had to build the solution. After working on it for a while, it has become easier to do the solution next time.

    What was our ROI?

    Splunk APM is a crucial tool because it controls all the systems and solves a lot of problems.

    What other advice do I have?

    I rate Splunk APM 8.5 out of 10. It's an excellent solution.

    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    reviewer2500119 - PeerSpot reviewer
    Data Analyst at a government with 10,001+ employees
    Real User
    Jun 30, 2024
    Effective, saves time, and has helpful support
    Pros and Cons
    • "Splunk Infrastructure Monitoring reduces our mean time to resolve. We are more proactive than reactive."
    • "We never had any issues when it comes to the type of use cases we are using it for. We did not need more advancement on it, but I know that, in general, everything can be updated. There are tiny little tweaks that can be made regardless of whether it looks better or has a different flow to it than it does right now, but it works pretty well for what we use it for."

    How has it helped my organization?

    Splunk Infrastructure Monitoring reduces our mean time to resolve. We are more proactive than reactive. I would be very confident to say that there is about a 25% reduction in time. We get things way quicker than when we were just doing it reactively.

    It has the ability to identify and solve problems in real time. It saves time.

    What is most valuable?

    There is no one feature that stands out more than others. We use a little bit of everything. When we started using it, we did not exactly know it. It was new and fresh, so we just started gathering everything. We did not end up doing anything different. All of the features that we are using have had an effect on the monitoring that we are doing. Everything is very effective.

    What needs improvement?

    We never had any issues when it comes to the type of use cases we are using it for. We did not need more advancement on it, but I know that, in general, everything can be updated. There are tiny little tweaks that can be made regardless of whether it looks better or has a different flow to it than it does right now, but it works pretty well for what we use it for.

    For how long have I used the solution?

    I have been using Splunk Infrastructure Monitoring for two to three years.

    What do I think about the stability of the solution?

    It is stable.

    What do I think about the scalability of the solution?

    It is scalable. As we continue to grow and expand, the stability and the scalability are there.

    How are customer service and support?

    They have been very helpful whenever we have had any issues. Only one or two times they did not know. That does happen. We are all humans, but that is the best that you can get.

    How would you rate customer service and support?

    Positive

    Which solution did I use previously and why did I switch?

    I got onto the team when we started using it, so I am not sure what we were using before.

    What other advice do I have?

    I would rate Splunk Infrastructure Monitoring a ten out of ten.

    Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
    PeerSpot user
    Senior Support Engineer at a tech vendor with 10,001+ employees
    Real User
    Mar 28, 2024
    The dashboards are great, and we get solid visibility across our environment
    Pros and Cons
    • "Splunk's dashboards are great."
    • "The licensing model is expensive. We need to monitor the amount of data ingested because the cost is based on the data collected."

    What is our primary use case?

    I have the logs of my applications, and they're usually a bit volatile. The log switch doesn't stay there on the application for a long time, so Splunk can require that. It can take 15 days for the logs to be available to do some kind of research. I'm using Splunk to ingest application logs, create dashboards, and set up alerts. 

    How has it helped my organization?

    The biggest benefit of Splunk is that we can retain logs and correlate the data. Telemetry data has a huge impact because it's much easier to see everything. 

    Splunk has significantly reduced our mean resolution time. The workflow at my company involves application microservices applications running on the cloud. These logs are highly volatile, so they're only retained for three to five minutes, and we had to reproduce an issue to trace why it failed. That meant we had to do everything again to capture the log at the moment.  Now, we have the data to analyze one or two hours.

    What is most valuable?

    Splunk's dashboards are great. The solution provides end-to-end visibility across my environment. Visualizing large amounts of data is easier because we can correlate the data from any target source. 

    What needs improvement?

    The licensing model is expensive. We need to monitor the amount of data ingested because the cost is based on the data collected. 

    For how long have I used the solution?

    I have used Splunk APM for three years now.

    What do I think about the stability of the solution?

    We have instances for production and development. I've never seen the production instance go down. Our development instance has gone down, but that's expected. 

    Which solution did I use previously and why did I switch?

    I used tools like Elasticsearch, which is similar to Splunk. I've also used other observability tools like Grafana and Dynatrace, but they have different features.

    What other advice do I have?

    I rate Splunk APM 10 out of 10.

    Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
    PeerSpot user
    Manish Ved - PeerSpot reviewer
    Lead Infrastructure Domain Architect (Systems) at a healthcare company with 10,001+ employees
    Real User
    Mar 25, 2023
    Log searching and log analytics come in handy; incredible tech support
    Pros and Cons
    • "The features I have found most valuable are log searching and log analytics, both of which are quick features."
    • "There is a lot of room for improvement with the automation."

    What is our primary use case?

    Our primary use case for this solution is as a supplement to Dynatrace, so the log analytics is done in Splunk instead of Dynatrace.

    How has it helped my organization?

    We built a tool for firewall log monitoring and we powered all firewall logs to Splunk. In addition, we built a little dashboard that just specifies sources and the destination addresses and port numbers. It passes all the logs and tell us if there are any blocks or drops on the firewall level. This is a very useful tool for us.

    What is most valuable?

    The features I have found most valuable are log searching and log analytics, both of which are quick features.

    What needs improvement?

    There's a component in this solution that is particular and takes a lot of manual work and that is the automation. There is a lot of room for improvement with the automation. They should also improve the discovery and detection of all the infrastructure components so that it is more automated and takes less manual work.

    For how long have I used the solution?

    I have been using this solution for about five years.

    What do I think about the stability of the solution?

    I would rate the stability of this solution an eight, on a scale from one to 10, with one being the worst and 10 being the best.

    What do I think about the scalability of the solution?

    I would rate the scalability of this solution a nine, on a scale from one to 10, with one being the worst and 10 being the best.

    How are customer service and support?

    I would rate the technical support of this solution a 10, on a scale from one to 10, with one being the worst and 10 being the best.

    How would you rate customer service and support?

    Positive

    How was the initial setup?

    At first, we were deployed on-premises and then about one year ago we migrated to the cloud. So I would say they did most of the work around migration. There are around 1,000 users of this solution in our company.

    What was our ROI?

    We have seen the ROI.

    What's my experience with pricing, setup cost, and licensing?

    I would rate the pricing of this solution a two, on a scale from one to 10, with one being the most expensive and 10 being the best price.

    What other advice do I have?

    Our model of deployment is the cloud.

    I would rate this solution as a whole a 10, on a scale from one to 10, with one being the worst and 10 being the best.

    I would advise other people looking into this solution to do their due diligence and make sure they do their pre-work and post-work.

    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    Buyer's Guide
    Download our free Splunk Observability Cloud Report and get advice and tips from experienced pros sharing their opinions.
    Updated: October 2026
    Buyer's Guide
    Download our free Splunk Observability Cloud Report and get advice and tips from experienced pros sharing their opinions.