Splunk Enterprise Reviews

The system is highly intuitive to use. It is faster than other solutions I've used on the market and has a huge library of 3rd party plugins to get more from the system. It is easy to create scheduled searches, dashboards, reports etc. but there are a number of additional plugins (at an extra cost) to help with security, single pane of glass and metric collection.

It offers challenges for a decentralized working model. Where Splunk is centrally managed, it is easy to ensure that best practices are maintained. Where the system is opened up for an entire department to utilize and on-board their logs, it becomes more difficult. However, with some creative thinking and good process, this issue can be overcome.

It an intelligent business tool that provided me an opportunity to customize and build report from large volume of data from different departments within the 13 Africa countries in telecommunication sectors. The platform allows data to be consolidated accordingly to the organization need and produces visualized reports of dashboard features. I also noted that the system can analyst unstructured large volume of data speedily and is reliable and web based allowing for user flexible accessible from any part of the world if you have internet. The systems have been reliable and secured from the time (2 years) I started using it without any system intermittent, system errors and cyber-attack.

The system is built and use-able with structured and unstructured organization though the price in foreign currency could hamper small and medium organization to use it especially in most Africa country where the local currency has depreciated against the major trading foreign currency.so the Forex pricing is a challenge.
The navigation of the platform will require minor training though if the user is computer proficient, they would management with minor challenge and interpretation of the data. So, first time user it can be difficult to use it
It will depend on internet for access and internet tend to be pricey in most African country and therefore could increase the business cost for small and medium enterprise. It can increase business cost if not fully used

The ability to use this software for security operations, data analysis, creating dashboards, generating tickets and everything else

Splunk uses its own SPL, which is not very easy to learn. However, there are lots of documentation that Splunk provides to its customers. There is paid training available which is useful for beginners to learn.

Splunk is first of all reliable from stability and information security perspective, which is a must. Second, it has one of the most advanced feature sets in analyzing, manipulation, anomaly detecting and processing log data residing in its database. Even AI/ML options are on the table, and it's possible to start implementing AI/ML with Splunk immediately.

For certain types of use, licensing structure can hit you in your face relatively quickly.

Splunk allows us to see exactly what is going on in production! I work on commerce for a fortune 100 company, and we use Splunk to monitor our apps in real time. Splunk gives you the ability to perform queries like you would with SQL against your log statements in real time. You will learn that you can place strategic log statements in your code that allows you to identify situations in production and be proactive at solving them. For example, you can log your customer's session cookie ID, and track any given customer's activity on your website via your app logs. It gives you dials and charting capabilities to monitor even the slightest drops in customer activities due to flaws in code or slowing network calls.

PRICE. The software is so powerful, and they seem to leverage this in the pricing of the licenses.

The power of it. It's a very good tool that does amazing things. Nothing comes close to it. We used it for full view of data, full transaction. Security appliance consolidation.

There is a learning curve and a new language you have to learn, but it's intuitive and you can pick it up pretty quickly.

Splunk integrates with many different solutions. They also have pre written apps that contain pre written dashboards and other features. It can inherit logs from many products with just several clicks.

Pricing model is outdated and can get really pricey really fast. It's very simple to over your daily license.

The software includes various configuration possibilities to organize and aggregate the logs of different systems. Very useful tool for monitoring IT infrastructure activities.

At the moment we have found no negative aspects.

Various insights are derived from otherwise neglected system and process logs. Library of functions is readily available to read the logs , perform string operations and scan the file.
Information can be represented using numerous charts , bars and graphs. Very useful in production monitoring and alerting using email option

I feel debugging is difficult. drop down or drag and drop functions should be made available because it's difficult to keep track and remember syntax of functions and it's usage.

1.Ease of use
2.support ad-hoc query and then analytic.
3. defining field extractor is simple and you can use it to search again.
4. It's a powerful ecosystem

1., it's slow and maybe make system unresponsive when you search data over long time range, or large amounts of data
2. there are too much CPU cost when index too much items on Windows machine.
3. price becomes high as you scale.

This software puts all your logs and events in one centralized location making managing logs easier to manage.

When they first started they had awesome plans and options but it has changed since the beginning. Still great

A log forwarder tool which you can use free upto 500MB. No Development work required to provide value.
You can create your own queries and event based alerts.

The software is very powerful but to use those feature you will have to buy the license then you can get all those feature that it has.

I love how easy it is to use and to find my data. The search engine is so fast and intuitive.

This is a powerful tool and it can prepare very detailed graphs and charts. The con is that it takes more training and time to perfect your skills to create these graphs.

The amount of information and data that you can organize with splunk is it's best feature.

It will take some time getting used to how create dashboards and reports so that can pull the relevant data out of splunk.

Very useful for combining log files from multiple sources and setting up predefined reports to check for errors.

Free version of splunk light doesn't allow automatic notification by email of log errors. However as I have paid nothing I can't complain too much!

Very easy GUI that can be familiar just in a few days, Gathering data in simple stepts makes everything much easier.

The docs about the product sometimes are confusing, and to learn more on google is harder because there is not much material like for example cisco, palo alto, etc.

I really like the overall feel of Splunk, it integrates with many other products very well. Even has independent add-ons for Cisco and Microsoft Products.

Pricing of Spunk can get very expensive. I have experience with the windows version of splunk and sometimes it can be difficult to troubleshoot.

I really liked how easy splunk made it to search vast amounts of data in a short amount of time. The dashboards were pretty useful as well.

Splunk is very expensive to deploy on premise. This can be a limiting factor for customers that do not want to host sensitive data in the cloud.

The product installation is simple and easy to understand. The configuration of this product for a multi-node cluster is intuitive and easy to learn. Automatic suggestions popup while filtering over indexed data.

In case of analytics, there should be at least 2000 entries.

The best part about Splunk is that it is incredibly flexible. Any type of log can be aggregated and its awesome to build correlation. Any thing you want to know from your data can be found with Splunk.

The ability of Splunk comes at a cost, literally. There is a free edition but if you are using it in an enterprise environment, especially if there is more than one department uses it, it will be pricey. However given the functionality its still a good value for many enterprises.

I like the speed and ease to search contents.

i think cost is a factor for some organizations

It gives us proper logging data for any product and also the fact that it shows data on a timely basis. Also can import data.

Nothing to be specific, it can be made for interactive maybe

The charts and visualizations that you can create in general have a good look and it has the minimum functionalities expected as a user (export, filtering, search, etc), I spent some time trying to understand the interface and functionalities but once I started to load some data and use the search I was able to see the capabilities of the product.

I did not like the limitations of the free version like the size of the data you can upload but I guess is still fair to be able to use it for free.

Splunk makes it easy to search through various data including logs. In the past I have had to pour through logs in order to find the one lines among the 100 of thousands of lines. Splunk allows me to search through those logs in a matter of seconds vs the hours it used to take.

Most of enterprise setup is done through the command line. It would be nice to have cluster configuration (index creation) as part of the UI.

Several of our applications are distributed across multiple systems. It is the same software running on each server but doing the same job for different users. Each server would generate its own log files. When things went wrong, we used Splunk to be able to see what was going on on each server. Click a few buttons and you get two logs from two different servers listed together coordinated by time. But that leads you to discover that the issue came from a separate upstream or downstream server, then bring in those logs too . . . all coordinated by time. Don't get me wrong, the IT guys love these tools for their own enterprise reasons, but as a server stack developer, this was a resource I used OFTEN.

I never fully grokked their SQL like language. I could do basic things daily without issue. However, I often had to hit the documentation to do anything more than a simple "find this" query.