Splunk Enterprise Security Reviews & Product Details

Splunk Enterprise Security (ES) is a data-centric, modern security information and event management (SIEM) solution that delivers data-driven insights for full breadth visibility into your security posture so you can protect your business and mitigate risk at scale. With unparalleled search and reporting, advanced analytics, integrated intelligence, and prepackaged security content, Splunk ES accelerates threat detection and investigation, letting you determine the scope of high-priority threats to your environment so you can quickly take action. Built on an open and scalable data platform, you can stay agile in the face of evolving threats and business needs. Our extensive ecosystem of Splunk, partner, and community-built integrations as well as flexible deployment options ensure your technology investments are working in tandem with Splunk ES whilst meeting you wherever you are on your cloud, multi-cloud, or hybrid journey.

Seller

Cisco

Discussions

Splunk Enterprise Security Community

Solution Type

All-in-One

Overview by

Mike Tomita

Value at a Glance

Averages based on real user reviews.

Time to Implement

3 months

Return on Investment

18 months

View More Pricing Information

Top-Rated Alternatives

View All Alternatives

Splunk Enterprise Security Integrations

(14)

Integration information sourced from real user reviews.

G2 reviews are authentic and verified.

Here's how.

Rajat s.

SOC Specialist (SIEM SME)

Small-Business (50 or fewer emp.)

9/20/2023

"Splunk Enterprise security overview"

4.5/5

What do you like best about Splunk Enterprise Security?

It provides ability to integrate the log sources from different security devices,provides flexibility to add any of third intel tool to integrate and get the dynamic reputations through that,had great Gui to analyze the alerts and escalate it further for deep investigation.Easily can implement any of the organisation either small or big. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Cost price seems high so small enterprises having problem with their cost cutting,Need proper videos and materials to understand its platform otherwise nearly everything is okay and cover approx all kind of security devices ,Customer support is also a concern need instant support on any of the subjective matter so that organizations which have less experience or technical person can understand and work on this platform without any hesitation. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

It covers entire security devices and able to understand the logs so that integration is quite easy and have Good GUI so that an technical user can easily understand .Reports generation and creation is quite easy as well.

IT support all kind of logs so nearl no parser need to create parse the parameters over console.

Have proper guidance of device support and troubleshooting issues also support the cloud environment to fetch the logs for enterprises whoever has more dependency over cloud. Review collected by and hosted on G2.com.

Mohammad Riyaz S.

Mid-Market (51-1000 emp.)

9/16/2023

"Splunk Enterprise Security: Enhancing Threat Visibility"

4.5/5

What do you like best about Splunk Enterprise Security?

Splunk ES gives us the great visibility over the Infrastructure. By using ES we can detect every small details which are rolling over the network. The Threat Detection is very Impressive, by default ES comes with 2000+ correlation rules so that Incident detection can become easer. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

In Splunk ES the datamodeling part is very hardest thing. Once we map everything some correlation rules might not work as Expected so we need to change that too. Review collected by and hosted on G2.com.

sooraj s.

Specialist - Cloud Engineer

Small-Business (50 or fewer emp.)

11/2/2023

"Splunk ES can help you achieve continuous monitoring, support your security operations center (SOC)."

5/5

What do you like best about Splunk Enterprise Security?

It allows us to search through terabytes of data easily. From my three years of experience, it is the most effective cybersecurity tool to identify potential threats to systems. Splunk Enterprise Security is a must! Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Splunk Enterprise lacks automated data quality and validation features which can provide confidence in the accuracy and reliability of the insights derived from it. It lacks built-in energy-specific app which can meet the specific needs of an energy industry. In as much as Splunk Enterprise offers excellent visualization Review collected by and hosted on G2.com.

Monica S.

Marketing Manager

Small-Business (50 or fewer emp.)

1/30/2024

"Good product but tricky licensing"

3/5

What do you like best about Splunk Enterprise Security?

Once the application is setup, using the application is relatively easy with a low learning curve. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Licensing for splunk can be very expensive Review collected by and hosted on G2.com.

Yogendra V.

Senior Consultant

Enterprise (> 1000 emp.)

1/4/2024

"Empowering Insights: A Deep Dive into Splunk Intelligence Management"

3.5/5

What do you like best about Splunk Enterprise Security?

Splunk Intelligence Management excels in its ability to seamlessly aggregate, analyze, and derive actionable insights from diverse data sources, providing unparalleled visibility and decision-making capabilities for organizations. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

steep learning curve, resource-intensive setup, and the potential for high costs in larger deployments. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

It addresses issues such as data silos, inefficient threat detection, and manual analysis by providing a centralized platform for data aggregation, correlation, and streamlined intelligence workflows. This results in improved threat visibility, quicker response times, and enhanced overall cybersecurity posture. Review collected by and hosted on G2.com.

Omkar G.

Lead l Software testing

Enterprise (> 1000 emp.)

12/12/2023

"Splunk enterprise security good analytical tool"

4/5

What do you like best about Splunk Enterprise Security?

This tool has full visibility of all servers which helps to do effecient investigation. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Sometimes lots of unwanted data on a single screen required full attention while monitoring. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

It is giving the details of each server health, monitor it all the time and send alert if anything is done in the system,

It also helps to get the phishing alert and restrict the unauthorised user to get the system details.

It gives good analytical view of the system health and helps to investigate to find the root cause of the failure. Review collected by and hosted on G2.com.

Naveen K.

Security Analyst | SOC

Mid-Market (51-1000 emp.)

11/13/2023

"Splunk Enterprise Security: Great tool to work with Big Data"

4.5/5

What do you like best about Splunk Enterprise Security?

I like the features in the Splunk Enterprise Security such as Threat Intelligence , Incident Review and its investigations with the related logs . Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

My only dislike that Splunk integrations are bit harder as compared to other tools. Review collected by and hosted on G2.com.

Hardik D.

Sr. DevSecOps Engineer

Enterprise (> 1000 emp.)

11/20/2023

"Splunk Enterprise Security - SIEM"

4/5

What do you like best about Splunk Enterprise Security?

Splunk is the industry leader in SIEM solution for a reason. From Log Collection to Correlation & enrichment. Their quality of support is also good. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Cost is bit high as compared to other solutions and the ease of setting up or deploying any Splunk architecture components requires much more technical knowledge. Review collected by and hosted on G2.com.

Verified User in Automotive

Enterprise (> 1000 emp.)

4/26/2024

"Simple and powerful tool"

4.5/5

What do you like best about Splunk Enterprise Security?

its powerful tool in simple words and Splunk is giving the best outputs Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

there is nothing to say disadvantages about splunk Review collected by and hosted on G2.com.

Tejas B.

Senior Cloud Information Security Engineer

Mid-Market (51-1000 emp.)

10/9/2023

"Best platform for threat analysis"

5/5

What do you like best about Splunk Enterprise Security?

Threat intel feeds, all threat related dashboards to investigate security incident. Asset and identity dashboard helps to prioritise the incident from incident review dashboard. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Threat intel feed should be divided in different category. For example, bad IPs, bad domains, bad URLs instead of clubbing them together. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Dynamic asset and identity dashboard helps us to keep updated information about people at our organization which in turn helps us to prioritise the incident or alert of respective machine or people. Threat analysis using threat intelligence dashboard. All investigation is from one place that is the main advantage of this tool. Review collected by and hosted on G2.com.