Splunk Enterprise Security Pros and Cons: Top 5 Advantages and Disadvantages

Quick AI Summary Based on G2 Reviews

Generated from real user reviews

Users value the ease of use of Splunk Enterprise Security, enhancing their monitoring and log management experience. (15 mentions)

Users appreciate the easy integrations of Splunk Enterprise Security, enabling seamless connection with various platforms and systems. (13 mentions)

Users highlight the impressive threat detection capabilities of Splunk Enterprise Security, enhancing security focus and reducing false alarms. (13 mentions)

Users value the effective features of Splunk Enterprise Security, enhancing security analysis with comprehensive logs and insights. (12 mentions)

Users appreciate the user-friendly interface of Splunk Enterprise Security, enabling efficient monitoring and attractive dashboards. (11 mentions)

Users note that the high cost of Splunk Enterprise Security is a major drawback for smaller organizations. (17 mentions)

Users find the initial implementation complex, needing expert resources and time to onboard Splunk Enterprise Security effectively. (8 mentions)

Users find the complex implementation of Splunk Enterprise Security challenging, requiring extensive expertise and resources. (6 mentions)

Users find the complexity and extensive setup of Splunk Enterprise Security to be time-consuming and challenging. (6 mentions)

Users find the difficult learning curve of Splunk Enterprise Security a challenge for beginners and costly to set up. (6 mentions)

5 Pros or Advantages of Splunk Enterprise Security

1. Ease of Use

Users value the ease of use of Splunk Enterprise Security, enhancing their monitoring and log management experience.

See 15 mentions

See Related User Reviews

Jordan M.

Enterprise (> 1000 emp.)

4.0/5

"Splunk in a security environment"

What do you like about Splunk Enterprise Security?

Splunk is easy to use/configure and to find what i need. plus, the splunk employees with whom we work are very talented and skilled

Ernesto M.

Mid-Market (51-1000 emp.)

5.0/5

"Easy to integrate, understand the workflows and to manage."

What do you like about Splunk Enterprise Security?

Splunk ES is easy to manage and understard even if you are new with SIEMs. The workflows are easy to follow and the language the splunk uses is easy t

2. Easy Integrations

Users appreciate the easy integrations of Splunk Enterprise Security, enabling seamless connection with various platforms and systems.

See 13 mentions

See Related User Reviews

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Robust SIEM Solution with Strong Ecosystem Support"

What do you like about Splunk Enterprise Security?

✅ Powerful Search and Correlation Capabilities Splunk Enterprise Security excels at log aggregation, correlation, and threat detection. The Search Pr

Ernesto M.

Mid-Market (51-1000 emp.)

5.0/5

"Easy to integrate, understand the workflows and to manage."

What do you like about Splunk Enterprise Security?

Splunk ES is easy to manage and understard even if you are new with SIEMs. The workflows are easy to follow and the language the splunk uses is easy t

3. Threat Detection

Users highlight the impressive threat detection capabilities of Splunk Enterprise Security, enhancing security focus and reducing false alarms.

See 13 mentions

See Related User Reviews

Naushad T.

Enterprise (> 1000 emp.)

4.5/5

"Splunk ES- Scalable SIEM for Large Enterprise"

What do you like about Splunk Enterprise Security?

The best thing about Splunk is the deep visibility it provides across the environment, along with its strong ability to correlate large volumes of sec

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Splunk user behavior"

What do you like about Splunk Enterprise Security?

It's great because it uses smart technology to spot unusual behavior from users that might signal security issues. It helps find potential threats ea

4. Features

Users value the effective features of Splunk Enterprise Security, enhancing security analysis with comprehensive logs and insights.

See 12 mentions

See Related User Reviews

Muhammad R.

Enterprise (> 1000 emp.)

5.0/5

"Unmatched Visibility and Customization for Security Operations"

What do you like about Splunk Enterprise Security?

What I like most about Splunk Enterprise Security is its ability to give clear and comprehensive visibility across the entire environment. The correla

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Robust SIEM Solution with Strong Ecosystem Support"

What do you like about Splunk Enterprise Security?

✅ Powerful Search and Correlation Capabilities Splunk Enterprise Security excels at log aggregation, correlation, and threat detection. The Search Pr

5. User Interface

Users appreciate the user-friendly interface of Splunk Enterprise Security, enabling efficient monitoring and attractive dashboards.

See 11 mentions

See Related User Reviews

Muhammad R.

Enterprise (> 1000 emp.)

5.0/5

"Unmatched Visibility and Customization for Security Operations"

What do you like about Splunk Enterprise Security?

What I like most about Splunk Enterprise Security is its ability to give clear and comprehensive visibility across the entire environment. The correla

RUDRA P.

Enterprise (> 1000 emp.)

5.0/5

"Splunk User Behavior Analytics Review"

What do you like about Splunk Enterprise Security?

Splunk User Behavior Analytics establishes baseline behaviors for users, devices, and applications using unsupervised machine learning algorithms. It

5 Cons or Disadvantages of Splunk Enterprise Security

1. Expensive

Users note that the high cost of Splunk Enterprise Security is a major drawback for smaller organizations.

See 17 mentions

See Related User Reviews

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Robust SIEM Solution with Strong Ecosystem Support"

What do you dislike about Splunk Enterprise Security?

❌ Learning Curve The flexibility of SPL is a double-edged sword. New analysts often struggle with query writing and alert customization unless they h

Ernesto M.

Mid-Market (51-1000 emp.)

5.0/5

"Easy to integrate, understand the workflows and to manage."

What do you dislike about Splunk Enterprise Security?

Might be very expensinve depend of how much data you are ingesting.

2. Complex Setup

Users find the initial implementation complex, needing expert resources and time to onboard Splunk Enterprise Security effectively.

See 8 mentions

See Related User Reviews

Naushad T.

Enterprise (> 1000 emp.)

4.5/5

"Splunk ES- Scalable SIEM for Large Enterprise"

What do you dislike about Splunk Enterprise Security?

The initial implementation is complicated and requires significant expertise, time, and resources. In our case, we had to extend the contract to a thi

Muhammad R.

Enterprise (> 1000 emp.)

5.0/5

"Unmatched Visibility and Customization for Security Operations"

What do you dislike about Splunk Enterprise Security?

What I dislike about Splunk Enterprise Security is that some of its features can be quite resource intensive. The platform is powerful, but it sometim

3. Complex Implementation

Users find the complex implementation of Splunk Enterprise Security challenging, requiring extensive expertise and resources.

See 6 mentions

See Related User Reviews

Naushad T.

Enterprise (> 1000 emp.)

4.5/5

"Splunk ES- Scalable SIEM for Large Enterprise"

What do you dislike about Splunk Enterprise Security?

The initial implementation is complicated and requires significant expertise, time, and resources. In our case, we had to extend the contract to a thi

Sanket S.

Mid-Market (51-1000 emp.)

5.0/5

"Navigating insider threats using Splunk"

What do you dislike about Splunk Enterprise Security?

Setting up and configuring this solution can be complex and time consuming. It may generates false positives, especially in the early stages of deplo

4. Complexity

Users find the complexity and extensive setup of Splunk Enterprise Security to be time-consuming and challenging.

See 6 mentions

See Related User Reviews

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Splunk user behavior"

What do you dislike about Splunk Enterprise Security?

it can be complex and require a lot of setup.

Sanket S.

Mid-Market (51-1000 emp.)

5.0/5

"Navigating insider threats using Splunk"

What do you dislike about Splunk Enterprise Security?

Setting up and configuring this solution can be complex and time consuming. It may generates false positives, especially in the early stages of deplo

5. Difficult Learning

Users find the difficult learning curve of Splunk Enterprise Security a challenge for beginners and costly to set up.

See 6 mentions

See Related User Reviews

Alexandra V.

Mid-Market (51-1000 emp.)

4.5/5

"Splunk Enterprise Security is the master log data collection and threat detection"

What do you dislike about Splunk Enterprise Security?

Advanced security settings not easy especially when new with the system. The support team deseves merit for being helpful and always available when in

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Neutral Experience"

What do you dislike about Splunk Enterprise Security?

Learning Curve is a steep. Take a bit of time to undersant everything

Top-Rated Alternatives

View All Alternatives

G2 reviews are authentic and verified.

Here's how.

Mohammed K.

Senior Engineer -Cyber Security

Enterprise (> 1000 emp.)

10/1/2022

"User Friendly Security Monitoring and Response Tool"

5/5

What do you like best about Splunk Enterprise Security?

Searching, Apps for each type of devices, Incident Review and Response, Asset Center are few of the excellent features in Enterprise Security.

All these features are very user friendly and provide the easy incident investigation interface. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Correlation of Packet data and End Point Detection and Response data with event logs are not the feature in Enterprise security. Hence lag the complete security analytics of organization data of each layer. Review collected by and hosted on G2.com.

Sherry K.

Network Administrator

Mid-Market (51-1000 emp.)

8/13/2022

"Prevents threats and minimizes system failure cases"

4.5/5

What do you like best about Splunk Enterprise Security?

I like splunk ES because it continuously monitors our system for potential threats and alerts us in real time so that we are able to prevent the threats before they ness up our system. I like its access anomalies dashboard which allows us to identify any breach and suspicious activity from users, this makes it easy for us to prevent any unauthorized and suspicious access and helps us protect our IT infrastructure and keep our sensitive data safe. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

I don't like that i can only monitor the privileged accounts for suspicious activity or access breach it would be very helpful if i can monitor all accounts thisbwould hwlp see which account have anomalies and may pose a threat to our system. Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

We jave deployed Splunk Enterprise Security to monitor our IT infrastructure which consists of servers, networks and web applications. It help us to see monitor the system 24/7 and identify all threats and anomalies sobthat ee are able to fix them before they affect our system. Splunk ES allows us also to monitor access logs and suspicious access and breaches that would compromise our sensitive Company information and data Review collected by and hosted on G2.com.

Verified User in Banking

Enterprise (> 1000 emp.)

6/30/2022

"Urged to filter Security data to manage the costs can be dangerous or fatal"

1.5/5

What do you like best about Splunk Enterprise Security?

very nice visualization and Analytics Engine with easy to create Dashboards, many 3rd party integrations and a vast and active community to support in case spluk support did not answer. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Lack of out-of-the-box features, another Toolbox additional to all other Splunk "tools" rather than an integrated Product. Integration, maintenance and customization effort needed are very high. The subscription fee is exploding, and we need to filter now the ingested logs dramatically ... which adds a new vulnerability. Splunk products have too many product vulnerabilities themself for a Security Product. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

Check needs carefully does it come with SES (supported) or download community (no support) Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Detect security treads and hacker attacks, movements in the system, mainly based on MITRE ATT&CK and vulnerabilities found i.e. log4j by ingested and filtered logs. Review collected by and hosted on G2.com.

Kartik S.

Information Security Engineer

Enterprise (> 1000 emp.)

9/2/2022

"One of the Best SIEM in industry"

5/5

What do you like best about Splunk Enterprise Security?

It's easy to deploy, the agent /forwarder is very lightweight, and it can parse almost all log sources, which makes it the best in the industry. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Customer service needs improvement and the tool is a bit expensive, apart from that there are no issues with this product. Review collected by and hosted on G2.com.

Mubeen A.

SOC - Security Engineering Lead

Mid-Market (51-1000 emp.)

4/30/2022

"Splunk Enterprise Security Review"

5/5

What do you like best about Splunk Enterprise Security?

Great product for security monitoring and reporting. Blazing fast searches, superb user interface and excellent visualization options. Also, reporting and other features are great as well. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Scalability is an issue and licensing costs are very high which makes this great tool hard to procure for SMEs. Also, support can improve to enhance the overall experience. Review collected by and hosted on G2.com.

Seereeram D.

Information Technology Security Specialist

Enterprise (> 1000 emp.)

12/7/2021

"Enterprise Security a Security Team Must Have"

5/5

What do you like best about Splunk Enterprise Security?

Enterprise Security has a built-in Risk Analysis Dashboard. This allows an executive-level overview of what is going on in an understandable format which can be viewed by non-technical personnel. It incorporates MITRE, NIST as well as CIS identifiers for threat activity, allowing high-level classification of assets, identity, and communication behavior. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

If you are deploying this product for yourself, it is quite a challenge. Enterprise Security offers the single pane of glass for your investigation and monitoring needs, but to get everything onboarded can be daunting. The identity and assets enrichment was not straightforward and required a lot of manual work. For it to be optimized for full benefit, there is a layer of complexity along the journey Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Splunk Enterprise Security allows us the ability to classify activity in our networks, mapping it to NIST, CIS and Mitre attack categories. This visibility provides easy identification of possible threat activity and the ability to drill down into this to perform investigation and analytics. Once collecting the necessary information this provides excellent coverage into activity. Review collected by and hosted on G2.com.

B M.

Senior IT Security Engineer

Enterprise (> 1000 emp.)

8/4/2022

"Wow!! Wonderful experience!! Everything you need at the tip of your fingers."

5/5

What do you like best about Splunk Enterprise Security?

All the features were great. From the correlation rules to all the details in the reporting were actually great. Indeed a useful product when it comes to granular security. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

Nothing to be disliked of. However it could have been great if they had a handy dashboard template for different enterprises. Review collected by and hosted on G2.com.

Seereeram D.

IT Security Specialist

Enterprise (> 1000 emp.)

11/23/2021

"World Class Threat Intelligience, Analytics and Risk Monitoring"

5/5

What do you like best about Splunk Enterprise Security?

Splunk Enterprise Security allows us to actively perform threat intelligence and analysis while providing results in an easy-to-understand manner. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

As with Splunk in general proper configuration and deployment requires a steep learning curve. In general, this is my only issue with Splunk, the complexity of configuration and deployment. Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

Ensure teams are appropriately trained before implementation Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

Splunk Enterprise Security has provided us with deeper insight into our network. It has addressed a gap in security intelligence by offering links to multiple intelligence feeds while performing active threat analytics and risk-based reporting. Splunk Enterprise Security has allowed us to identify possible incidents on our networks while allowing a deep level of investigation into occurrences. Review collected by and hosted on G2.com.

Rohit S.

Senior Technical Account Manager

Mid-Market (51-1000 emp.)

1/17/2018

Business partner of the seller or seller's competitor, not included in G2 scores.

"Splunk - Looking for troubles :)"

5/5

What do you like best about Splunk Enterprise Security?

Splunk is a great SIEM solution and its integration with almost any network and security device makes it a unique player in market. Its apps and super fast search options are best in class Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

No problems with splunk so far. Its been working very good Review collected by and hosted on G2.com.

Recommendations to others considering Splunk Enterprise Security:

great tool for SIEM Review collected by and hosted on G2.com.

What problems is Splunk Enterprise Security solving and how is that benefiting you?

we are integrating our network security devices to corelate logs and making case studies for any security violations. its one of the best part of our SOC Review collected by and hosted on G2.com.

Nikhil P.

Engineer trainee

Enterprise (> 1000 emp.)

11/5/2021

"Smart, efficient and powerful tool to gather and organize raw logs from multiple sources."

4.5/5

What do you like best about Splunk Enterprise Security?

The best feature would be the user interface which is easy to navigate and understand. A little training on how to use the Splunk query language, and you are good to go! Easy to download or share the logs across various platforms and has a very insightful pictorial representation of data in graphs, tables, and various other forms. Review collected by and hosted on G2.com.

What do you dislike about Splunk Enterprise Security?

It has an overwhelming amount of features that may go unused in some cases. It would be better if Splunk could be altered according to a user's needs. Splunk doesn't use MFA as far as I know, so it would be better if it is included. If queries aren't precise, your job (output) will be running for a long time. Review collected by and hosted on G2.com.