We performed a comparison between Prometheus and Splunk Enterprise Security based on real PeerSpot user reviews.
Find out in this report how the two Application Performance Monitoring (APM) and Observability solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."It is a stable solution...Based on the feedback I have received from my colleagues in our company's IT department, the setup phase of the solution is relatively easy."
"The product is easy to maintain."
"Stability-wise, I rate the solution a ten out of ten."
"It is highly valuable as it serves as the foundation for our infrastructure monitoring tools."
"It has lots of APIs and libraries to integrate with any kind of language."
"The product has an easy-to-understand interface."
"The product's initial setup phase is very easy."
"Prometheus provides a flexible and adjustable querying and describing time, allowing for more responsive monitoring."
"It has virtual visualization, and other products do not."
"The most valuable feature is the incident dashboard, and the extensive use of correlation searches, which isn't available with a standard Splunk search package. This feature is important to me because it enables SOC analysts to do their job more efficiently and be able to investigate or mediate incidents at a faster pace."
"The most useful feature for me is the ability to create different kinds of alerts and set a different kind of denominator that will capture the real event. That is helpful for a power user like me."
"The most valuable feature is the DSS, also known as SPL, because it allows users to script advanced queries with limited knowledge."
"It has a drag-and-drop interface, so you don't need to know SQL or Java to construct a query on Splunk. The resolution time is about the same, but it took longer to discover the issue with ArcSight. Our previous solution took about an hour or more, but Splunk can do it within a few minutes or an hour at most."
"It is very easy to use and integrate. There are connectors for every technology."
"You can check up on security from the dashboards."
"The visibility is amazing with easy dashboard creation."
"The solution's error handling part could be improved."
"The solution has shortcomings regarding security monitoring-oriented features to support custom use cases, like out-of-the-box test scenarios and threat-related use cases of its users."
"One potential area for improvement would be fixing the occasional glitches and bugs."
"Lacks the ability to clusterize."
"The DSL could be improved."
"Prometheus requires improvement on the query side."
"The setup could be made easier for new users because it requires a bit of advance knowledge or experience."
"They could provide efficient logs in terms of clarity and ease of access similar to Datadog’s paid version."
"Better directions on search head clusters."
"I would like to see future development in terms of ML (Machine Learning)."
"The price has room for improvement."
"Splunk is query-based, which is not the case with most cybersecurity tools. It is based on search queries and can be difficult to use. It would be good if they can make it easier to understand how to create search queries. They can improve the knowledge base for better understanding. To create your dashboard, you need to have a search query. We have multiple firewalls in our company, and we need a dashboard for them. It would be helpful if a default firewall dashboard is included in Splunk to make monitoring easier. If a dashboard is available for a security device, the operation part will be more efficient. We won't have to follow a manual process for this."
"Search head clustering is often temperamental in its current state and should be improved, replaced by something better, or be reverted to search head pooling."
"Missing capability for audio/video and image processing."
"It could be more user friendly, in terms of the end-user experience."
"I feel as though a major focus of upcoming releases should be set on Machine Learning, Predictive Analytics, and I would enjoy to see more security focused add-ons and apps developed by the vendor."
Prometheus is ranked 9th in Application Performance Monitoring (APM) and Observability with 32 reviews while Splunk Enterprise Security is ranked 1st in Security Information and Event Management (SIEM) with 240 reviews. Prometheus is rated 8.4, while Splunk Enterprise Security is rated 8.4. The top reviewer of Prometheus writes "A very flexible open box that can be used vastly to do anything you need". On the other hand, the top reviewer of Splunk Enterprise Security writes "It has a drag-and-drop interface, so you don't need to know SQL or Java to construct a query ". Prometheus is most compared with Azure Monitor, New Relic, Dynatrace, Sentry and Honeycomb.io, whereas Splunk Enterprise Security is most compared with Wazuh, Dynatrace, IBM Security QRadar, Elastic Security and Microsoft Sentinel. See our Prometheus vs. Splunk Enterprise Security report.
We monitor all Application Performance Monitoring (APM) and Observability reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
